Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4uE2L8E2o0Vfrc2DkidaMq0wktI.roa
File: 4uE2L8E2o0Vfrc2DkidaMq0wktI.roa (raw, json)
Hash identifier: hmnfuV55QD6GYk/xj/Tsin9v/WjPF6+f5d1q1Dt1SAQ=
Subject key identifier: E2:E1:36:2F:C1:36:A3:45:5F:AD:CD:83:92:27:5A:32:AD:30:92:D2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6B0C0CCE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4uE2L8E2o0Vfrc2DkidaMq0wktI.roa
Signing time: Wed 16 Feb 2022 08:04:16 +0000
ROA not before: Wed 16 Feb 2022 08:04:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:18f:825c/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1795951822 (0x6b0c0cce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 16 08:04:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e2e1362fc136a3455fadcd8392275a32ad3092d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1c:16:6e:d6:15:96:9a:67:9e:ef:44:c9:c7:
d6:0c:19:06:a7:16:1a:cd:32:56:d6:8c:11:f5:6b:
ab:77:1a:0b:e6:18:ab:8c:64:7f:d2:b3:e8:2b:79:
96:c0:06:ec:7f:9b:4e:1b:0e:04:2e:ae:a5:b9:c9:
cf:88:b6:66:4b:44:dc:22:6e:00:a9:d3:64:7b:4f:
f1:d6:02:10:04:31:6d:22:c6:26:56:81:9e:8d:88:
21:f0:58:61:66:b9:17:72:93:7d:98:e0:f6:41:49:
43:53:24:f1:44:6a:1b:df:82:b7:6c:fd:8a:3d:41:
b8:bc:fc:03:11:ea:41:5e:8f:19:e8:3b:49:aa:86:
66:e7:8f:5a:7c:94:10:ed:38:69:e9:3f:9b:66:50:
2f:18:e9:83:d1:56:5f:63:71:92:db:ca:86:55:07:
67:ff:27:28:18:f1:1e:ba:a5:10:29:e0:df:50:c1:
08:ff:86:fe:92:11:50:ae:db:12:25:bd:81:a5:0b:
56:57:18:44:d0:e0:6c:74:21:b0:e9:80:e4:2b:68:
08:59:93:3f:22:e7:70:63:ab:63:93:b0:cc:fa:5a:
0f:28:a3:f2:fb:07:8a:98:24:41:a4:35:25:b2:54:
1e:d0:d6:65:44:a5:27:37:e6:6c:94:13:af:5c:0f:
0d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:E1:36:2F:C1:36:A3:45:5F:AD:CD:83:92:27:5A:32:AD:30:92:D2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4uE2L8E2o0Vfrc2DkidaMq0wktI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
30:00:89:2a:de:fe:c0:3c:94:85:22:f4:fb:db:24:39:76:6c:
23:6e:48:66:a5:11:8d:07:31:73:1a:7a:2c:0d:5d:7b:bb:c6:
b6:7d:92:1a:60:30:e5:c1:bf:d6:19:26:2b:20:e6:be:f4:7c:
35:8f:24:d1:7a:cb:4f:f0:ab:c3:46:f7:d9:96:b8:08:1c:1e:
71:d7:9d:d0:e2:bf:95:fc:ea:95:da:42:fb:aa:1a:c2:83:71:
90:6e:ab:19:b3:5d:3e:69:b4:0d:ef:16:73:bb:f9:92:c6:9a:
88:04:2b:27:39:5d:4e:80:20:fc:f2:a2:ca:5e:23:c1:73:58:
d4:a8:27:85:41:41:ce:d4:42:d4:f2:e8:b7:be:d4:12:20:a8:
3f:06:14:d6:4a:95:17:67:f8:4d:07:64:d7:8d:6a:cc:3f:65:
40:bc:1e:90:62:a5:25:89:ed:e1:67:4e:23:02:fc:33:f6:50:
2a:fe:94:8c:81:b5:e7:d0:2a:7b:61:f8:8f:a8:4f:0a:b4:bd:
a0:5c:61:52:21:d2:b3:19:24:04:93:b1:50:fb:2d:be:e8:69:
40:41:16:80:3b:92:39:cc:40:53:f2:5d:10:ce:ec:e0:63:08:
e1:63:e9:2c:18:14:41:21:e9:c6:73:90:96:c0:3d:5b:05:10:
f0:93:3e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 17:04:34 2025 by rpki-client