Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4qQXnIRGkqkGsCK7nBaZ_Gn6W2c.roa
File: 4qQXnIRGkqkGsCK7nBaZ_Gn6W2c.roa (raw, json)
Hash identifier: EdXWW3heJ6VTz9tiAXf9o+lGfZMLBOmw3KuZp2dGvU4=
Subject key identifier: E2:A4:17:9C:84:46:92:A9:06:B0:22:BB:9C:16:99:FC:69:FA:5B:67
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7335BE58
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4qQXnIRGkqkGsCK7nBaZ_Gn6W2c.roa
Signing time: Thu 17 Mar 2022 10:11:25 +0000
ROA not before: Thu 17 Mar 2022 10:11:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1932901976 (0x7335be58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 17 10:11:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e2a4179c844692a906b022bb9c1699fc69fa5b67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:32:cd:a4:34:29:e0:b6:83:b1:59:34:17:a5:
bb:5c:e1:13:d8:59:9c:31:0c:dc:79:ea:de:8e:dc:
15:bc:ee:50:92:ed:0e:6d:d3:e8:a8:b6:82:3b:25:
c6:5b:bf:f6:b2:a0:17:d5:8c:24:88:61:dd:0b:03:
c2:0b:f0:c3:29:41:48:3e:1d:4e:05:df:36:f0:08:
1e:3e:9d:c3:f5:d4:f0:b0:57:2b:38:c0:2d:cb:84:
26:f6:55:47:57:b0:e6:52:7c:d9:db:3a:ea:5a:84:
9a:fb:32:96:0c:fa:5e:67:47:a1:06:07:27:e8:6a:
b6:8c:5c:d4:9f:a5:b6:90:76:a0:4f:e3:ee:d5:1d:
17:28:22:8e:d9:68:e7:ee:21:e4:6f:29:37:ea:f3:
00:41:a5:14:f1:62:20:1c:d5:5b:5f:9a:4c:3d:3e:
4b:dd:b2:64:a4:84:92:88:dd:73:8b:63:7b:18:5c:
0d:10:c2:08:ba:35:94:d3:c2:16:db:22:4a:11:68:
3e:6a:a7:7e:64:62:63:d6:41:fc:be:61:d5:76:72:
59:43:2e:e8:46:91:cf:84:a0:aa:c1:45:dd:17:1d:
0e:93:01:d7:2e:36:fb:84:e0:f8:22:7a:f5:88:69:
bd:12:b1:d0:ad:58:e0:96:2f:01:dd:c0:6e:4b:83:
99:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A4:17:9C:84:46:92:A9:06:B0:22:BB:9C:16:99:FC:69:FA:5B:67
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4qQXnIRGkqkGsCK7nBaZ_Gn6W2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8b:ae:3b:1f:45:84:37:b2:3e:26:9f:6e:3b:7b:d5:78:af:62:
64:ba:51:1a:c4:40:c2:d3:50:91:51:79:ad:08:23:79:7e:f4:
26:22:05:b0:5b:c5:25:04:ec:1b:b4:1b:e7:87:90:b8:f7:60:
10:58:8b:76:c1:e7:a0:e1:6e:f0:08:8e:6e:82:36:60:0c:7e:
d1:7f:46:47:c4:b5:10:b3:70:30:7f:be:ee:e3:e7:64:4e:fd:
c2:9b:6f:5d:47:c8:38:c5:06:5a:5c:0c:ee:1b:cf:88:ac:0b:
5c:f9:b4:6a:a1:5a:34:5f:6f:43:79:28:cf:84:17:dd:3a:61:
13:55:2d:f2:29:e2:4a:ec:4a:8b:7b:43:59:d9:c1:5c:56:4e:
71:75:d3:03:96:02:53:a6:c6:4e:20:f2:2d:14:2e:36:f9:ca:
3d:39:f9:f5:83:44:73:9a:82:8d:5d:7c:c5:33:d9:25:d0:81:
12:25:79:62:c4:1b:fc:d8:34:5b:a8:5f:61:01:09:61:de:9f:
91:f5:35:d4:c9:38:0b:f1:53:87:33:db:4b:f8:e8:9b:90:9f:
94:2a:64:39:fe:17:48:93:f2:bc:be:ed:23:87:2c:bc:2f:38:
58:b8:cc:8b:ca:9c:75:85:d9:bf:60:4e:12:1d:a6:21:86:30:
24:dd:3c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:43:14 2025 by rpki-client