Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4m7Xw0Dhbl5oy_t3F3_zWekaNik.roa
File: 4m7Xw0Dhbl5oy_t3F3_zWekaNik.roa (raw, json)
Hash identifier: OtqWG1ugVGtT8JpZd3hN42iyKIgI5lCW9AgqZ3ccbuA=
Subject key identifier: E2:6E:D7:C3:40:E1:6E:5E:68:CB:FB:77:17:7F:F3:59:E9:1A:36:29
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 71C2CF78
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4m7Xw0Dhbl5oy_t3F3_zWekaNik.roa
Signing time: Fri 11 Mar 2022 23:11:28 +0000
ROA not before: Fri 11 Mar 2022 23:11:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1908592504 (0x71c2cf78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 11 23:11:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e26ed7c340e16e5e68cbfb77177ff359e91a3629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:79:b2:ab:f9:73:21:ae:f2:ba:b6:c1:2c:71:
37:90:68:d9:e2:85:c1:03:34:d3:56:5c:8c:f6:a3:
62:e2:b3:b3:2e:43:f8:41:69:dd:17:32:0d:68:a5:
25:bb:7c:d5:06:3a:37:c8:c0:12:16:fe:fb:58:34:
44:0f:6a:6f:67:c7:16:ba:f8:a5:fa:a8:8f:a6:9f:
cf:ca:7c:a5:17:ca:54:1f:b2:e4:c3:f5:9f:c2:de:
8d:1c:cc:35:74:fb:ee:2e:eb:e6:40:69:83:0b:f5:
2b:9f:68:73:78:f0:c9:d1:39:ea:4f:61:12:67:b3:
be:6f:f3:02:ce:f2:a0:13:95:24:c3:9d:cf:7a:d5:
b1:8c:58:8e:6b:78:84:45:44:8a:75:2c:87:6c:07:
43:b7:23:10:48:f4:4b:cf:23:05:c1:3c:30:52:64:
bd:31:ca:58:de:f3:ca:4e:74:66:f1:56:50:93:50:
8a:3d:d7:c2:b0:c3:c3:d1:24:7a:ce:54:31:4e:de:
1c:13:72:f2:c9:be:95:c8:cb:e1:ca:c8:16:d2:ab:
c8:fc:6d:aa:6d:fe:99:a7:9f:a1:4d:b0:6d:62:a2:
ef:93:09:71:8a:2b:e6:1d:b8:5e:65:21:a7:fd:88:
3f:77:c8:ef:77:39:05:88:a7:de:d0:05:46:5c:fd:
ff:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:6E:D7:C3:40:E1:6E:5E:68:CB:FB:77:17:7F:F3:59:E9:1A:36:29
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4m7Xw0Dhbl5oy_t3F3_zWekaNik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
16:b7:2c:06:a4:fb:5c:de:1f:e1:4b:bd:68:e3:07:84:5d:63:
17:7e:d9:12:2e:1a:83:91:7b:00:0b:34:f8:1d:0d:a8:3e:9f:
0f:ed:71:7f:68:36:ff:be:5e:0d:71:c4:cf:5c:12:44:06:31:
14:5a:d6:51:46:55:0e:93:d1:87:66:d2:a9:d5:1c:f8:3e:c4:
32:45:db:6c:71:11:d8:85:2f:41:a2:d0:10:58:d0:b7:38:27:
2b:1a:45:30:8a:df:65:73:38:ba:62:fc:b1:3a:47:e7:3b:46:
dd:ab:24:75:15:e4:25:28:2a:b8:db:a2:11:df:e7:b5:f6:b4:
78:72:9a:87:28:7d:4c:72:09:aa:82:39:23:30:54:9b:3a:c8:
c6:b9:c5:e6:04:76:74:d7:f8:41:41:51:79:28:61:77:61:52:
60:16:6d:f0:99:d6:bc:4f:4b:35:6a:03:0a:bd:04:18:11:84:
18:95:1f:66:61:11:f5:9e:f5:72:08:f7:6a:65:7c:d8:d2:49:
e1:14:da:0d:d9:a6:5f:20:e9:3f:5c:7e:f9:d7:e7:37:bd:ce:
a9:2c:cb:a0:ec:44:0f:2c:37:24:7e:11:48:03:ec:1a:6d:c7:
03:6a:0a:4b:2f:dd:a3:cc:14:c5:22:18:f9:a9:66:88:1f:2b:
67:15:8e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:40:51 2025 by rpki-client