Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4_W8XMdW4lEBwWlKQhYMSAItMvc.roa
File: 4_W8XMdW4lEBwWlKQhYMSAItMvc.roa (raw, json)
Hash identifier: TIvuOfj8kzeI4iftDHupQeSiJXYalN2b7B9EY9x4QP0=
Subject key identifier: E3:F5:BC:5C:C7:56:E2:51:01:C1:69:4A:42:16:0C:48:02:2D:32:F7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 74CFCBF5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4_W8XMdW4lEBwWlKQhYMSAItMvc.roa
Signing time: Tue 22 Mar 2022 19:10:32 +0000
ROA not before: Tue 22 Mar 2022 19:10:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1959775221 (0x74cfcbf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 22 19:10:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e3f5bc5cc756e25101c1694a42160c48022d32f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6a:4b:38:ee:83:c9:59:cf:88:2b:18:dd:5a:
4a:08:ae:1d:22:59:e0:ee:fd:a9:79:b6:5f:78:bf:
aa:86:d2:28:de:b6:58:09:6d:ea:6a:50:1c:93:76:
0e:ac:af:b8:b4:d0:65:db:af:81:b7:d3:36:41:4d:
61:ae:7e:84:f5:62:ef:a2:b8:a7:19:d8:83:94:19:
3e:18:2a:56:a1:43:22:b3:c8:b8:1a:7b:c7:51:ff:
76:c0:f2:1b:df:70:e6:82:c7:62:d0:95:55:f3:82:
9f:b6:b7:7e:0e:b7:f5:2e:eb:db:7c:17:ae:d0:f0:
46:31:a7:bf:16:40:3b:df:b1:73:63:53:31:5d:92:
fe:2d:d5:a5:45:93:be:8f:c5:ee:4b:8a:6c:33:47:
5a:c0:1c:c1:04:f5:31:97:aa:83:a7:46:22:5c:10:
ca:9c:28:e1:d9:c1:fa:bd:31:0c:63:0c:4c:01:b5:
74:e7:c4:c3:b1:f5:f0:03:0f:76:c8:f5:dd:36:cf:
40:39:4d:d7:73:0e:4b:6e:e2:21:b4:9c:d5:d4:6c:
f9:2f:5f:59:69:15:99:b5:93:7b:ec:2e:14:5d:39:
eb:d1:16:97:ba:16:05:d3:ae:05:4c:70:a5:7d:61:
ed:91:5e:99:b1:11:6d:fc:8a:5e:4a:fe:37:96:ba:
73:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:F5:BC:5C:C7:56:E2:51:01:C1:69:4A:42:16:0C:48:02:2D:32:F7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4_W8XMdW4lEBwWlKQhYMSAItMvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8f:8c:9f:ba:94:cd:ac:47:23:ec:f8:e0:2d:62:c9:f6:4b:34:
f0:c7:3b:3d:37:ba:f0:76:65:4e:31:c0:26:29:b8:d0:61:bd:
64:df:4d:fe:ed:8e:49:27:5c:59:d8:04:f9:0a:45:84:10:73:
cc:37:51:e4:64:5b:cb:a1:1b:dc:84:34:5b:62:64:63:67:9a:
ac:7f:c8:ae:bc:2e:4b:67:db:da:0c:eb:81:8a:c0:d8:fa:e1:
79:b9:76:f1:ec:58:01:f0:aa:8d:c6:6a:89:4f:02:7a:83:2c:
85:0c:69:6b:58:3c:db:a0:b4:0f:87:52:75:02:0b:e2:62:fc:
73:7e:a4:a9:5e:93:6a:ca:40:00:fc:d2:2a:54:a4:0f:3d:a5:
7e:d1:78:3f:34:c8:cd:7e:fd:7f:f8:cd:20:0a:55:30:c0:17:
b3:8a:18:ea:26:0b:ae:cb:42:7b:d7:60:5e:1f:19:6a:2a:e5:
d4:6a:f4:7e:fd:30:f7:c4:08:ed:ec:03:af:fb:2f:44:2a:c6:
ef:3e:11:af:48:d7:f6:52:28:4e:d7:f3:59:0c:37:c2:ff:ff:
cd:9d:f2:1b:97:2b:ca:84:ea:c3:76:c0:8b:9e:99:c1:4b:2a:
15:6d:5d:15:3d:64:86:15:64:16:48:45:3f:59:ff:92:3e:b0:
5e:61:88:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:45:24 2025 by rpki-client