Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/63ccrlBnhEsYcw3HQvfLDTiXtVM.roa
File: 63ccrlBnhEsYcw3HQvfLDTiXtVM.roa (raw, json)
Hash identifier: UC9apsLlEwHRnHh/QgXGsEWVAXI2Ker4xfIYsXd8y7s=
Subject key identifier: EB:77:1C:AE:50:67:84:4B:18:73:0D:C7:42:F7:CB:0D:38:97:B5:53
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 74670F31
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/63ccrlBnhEsYcw3HQvfLDTiXtVM.roa
Signing time: Mon 21 Mar 2022 10:10:50 +0000
ROA not before: Mon 21 Mar 2022 10:10:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1952911153 (0x74670f31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 21 10:10:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eb771cae5067844b18730dc742f7cb0d3897b553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:03:82:36:9c:8c:cd:1e:2a:06:07:bd:25:bf:
06:18:ab:6c:16:c4:b0:3f:3d:b9:3a:81:93:b6:cf:
f1:ef:38:3d:bb:f0:a1:4e:8b:00:21:1b:fe:cd:df:
ab:c6:c4:50:d8:9b:b7:fb:a1:0b:47:ad:3d:37:32:
4b:af:28:2a:a7:bd:a7:56:c3:75:ae:e9:70:53:f0:
01:a2:32:26:8a:04:4b:ae:31:03:6d:1b:35:49:65:
76:46:1d:96:9b:b0:f0:2a:db:af:70:4c:1f:1d:02:
09:88:86:cb:b5:ba:3a:2c:38:e1:dd:38:fd:cd:e6:
4e:80:1d:17:16:c6:b0:6c:fc:80:38:ce:d4:8f:93:
0b:12:c8:53:7f:39:01:ee:09:04:55:66:b5:3b:72:
0b:38:50:1a:98:3f:2e:27:a3:02:29:84:88:e9:d2:
4b:9b:27:42:26:00:9d:42:c1:d0:a4:d0:52:c7:51:
f6:58:c0:15:d4:9c:93:87:36:89:4a:99:56:66:03:
94:c2:64:11:55:a2:66:31:6d:b5:09:b4:9e:a4:3f:
70:c2:6f:c7:2c:8a:ec:88:f6:d3:84:d4:30:db:86:
ec:ea:be:18:d4:a3:dc:70:4a:5b:ca:a5:1c:f0:2b:
2c:3e:52:c0:75:bf:fa:fb:a3:82:99:46:39:32:6f:
86:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:77:1C:AE:50:67:84:4B:18:73:0D:C7:42:F7:CB:0D:38:97:B5:53
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/63ccrlBnhEsYcw3HQvfLDTiXtVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
74:30:79:1d:a5:b2:85:99:a2:4c:7d:9a:1f:32:0d:80:a5:1a:
ca:a0:be:04:dc:57:42:55:62:b4:21:66:77:60:fb:d5:fb:6e:
42:1d:ea:46:86:da:34:40:99:62:3e:2e:97:a6:7e:a7:32:fa:
62:c6:cf:06:44:bf:95:53:12:6a:bf:f6:cd:21:07:ea:b4:c5:
6d:99:2c:14:fc:de:db:94:6f:e5:10:07:0c:13:c7:6e:db:24:
65:4b:d1:f3:32:bc:25:cf:c4:7c:e9:68:2b:16:03:e5:0d:15:
88:30:51:4b:d4:f9:55:fc:44:75:17:08:a8:9f:09:51:31:97:
0c:f3:ff:ec:56:2b:b7:90:5d:33:6c:03:b8:d3:32:5c:f2:69:
a1:98:27:e4:d3:89:59:68:25:07:eb:02:f3:a4:db:c6:14:19:
dd:e1:bd:cb:79:75:75:ea:8e:f8:cd:9a:39:76:6f:ba:1c:e0:
9e:83:09:c5:ba:e1:dc:ec:f3:c0:c9:c0:6b:67:96:92:14:22:
f2:21:a0:60:19:26:75:94:50:46:11:ec:c9:f3:f7:28:4e:d3:
7a:8e:dd:9b:1f:21:c7:67:e3:42:a5:97:a0:20:58:30:cd:46:
37:1e:d7:33:ae:cf:04:6d:c8:af:a2:ab:36:07:f1:90:08:ec:
cb:a5:16:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:39:43 2025 by rpki-client