Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5Dktnz4lO2DHEjVMDDNCLvMgVGQ.roa
File: 5Dktnz4lO2DHEjVMDDNCLvMgVGQ.roa (raw, json)
Hash identifier: n16d5+WE1Er5vSs2uH1pQpJFVeuh59Cqzg6in7b8beU=
Subject key identifier: E4:39:2D:9F:3E:25:3B:60:C7:12:35:4C:0C:33:42:2E:F3:20:54:64
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0181E04BF5C6F94AE955DC71FC2140B5BDA1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5Dktnz4lO2DHEjVMDDNCLvMgVGQ.roa
Signing time: Sat 09 Jul 2022 00:11:23 +0000
ROA not before: Sat 09 Jul 2022 00:11:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:e0:4b:f5:c6:f9:4a:e9:55:dc:71:fc:21:40:b5:bd:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 9 00:11:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e4392d9f3e253b60c712354c0c33422ef3205464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0a:ff:ca:a5:21:0a:93:b5:39:b4:c4:5a:45:
00:e1:07:7e:11:55:1e:68:bc:e2:81:e1:58:31:25:
4c:e4:a0:c0:5d:a1:bd:6e:a3:1d:58:97:55:17:24:
74:11:83:9d:18:1c:0a:72:f4:33:72:c5:16:bb:43:
35:15:0c:9d:75:f8:f9:82:0e:e0:13:4c:57:86:5d:
ae:69:45:16:d3:bd:08:89:f5:a9:26:7e:b4:ec:83:
6b:c4:80:b0:97:18:4f:be:d6:64:d9:de:55:ee:65:
d0:22:05:b9:4a:cb:d4:28:b3:41:a0:8a:fc:4d:63:
22:5a:c0:de:1b:e0:18:70:4b:8b:22:ef:31:99:39:
bd:64:84:9a:d6:e5:9b:e9:2b:fd:87:e2:b5:a4:22:
58:fc:76:18:74:18:4c:2e:8a:90:d2:7d:41:19:23:
a7:5a:63:d1:30:ed:ed:be:a3:9a:0b:44:97:03:a4:
b4:2a:82:f5:15:7f:4c:ba:92:bc:2c:7e:20:c6:5f:
f9:b7:9b:94:c1:f3:7d:fb:8d:b8:91:4f:6a:b7:bc:
67:e9:09:4a:19:2c:3d:3f:20:97:40:bb:59:05:9d:
5a:e2:87:45:55:5e:5f:dc:77:46:a4:0d:7b:db:0b:
46:24:ef:8d:d5:4b:c7:a6:82:20:73:80:c3:cf:3a:
48:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:39:2D:9F:3E:25:3B:60:C7:12:35:4C:0C:33:42:2E:F3:20:54:64
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5Dktnz4lO2DHEjVMDDNCLvMgVGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7c:87:e1:f7:7e:2e:dd:39:9f:53:c0:85:0d:8a:e6:a8:7d:c5:
6d:f1:12:fd:6a:07:95:68:66:29:f5:97:d5:76:9d:56:73:5f:
24:89:3d:8d:41:f1:da:14:b2:6d:16:5b:2d:d5:08:51:b3:fc:
09:85:78:d7:31:67:ed:59:28:8f:e3:a7:4f:bc:ba:a4:63:61:
50:77:f4:81:59:45:a6:d7:d9:09:60:3c:e4:05:92:df:fe:e9:
ef:0b:dc:66:24:fd:d0:d3:e6:3d:a2:ce:7d:89:cb:35:99:03:
96:57:c6:00:24:0c:d0:2b:b3:a9:f5:39:2e:ec:3a:d2:e2:f1:
f3:1d:7b:f5:31:61:c0:62:68:a7:86:11:73:e3:f3:97:7e:ee:
0c:97:68:a6:59:73:41:27:53:ba:2a:e8:0a:68:f5:1c:5c:e8:
2a:c5:29:51:ef:bd:40:e7:07:2c:66:da:7f:de:47:b7:b2:df:
aa:df:8e:bb:5b:e0:c0:bb:d2:35:e7:1a:f2:49:6e:ef:6c:31:
46:9b:0d:f2:a1:ec:b7:6b:4b:83:90:95:c6:88:0e:cd:50:2d:
9b:bf:6b:1d:17:4c:3e:b1:19:ce:49:35:28:bc:e2:80:a2:3a:
49:a7:23:70:2c:3b:b0:14:30:1c:eb:a3:b0:17:b7:98:2f:32:
ae:15:ed:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:27 2025 by rpki-client