Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7-d3RduMuhcsCwpcI9Ty9Z6IG1E.roa
File: 7-d3RduMuhcsCwpcI9Ty9Z6IG1E.roa (raw, json)
Hash identifier: U6Sopk/sNVhccgGX98DAawo7b6sKSh4HOnPR0CxhxwU=
Subject key identifier: EF:E7:77:45:DB:8C:BA:17:2C:0B:0A:5C:23:D4:F2:F5:9E:88:1B:51
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184D1AF0EC1F4D3B505C5BE35CBC6ABB05E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7-d3RduMuhcsCwpcI9Ty9Z6IG1E.roa
Signing time: Fri 02 Dec 2022 07:13:41 +0000
ROA not before: Fri 02 Dec 2022 07:13:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d1:af:0e:c1:f4:d3:b5:05:c5:be:35:cb:c6:ab:b0:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 2 07:13:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=efe77745db8cba172c0b0a5c23d4f2f59e881b51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:24:90:2d:39:ab:9f:53:f1:cb:ad:8d:32:b5:
74:ee:54:c5:29:71:31:d4:28:81:16:ba:8e:a3:8c:
b8:db:68:a5:fb:e6:3f:fa:19:9c:28:3a:ce:cf:a7:
7a:33:b5:7e:e2:30:20:57:56:02:13:5e:4c:4b:6e:
b9:80:92:51:8d:5f:01:bc:b8:fb:f8:fb:7b:20:0f:
7f:18:dd:3f:15:4d:d7:c6:b9:60:63:70:5c:d9:d2:
7f:a6:ae:c5:e1:8a:29:8a:a2:78:ac:ba:0b:7a:a9:
59:01:6c:2d:79:e3:7d:4f:f9:6c:a7:9b:48:aa:fb:
6f:15:ea:32:26:d1:0f:75:27:09:b2:e9:76:a5:89:
da:af:4a:e6:05:0b:8d:ef:09:18:77:77:e2:e2:1e:
8c:89:2e:31:3e:0f:71:01:f5:13:ff:a0:c2:e4:61:
ed:17:d4:64:73:c9:3e:07:57:51:c4:89:8b:c6:bc:
48:02:60:67:13:a2:4a:9f:5c:42:cd:3f:ec:97:f3:
16:4b:8a:4b:7a:24:a7:87:f7:a6:ac:64:4c:1b:40:
f1:22:77:05:b9:17:db:e6:c8:c8:d8:fa:c8:aa:06:
51:55:72:3f:b7:06:ef:b2:3f:ae:80:6a:96:74:6a:
61:e0:df:89:18:4f:99:01:32:d5:2c:39:a6:55:ce:
1d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:E7:77:45:DB:8C:BA:17:2C:0B:0A:5C:23:D4:F2:F5:9E:88:1B:51
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7-d3RduMuhcsCwpcI9Ty9Z6IG1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
29:d7:07:e6:70:0e:e1:fe:11:78:9c:82:a0:d7:d9:09:e4:fc:
af:c8:06:85:78:ab:ce:b2:28:8c:e9:e4:68:84:f0:70:aa:da:
b6:4e:1d:3b:65:c2:f4:c9:5f:0f:d6:6f:38:49:62:4a:83:e2:
ed:12:c3:5a:c8:66:a8:f4:48:5d:6e:c5:a5:28:62:33:14:13:
a5:70:b6:61:0e:a8:98:6d:a1:b6:90:42:e7:ca:e3:ab:cb:dd:
59:46:bb:cc:f2:4d:54:fd:49:4b:52:16:25:74:f0:32:ed:09:
85:30:77:d4:e3:ce:fc:bd:55:d0:56:51:cb:a8:69:20:57:c3:
87:c6:36:6d:d9:a5:c0:72:c5:f6:4c:27:5b:ed:e3:a3:ee:62:
dc:27:50:fe:4b:f3:cc:7a:02:79:e0:39:b6:0a:7e:2c:e3:4c:
0f:de:c5:15:a6:7d:31:cf:b7:41:2a:c9:71:17:98:0b:74:7e:
cd:ae:95:d4:09:14:ee:20:e3:ff:cc:1d:66:b9:3a:6d:87:96:
9d:78:9e:96:42:45:fd:58:ad:1b:7b:89:07:f7:40:71:8c:28:
68:2a:49:2b:71:e3:d8:91:3e:0c:cd:31:85:c4:17:2e:99:d6:
52:18:4c:f1:ee:bb:0d:32:00:73:09:c0:19:0a:a8:16:f9:08:
70:bb:9a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:04:10 2025 by rpki-client