Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/70erRoHHZ-8G8tt_-m5KWN27_JA.roa
File: 70erRoHHZ-8G8tt_-m5KWN27_JA.roa (raw, json)
Hash identifier: BiM6goO6knps4+8OEUh/mceH7COf02WPm61xCRpoEA4=
Subject key identifier: EF:47:AB:46:81:C7:67:EF:06:F2:DB:7F:FA:6E:4A:58:DD:BB:FC:90
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 91F59E18
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/70erRoHHZ-8G8tt_-m5KWN27_JA.roa
Signing time: Sun 03 Jul 2022 06:11:25 +0000
ROA not before: Sun 03 Jul 2022 06:11:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2448793112 (0x91f59e18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 3 06:11:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ef47ab4681c767ef06f2db7ffa6e4a58ddbbfc90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:cb:c3:cc:a6:c5:20:2f:cb:db:d5:3d:ad:fd:
96:cf:08:ac:91:81:94:c7:42:9b:88:1e:23:cb:0f:
cb:a3:4a:07:7b:fb:e1:cd:1c:d2:3c:cb:ac:9b:5e:
9d:92:75:c0:85:53:16:d8:77:dc:17:c6:65:c2:72:
0d:ab:10:61:5e:7b:6b:c1:25:cc:c5:b2:81:6e:33:
d1:ce:65:f3:b2:c7:0a:a1:82:db:6c:f1:e2:3c:83:
33:73:df:83:2e:1e:20:e9:a7:f9:de:49:b5:f5:8e:
70:e6:b4:ef:46:22:f4:74:90:15:df:18:fd:7c:3b:
23:d0:c0:b9:c0:61:3d:1c:7e:16:47:c5:72:56:0b:
13:8d:e3:eb:6d:ea:4e:68:85:2e:32:95:1a:b8:3b:
41:75:8b:eb:e9:89:f6:cf:1c:5d:ed:91:e0:72:1b:
7a:31:d9:04:ee:37:72:b7:19:b3:be:41:bc:b7:4d:
1b:e3:1d:9c:a7:a4:a6:42:3c:9e:b8:ab:b3:7d:33:
22:e6:5a:25:ba:a4:fa:8a:dc:8f:ab:99:a7:04:9a:
23:bf:e2:e6:8f:75:f0:9f:60:4e:75:e7:bd:66:67:
d2:09:ed:0b:94:4e:1e:f3:ba:e4:fe:53:57:b0:6c:
5c:99:78:3e:95:07:02:f7:f6:82:21:f8:8a:77:5f:
cf:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:47:AB:46:81:C7:67:EF:06:F2:DB:7F:FA:6E:4A:58:DD:BB:FC:90
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/70erRoHHZ-8G8tt_-m5KWN27_JA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
43:24:a8:a5:9b:87:81:0f:38:85:82:c6:06:16:87:4a:b1:8e:
5a:2b:c5:cf:e0:1d:6e:07:9f:c9:4d:ac:fa:8e:67:31:38:2f:
95:91:f8:d0:db:4e:37:58:3d:b7:52:b1:ed:a1:5f:1e:89:9d:
f2:08:8a:c9:1f:ea:3b:07:62:88:e1:58:cb:74:5d:a9:d1:82:
a8:c0:b2:a9:1b:f7:94:f7:f1:ac:73:d0:ff:0c:38:d8:7d:6a:
02:7d:8d:c2:73:ef:a9:5d:90:da:25:b9:35:cb:5c:43:06:f3:
b3:35:c9:0c:d6:68:91:5b:d1:0e:e8:5d:68:22:21:4b:c3:e4:
c1:6c:4c:84:dd:8e:61:4d:56:00:8e:e8:b8:d7:eb:c0:e4:76:
a7:7f:c6:41:64:e4:1d:eb:0d:64:0e:f3:1f:bb:db:4e:6a:79:
ed:c2:a3:38:9f:c3:9a:cd:71:9f:8d:de:4b:17:1b:28:d4:b6:
b7:fa:ce:28:73:eb:50:f2:f1:a7:9f:1e:07:7b:2d:0f:cf:e0:
7b:d8:e5:4a:5c:98:fc:19:48:bc:34:dd:9e:45:a5:9a:d4:f5:
4f:86:01:e2:0d:a0:26:b6:22:9a:5e:63:26:d6:66:da:8d:73:
46:91:49:53:74:a4:58:c0:f6:03:23:63:51:1a:98:80:02:d1:
53:ff:9e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:20:29 2025 by rpki-client