Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4rC-ZIbZpzJ95o2rDNJNKctsmBE.roa
File: 4rC-ZIbZpzJ95o2rDNJNKctsmBE.roa (raw, json)
Hash identifier: psaEi/giq8WDlCD4D4FZdn9R3GTnT94oYm4WIHUT+pI=
Subject key identifier: E2:B0:BE:64:86:D9:A7:32:7D:E6:8D:AB:0C:D2:4D:29:CB:6C:98:11
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185116163797FA4865914F6A5D90B8D5173
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4rC-ZIbZpzJ95o2rDNJNKctsmBE.roa
Signing time: Wed 14 Dec 2022 16:04:33 +0000
ROA not before: Wed 14 Dec 2022 16:04:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:1161:1e42/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:11:61:63:79:7f:a4:86:59:14:f6:a5:d9:0b:8d:51:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 14 16:04:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e2b0be6486d9a7327de68dab0cd24d29cb6c9811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:da:6c:06:55:44:15:19:97:d2:51:e3:ce:ff:
70:a4:9b:04:52:cf:c4:e5:cb:3f:de:7d:ea:18:c7:
d8:d4:a1:74:f6:62:9f:d6:b6:04:aa:fb:eb:4b:cc:
e4:4e:18:25:e2:21:61:d8:a9:23:fc:d6:27:b2:fd:
8b:9f:7c:01:5e:8b:b3:04:3f:16:19:0e:f1:b9:dc:
15:7b:12:c7:d9:4d:e2:15:44:6a:2e:2a:3e:02:4f:
38:bd:c0:2c:36:bf:e3:74:f5:b9:89:68:fe:a2:32:
15:e2:6f:fa:94:3b:13:b6:19:36:7c:40:c0:07:ee:
d5:49:1f:88:8c:5f:1e:46:b8:76:a6:20:53:a2:0e:
4c:4e:63:a4:ca:47:c8:c6:0b:53:e8:06:98:33:8a:
ee:d8:a0:6f:c3:80:57:a4:6b:34:d2:10:01:60:da:
39:cc:8a:ef:d2:e4:75:24:ad:74:96:9f:d7:90:57:
a2:99:96:a1:43:fd:48:fb:48:bb:09:be:62:8f:b2:
40:e9:d1:6d:00:a0:8c:f8:ff:e9:74:fd:53:54:8e:
9d:af:78:4c:a9:0b:c6:36:fa:f7:f4:40:1b:6b:df:
5d:aa:c9:95:7d:0e:ec:4f:0e:0d:f7:93:15:12:66:
cd:39:3b:c2:6f:ee:98:22:ec:2d:73:5d:ef:ea:a0:
bf:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:B0:BE:64:86:D9:A7:32:7D:E6:8D:AB:0C:D2:4D:29:CB:6C:98:11
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4rC-ZIbZpzJ95o2rDNJNKctsmBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4b:24:f1:71:aa:27:18:c5:f0:05:67:4c:a5:74:e3:1a:8f:23:
48:63:d4:4a:1d:87:22:a2:fe:ac:e9:6f:e9:1b:d5:51:55:7e:
d2:a6:c6:56:1a:f6:b3:f4:08:a1:13:69:16:e8:f3:1f:1c:58:
61:8a:9a:36:0f:81:0e:1e:35:f6:0d:1c:d9:b2:48:af:0b:e2:
66:5a:9d:bc:f6:f3:27:5f:3f:41:9a:e9:65:58:a1:20:b9:c7:
7f:1d:d5:3b:12:6f:03:e6:21:f1:d5:68:43:2c:77:4f:36:32:
da:05:a1:e4:58:0a:e2:cc:1e:f8:76:23:21:ef:f9:fc:d2:11:
78:8c:33:71:82:9c:cf:35:6b:59:2a:eb:38:52:4e:64:15:13:
b3:96:bb:45:e3:8c:79:ad:d2:36:51:4d:44:a4:fd:53:1a:48:
98:da:58:74:00:30:8f:c1:4e:68:3f:a7:f2:c5:fa:58:60:0b:
e2:10:d3:0f:68:07:89:d8:e5:d1:76:3d:1d:f8:7a:99:cc:bb:
ab:88:53:16:0e:e8:d0:cc:ce:5d:e5:48:3e:6d:9a:ab:31:b8:
00:16:98:5a:3f:2a:ff:e2:d1:e2:29:5b:a3:97:87:93:21:4a:
93:45:4e:33:04:21:4e:7d:e3:78:f3:e9:72:58:6a:a5:f9:19:
f6:f7:00:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:45:33 2025 by rpki-client