Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7J8Qzk1GP4Yl8_AAb8nfoPuyTVs.roa
File: 7J8Qzk1GP4Yl8_AAb8nfoPuyTVs.roa (raw, json)
Hash identifier: M3L9IXLivJWXlY/RfxOFRzxbnT7f58Q+oHIF52nEuJU=
Subject key identifier: EC:9F:10:CE:4D:46:3F:86:25:F3:F0:00:6F:C9:DF:A0:FB:B2:4D:5B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184E610740799DBF2F0D314F33753312F6E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7J8Qzk1GP4Yl8_AAb8nfoPuyTVs.roa
Signing time: Tue 06 Dec 2022 06:12:28 +0000
ROA not before: Tue 06 Dec 2022 06:12:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e6:10:74:07:99:db:f2:f0:d3:14:f3:37:53:31:2f:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 6 06:12:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ec9f10ce4d463f8625f3f0006fc9dfa0fbb24d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f6:c2:3c:7f:9e:90:37:4b:75:8f:68:63:ec:
1b:1f:cf:03:61:2a:f0:ac:18:35:7e:c9:00:7d:8f:
53:af:c4:d5:e6:86:80:e1:f1:8a:5f:f2:70:41:fc:
43:d9:54:b3:52:4d:b9:ac:3a:4e:b1:d7:93:73:47:
d4:15:16:50:93:92:f7:c7:3a:85:b7:20:da:52:4d:
e9:40:ca:ba:2e:35:54:d9:f6:cc:b0:62:79:7b:20:
9f:dd:78:1d:1c:7a:15:40:fa:ae:35:3c:0a:30:ff:
59:b6:59:d8:62:10:96:c6:26:3c:f6:d2:11:a0:e6:
40:e5:c7:e1:1c:fb:87:01:b1:2c:4f:59:7c:6e:01:
7a:e2:6e:21:87:0a:95:5e:6f:e8:40:81:41:7f:7c:
db:3c:9b:76:c0:c6:6c:ba:06:46:5e:5b:e4:82:a5:
32:8f:66:69:41:5a:7b:73:cf:61:c3:7a:4c:15:6f:
d2:69:1d:6d:4c:64:8d:20:b8:fe:40:2a:24:1a:f8:
cc:32:6e:1e:96:73:68:1a:9f:a3:40:9e:5b:4a:9c:
91:cc:13:2e:38:d1:62:ea:5a:f2:8e:41:3b:7f:62:
36:03:62:78:38:ed:ed:88:49:1d:60:57:fe:54:1c:
93:41:63:67:96:9f:9e:1b:3d:10:1d:a9:81:35:09:
f7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:9F:10:CE:4D:46:3F:86:25:F3:F0:00:6F:C9:DF:A0:FB:B2:4D:5B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7J8Qzk1GP4Yl8_AAb8nfoPuyTVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
90:9d:fc:c1:b1:45:c3:dd:37:3e:2b:f6:02:34:ad:0b:3b:a8:
87:7c:e5:ab:c9:80:40:81:ae:9c:6e:f9:8a:05:f4:f6:a3:61:
d0:28:2d:57:fc:8e:d5:3d:c6:0c:f8:02:ea:30:7e:7f:1e:48:
26:f9:a3:2b:bf:c2:2d:e2:19:ee:b4:21:a2:b2:4c:45:c9:10:
ce:d4:0d:08:5a:9e:22:2e:bf:09:81:de:bc:59:b9:f2:7d:82:
a2:3d:8c:8b:2d:52:68:65:a8:80:c3:48:91:1f:d8:6a:e9:38:
8d:72:fc:48:59:6e:c0:26:89:c0:e7:4a:83:e8:64:73:1e:ce:
52:c8:5f:9d:6c:0e:37:f1:9c:59:a5:82:6d:74:e3:83:aa:ba:
51:06:be:f9:e5:cc:62:68:6a:72:f6:ca:f5:f5:d5:a9:cf:e8:
5b:22:3e:ee:aa:85:84:d4:19:b3:62:df:9a:a8:5c:21:7a:5f:
33:50:ce:ea:cc:89:bd:bd:2d:23:9e:eb:43:41:78:f2:93:7e:
50:5c:9e:2a:4f:a5:f0:50:d0:db:31:8d:ba:74:73:c9:3e:84:
b3:63:06:5e:4f:4b:6b:c8:6a:82:89:2c:e4:8b:6d:4f:11:ae:
85:1e:38:fb:20:60:56:6b:a0:24:d1:41:ed:95:45:e4:eb:fc:
c2:c8:65:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 17:41:28 2025 by rpki-client