Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4OUjpsBrAhokI0G4LA3WtwRNAQo.roa
File: 4OUjpsBrAhokI0G4LA3WtwRNAQo.roa (raw, json)
Hash identifier: yw/nIReSz3XU3Y3C1a+x7SZtN/dQwCaAY48u7i0ZER0=
Subject key identifier: E0:E5:23:A6:C0:6B:02:1A:24:23:41:B8:2C:0D:D6:B7:04:4D:01:0A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 667C25FA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4OUjpsBrAhokI0G4LA3WtwRNAQo.roa
Signing time: Sun 30 Jan 2022 23:08:24 +0000
ROA not before: Sun 30 Jan 2022 23:08:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1719412218 (0x667c25fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 30 23:08:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e0e523a6c06b021a242341b82c0dd6b7044d010a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8c:c3:53:3c:54:7a:9d:52:13:82:ee:16:a0:
8a:c8:4a:3e:85:3e:71:82:77:b7:08:11:78:e6:da:
84:88:75:c1:0a:e1:18:d0:ec:d0:58:80:9a:69:13:
23:1a:34:a6:97:43:96:e1:e1:f2:91:6c:11:08:80:
c5:86:19:e2:14:59:74:51:39:7e:91:a2:40:26:fa:
81:e4:9a:af:0c:71:9b:4c:85:3c:0a:1a:69:dc:4c:
f7:0a:0c:e3:c8:3f:6f:45:84:f8:c1:84:32:c6:f2:
42:17:48:2c:77:de:af:9d:88:a5:d8:ea:20:1e:9e:
0a:46:aa:f7:b5:16:f3:7d:52:92:cb:d4:94:f8:af:
09:f9:2f:06:14:6f:69:99:b9:37:74:69:ef:8f:2e:
c1:b1:16:89:84:f0:75:2b:44:dd:6b:98:84:40:65:
78:55:ba:c9:c0:7b:b9:ed:06:18:87:e9:7c:ec:98:
55:e5:1c:e9:a1:3e:46:33:5c:fe:41:6a:a6:2d:0c:
8e:24:e1:ef:b4:f7:fe:03:7c:a8:4e:54:93:fc:39:
1a:99:9b:7f:88:57:c1:f7:27:e3:82:75:9c:92:4d:
44:40:25:b0:5f:9a:28:2c:3f:a0:f9:31:dc:11:a7:
e7:b4:84:c3:46:ba:59:52:3a:c5:46:14:63:b2:b0:
69:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E5:23:A6:C0:6B:02:1A:24:23:41:B8:2C:0D:D6:B7:04:4D:01:0A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4OUjpsBrAhokI0G4LA3WtwRNAQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3d:89:b9:30:da:28:68:4f:37:05:cf:22:0f:1b:c7:cb:5b:25:
97:c4:9c:d7:4f:8b:4d:43:2b:18:be:a1:2c:43:ad:d8:01:b1:
0c:de:9e:36:fd:47:9f:cf:c6:7a:48:4f:2c:d3:bd:66:29:8a:
a1:59:54:d1:a2:40:cb:20:ca:ca:b1:fc:6d:c9:a1:a2:ff:6f:
cc:75:dc:bd:4d:59:4b:8e:4b:a0:01:bf:ad:0f:e6:ea:5c:09:
13:23:8d:75:82:bb:87:61:db:33:f3:e1:6d:c1:da:42:d8:3a:
4e:09:1e:99:17:dd:33:d3:76:33:4a:5d:ba:c2:1e:f4:7c:20:
1a:ae:b6:fc:9e:80:c6:31:3d:0b:6f:a6:55:c6:95:2a:80:74:
b7:aa:0c:83:cb:25:01:be:aa:c2:c3:46:13:ef:a5:19:8b:2d:
7a:85:ea:d8:98:a1:34:b7:cf:cb:5d:af:87:5b:d9:3d:bb:f2:
fb:45:51:c3:8c:6b:a2:62:b4:59:8d:cc:6a:9c:09:62:79:8e:
da:00:3c:53:cc:fb:60:99:0e:ae:20:a1:ee:06:16:11:b7:26:
5d:75:9d:fc:74:74:cc:24:58:18:75:59:59:88:d9:69:a3:80:
7f:fb:a6:a1:62:af:cf:2b:ee:d7:22:12:8e:e6:0b:d9:9b:67:
68:ce:3a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:23:51 2025 by rpki-client