Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/56321bypHbOSmVHkakgvZY3B-DI.roa
File: 56321bypHbOSmVHkakgvZY3B-DI.roa (raw, json)
Hash identifier: zX1JnkO1Gvjab7wH5TwYXxokyGAo/4hRVhcCFzZw7JU=
Subject key identifier: E7:AD:F6:D5:BC:A9:1D:B3:92:99:51:E4:6A:48:2F:65:8D:C1:F8:32
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01840378FFCD43FF11A6E94B5BC95C371363
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/56321bypHbOSmVHkakgvZY3B-DI.roa
Signing time: Sun 23 Oct 2022 06:12:52 +0000
ROA not before: Sun 23 Oct 2022 06:12:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:03:78:ff:cd:43:ff:11:a6:e9:4b:5b:c9:5c:37:13:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 23 06:12:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e7adf6d5bca91db3929951e46a482f658dc1f832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:91:95:da:b9:89:9b:19:1a:ac:7f:45:a6:e3:
55:9f:1d:53:ea:40:38:d0:fa:3a:09:5c:4f:de:3b:
92:d7:37:99:18:29:6f:3b:46:11:1f:f6:96:7c:a9:
de:ec:54:f9:3d:1c:ed:4f:ff:ac:87:d4:99:df:cf:
56:da:ea:9d:00:0b:3c:00:25:e4:ad:d7:10:55:16:
ba:18:99:99:16:3e:38:31:49:1c:08:e1:59:8b:93:
1f:86:9f:bb:8a:49:3e:4c:79:d7:5f:32:50:24:ee:
71:4b:e3:a7:c1:17:02:94:51:56:0b:26:7a:01:2b:
45:ec:e1:05:d7:fa:da:5b:b2:13:f6:58:70:47:54:
77:d8:da:e6:4d:b8:2c:12:78:7f:d2:d6:6e:04:04:
f7:c2:6c:a8:db:2e:75:9a:3b:c7:ea:10:4f:56:c8:
ae:9c:50:30:55:ba:b7:32:7d:e1:1a:fd:68:b4:c1:
9b:cb:17:6c:e1:71:da:19:4d:2d:8d:35:59:0c:b4:
75:e3:a6:b2:8c:c2:a4:c5:ec:7f:cc:b2:c7:ed:9f:
54:f0:aa:d9:25:35:41:e8:a2:5d:2a:0d:3c:dc:4f:
7c:8c:e0:94:b4:03:dd:68:95:52:fc:b1:96:bc:96:
3c:96:40:87:9c:02:22:85:29:d0:ae:73:ba:f0:dc:
62:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:AD:F6:D5:BC:A9:1D:B3:92:99:51:E4:6A:48:2F:65:8D:C1:F8:32
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/56321bypHbOSmVHkakgvZY3B-DI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b5:53:51:67:03:0b:d3:39:19:62:95:45:1a:39:c6:f1:58:47:
95:3f:a2:5a:1e:b9:96:86:6d:b7:6f:b6:a3:3d:2d:15:d3:f3:
51:20:a0:23:40:b1:14:94:6c:5e:2a:52:61:f8:48:53:24:be:
58:5c:fe:5b:26:fd:cb:5f:5b:cd:82:73:c9:5b:66:9d:55:75:
87:a1:d7:45:5f:fe:ff:5f:68:27:17:87:4d:06:dc:db:6e:aa:
e4:e2:a2:8f:87:60:b1:8f:d7:44:b8:01:86:e6:1c:d4:b1:18:
43:cb:59:32:0b:5e:7a:62:7b:39:a1:66:fe:28:67:c5:13:97:
ae:de:bd:96:3a:41:a5:1f:1a:f2:4a:43:09:03:f3:ae:82:de:
4e:0b:67:5f:e4:ac:26:f3:a4:66:d6:a0:6e:ea:f2:7a:d1:32:
35:95:30:2e:86:36:f7:a1:9d:fc:01:ee:51:e5:de:e3:cf:c5:
17:8d:0c:39:37:48:b0:6f:67:5a:88:0a:d7:83:e4:26:45:01:
12:76:ac:77:5a:24:f9:6a:bd:8e:8e:95:e1:04:81:e7:68:88:
6e:be:20:ef:ec:8a:fd:1d:a2:0e:ef:5c:74:f2:c0:a3:99:b1:
e6:10:50:e7:ef:1a:1a:fd:ae:e2:89:92:8b:79:51:f4:0f:41:
3e:52:e6:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:44:12 2025 by rpki-client