Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4wuR3vqaJfS9EtZAapLGIIFSPB8.roa
File: 4wuR3vqaJfS9EtZAapLGIIFSPB8.roa (raw, json)
Hash identifier: iWvbN34q2xIfwfjYz6L6O+ES+2rulbxQn6KFFvQPRjo=
Subject key identifier: E3:0B:91:DE:FA:9A:25:F4:BD:12:D6:40:6A:92:C6:20:81:52:3C:1F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0181F1095703639E09D2FBDC1BE7D6C8FACD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4wuR3vqaJfS9EtZAapLGIIFSPB8.roa
Signing time: Tue 12 Jul 2022 06:12:10 +0000
ROA not before: Tue 12 Jul 2022 06:12:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f1:09:57:03:63:9e:09:d2:fb:dc:1b:e7:d6:c8:fa:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 12 06:12:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e30b91defa9a25f4bd12d6406a92c62081523c1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:9a:a2:87:a4:57:53:bd:eb:ae:6a:42:ad:19:
eb:51:0f:34:80:5f:fd:d8:4b:dd:f5:93:75:64:73:
73:01:26:db:b9:54:4f:34:25:cc:a5:54:2c:b5:1c:
e6:f6:87:76:2f:64:af:96:b7:69:c5:db:d4:36:27:
1d:ab:62:30:49:28:e1:a6:dc:4e:e2:15:22:53:a7:
ca:c8:bb:b3:7a:70:70:94:96:b4:13:4a:5f:60:36:
91:42:2d:c9:27:b5:05:a1:52:c9:d8:e4:74:b4:07:
eb:2d:d5:d8:55:bf:36:c3:d9:05:71:89:b9:70:f8:
3c:cd:0d:4f:fd:79:32:1c:3a:b3:ff:cf:46:b1:5c:
7b:92:64:a3:58:48:6b:fa:0b:f7:62:b7:49:b4:60:
c6:c1:29:65:4a:f8:d5:1a:5a:5f:a8:2c:29:7a:5a:
e8:05:b1:b0:f5:4a:b6:cd:b4:44:00:c3:29:82:bc:
73:8a:17:5b:56:a5:d9:7f:58:e8:27:d9:5c:ca:a0:
c4:11:92:b7:2d:50:23:b7:d6:8f:8f:ea:16:9b:48:
5c:73:fd:d5:34:fc:7c:fa:91:96:80:82:a8:f4:c0:
13:96:62:89:83:fb:95:11:71:14:37:c6:45:be:93:
a6:4b:d0:4e:ae:4b:4c:20:f9:0e:98:29:cc:03:bb:
3a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:0B:91:DE:FA:9A:25:F4:BD:12:D6:40:6A:92:C6:20:81:52:3C:1F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4wuR3vqaJfS9EtZAapLGIIFSPB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
12:1f:2e:1e:a8:50:73:97:0f:a4:9c:8d:22:ea:91:d0:bf:08:
18:f6:7f:8b:9a:ef:a4:d3:ac:be:41:a6:f0:e2:17:2e:0d:5c:
2f:f3:d0:17:60:3a:45:59:68:29:f5:57:fa:38:4f:55:90:4a:
9e:7a:be:98:5a:23:f6:ba:e9:f2:d6:2a:32:31:ea:96:85:c2:
24:04:c3:3f:0b:b3:83:4c:59:0a:6c:62:fb:2b:1c:09:bf:e7:
07:f9:aa:9a:ae:b5:9a:ca:e8:5c:40:67:c6:16:3c:1f:c0:b3:
92:b7:fe:a2:1a:0f:a2:8c:1a:a7:48:66:d9:59:1e:be:1c:3f:
2e:96:3f:8a:23:e5:c9:d3:38:04:7a:27:92:8c:57:ea:bb:15:
95:da:48:11:d5:bf:8b:0c:08:8b:d2:ba:aa:19:98:18:a0:54:
0d:6c:e4:a3:b9:d1:8a:27:82:22:61:1c:db:02:45:38:34:02:
1d:7e:bf:e2:be:14:52:5a:9a:44:3d:7a:31:15:72:ac:a9:f7:
2c:9b:c2:04:08:0e:f2:cd:ba:b1:56:38:dd:28:3a:79:bd:46:
b2:e9:d5:5e:1e:2d:59:fa:13:ee:3e:70:c8:c6:23:8a:f1:3d:
e7:81:52:83:5d:e3:30:ec:82:4e:9d:4a:7b:9a:be:31:c4:e2:
99:41:7d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:42:03 2025 by rpki-client