Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4ZkjHMKs49HLh6M4TBZ62iRJVHs.roa
File: 4ZkjHMKs49HLh6M4TBZ62iRJVHs.roa (raw, json)
Hash identifier: UKLge2i0xhvEN9ufNkiuVXCZxRglQ/7ZXFx3I/m1Css=
Subject key identifier: E1:99:23:1C:C2:AC:E3:D1:CB:87:A3:38:4C:16:7A:DA:24:49:54:7B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 71448331
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4ZkjHMKs49HLh6M4TBZ62iRJVHs.roa
Signing time: Thu 10 Mar 2022 09:09:40 +0000
ROA not before: Thu 10 Mar 2022 09:09:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1900315441 (0x71448331)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 10 09:09:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e199231cc2ace3d1cb87a3384c167ada2449547b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9b:d2:76:a7:77:c3:ad:04:2b:cb:7f:5e:0b:
bb:5a:90:31:85:77:81:c9:b0:75:2f:09:a8:68:1a:
07:f2:ae:13:7c:cb:85:21:70:93:6e:35:60:02:e4:
ed:70:2f:07:3a:a2:da:e9:73:d7:c2:a7:bc:d7:b9:
d6:45:0e:a4:84:20:66:47:91:5e:94:25:55:fa:89:
d0:3d:4c:67:07:07:19:b0:64:08:6b:da:03:f1:22:
76:0a:a9:1e:73:03:cd:1d:fb:d0:5b:48:f9:f5:46:
eb:7b:82:a6:7f:09:98:65:d2:3b:ff:52:46:10:5a:
ce:84:06:d3:11:4f:ef:65:ca:06:e2:2d:3b:cc:65:
4e:39:d7:34:29:d0:0e:4e:2b:44:d3:31:c3:bd:f6:
32:95:c9:68:bb:98:b8:ea:34:10:7a:e8:04:48:98:
6a:8d:6a:80:5c:a1:7c:41:1b:f4:33:bf:71:81:e0:
ef:0e:f2:e0:41:49:f7:74:5f:19:a1:f1:b8:16:bb:
78:2e:40:8d:02:37:20:d8:d5:b2:4c:07:fc:53:05:
74:98:4d:6c:a2:ab:92:e6:66:9f:22:a9:7d:10:f5:
a2:e0:5a:a6:2a:99:4d:a6:1f:df:d7:45:84:b1:06:
97:e0:6e:ca:af:77:b5:61:4b:30:7b:2a:c0:c6:9c:
6b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:99:23:1C:C2:AC:E3:D1:CB:87:A3:38:4C:16:7A:DA:24:49:54:7B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4ZkjHMKs49HLh6M4TBZ62iRJVHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
17:4b:93:3c:d6:0a:ad:59:ea:72:cf:44:97:a3:b1:e2:46:8d:
7c:99:df:b2:15:25:85:04:f6:09:a5:16:14:94:76:9c:63:be:
f5:74:11:79:bf:49:7c:74:ce:6e:d5:f2:e7:1e:84:be:75:67:
f0:d7:a2:f9:91:c6:b6:56:00:63:82:6c:25:7c:b8:62:b6:62:
7a:4d:8a:65:15:5a:00:0f:89:f6:01:d5:8d:60:21:8c:19:b0:
1b:fd:be:8f:24:0f:c2:57:87:31:c7:3c:2e:41:3b:c0:7c:c6:
c8:c4:09:1c:f4:c6:7c:d0:43:75:1a:b2:a3:86:8f:ce:a1:57:
d3:40:cb:66:45:d4:67:27:b8:8e:26:f4:cf:2c:11:05:37:5d:
86:c3:7c:60:52:f1:a5:86:46:f8:28:99:c9:29:6c:ea:17:da:
e8:6d:21:35:0f:ea:29:9d:85:51:b8:0f:aa:97:e3:11:e2:88:
6e:c0:da:1d:d5:58:8e:30:61:bf:66:96:ba:1b:f8:05:c9:9a:
e8:d9:0d:b8:d8:77:6f:06:38:f0:ca:a7:61:ff:6f:64:16:35:
00:be:8e:89:96:a4:87:cf:fd:fd:e6:52:a8:73:27:ff:52:cc:
6c:f7:f6:e9:ec:e1:73:d6:2d:10:00:2d:98:80:a9:1a:6d:53:
7b:b3:0a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 22:15:53 2025 by rpki-client