Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4Ct__S1jlbg4b07OOUHXT8eXcmc.roa
File: 4Ct__S1jlbg4b07OOUHXT8eXcmc.roa (raw, json)
Hash identifier: 7ycEzyzNjU/EgIatVMTI9jVJvSfNfV+W3bwUX9Kq1RA=
Subject key identifier: E0:2B:7F:FD:2D:63:95:B8:38:6F:4E:CE:39:41:D7:4F:C7:97:72:67
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182F8C3442A12788F1AFF32E32F54FC4361
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4Ct__S1jlbg4b07OOUHXT8eXcmc.roa
Signing time: Thu 01 Sep 2022 11:15:22 +0000
ROA not before: Thu 01 Sep 2022 11:15:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f8:c3:44:2a:12:78:8f:1a:ff:32:e3:2f:54:fc:43:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 1 11:15:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e02b7ffd2d6395b8386f4ece3941d74fc7977267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:85:8e:c7:4b:48:43:be:a8:56:17:61:7d:bf:
89:ae:3d:7c:0c:8f:e0:df:4c:4b:82:bc:c0:af:c0:
c7:4f:ae:92:6a:3f:93:d7:b2:93:83:5b:1b:65:49:
b2:da:fc:9e:3a:e7:3d:ef:8a:11:aa:14:18:68:7d:
be:62:25:3c:a6:89:c3:0f:04:7d:61:c5:fa:71:8e:
92:14:7f:c0:6c:35:2b:47:be:89:7e:ca:a4:a1:0b:
36:e8:2e:cc:af:76:fe:7a:d4:88:25:1d:c7:9a:59:
10:dd:8a:1d:47:c2:f1:61:59:e6:62:bd:d1:0c:e3:
fa:7d:ba:94:2b:90:f5:7e:53:a2:76:f3:31:b5:10:
63:d6:56:7c:bf:23:ac:41:6b:15:45:32:a8:df:06:
7b:8c:91:cb:c7:ee:a1:ac:a1:4d:7c:dc:15:00:cc:
79:ca:01:f1:3a:ca:ca:f9:be:7a:d3:51:04:96:82:
66:ae:10:ec:16:23:d7:4d:4f:ac:82:49:ed:3a:af:
08:0b:40:56:35:d4:9d:62:b0:c9:38:52:5b:0b:39:
c8:ed:af:c8:fb:2c:3f:5b:d7:9a:a7:f6:94:5c:1d:
b4:03:26:45:a2:d2:75:22:2e:9d:19:03:aa:6f:19:
11:2a:3b:7c:74:fe:78:8d:04:da:2f:d1:d1:0a:6c:
5d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:2B:7F:FD:2D:63:95:B8:38:6F:4E:CE:39:41:D7:4F:C7:97:72:67
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4Ct__S1jlbg4b07OOUHXT8eXcmc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
92:93:d8:a8:96:10:c2:f5:72:47:29:aa:39:35:3c:bc:77:a0:
49:f4:19:dd:34:b1:64:86:b6:cc:06:e7:1e:67:b4:2d:22:51:
ef:f5:41:14:35:95:0d:75:f0:5a:d8:68:83:72:4a:07:e1:bf:
7a:9d:51:d2:68:88:3d:4e:f6:7a:76:c6:42:60:f1:38:28:16:
71:6e:03:c1:b8:d0:22:b9:3f:62:91:8f:12:20:50:e8:a9:6b:
5d:ab:cf:5b:14:1e:27:b7:99:7a:d5:6d:f5:f9:3e:36:dc:40:
a9:55:f3:ed:a7:4d:88:37:70:be:c8:23:d4:78:7a:39:d5:92:
b8:46:2a:2f:cb:b7:2e:a5:28:d1:70:0c:c1:22:61:fd:21:c1:
69:cd:db:26:97:d0:cb:e0:a1:73:41:87:a3:fd:3f:51:a0:7a:
39:ac:f5:fb:1b:24:4b:a9:58:98:09:eb:c1:4c:00:f0:ed:0d:
23:ed:b6:5b:7f:68:7c:01:2b:5a:c2:4f:b0:6d:19:63:4e:72:
e9:01:6f:c4:47:22:6e:f1:d3:fb:22:f3:a9:cf:96:9d:3d:84:
e6:d1:db:90:9b:7d:45:ca:21:a9:31:b9:f0:43:bb:11:1f:4e:
8b:05:d4:e3:bf:bc:f8:d7:d7:68:00:df:16:d2:bf:68:c8:db:
14:13:48:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:43:22 2025 by rpki-client