Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7V4lchWkVFX6PmXNqxf-EYGdRFk.roa
File: 7V4lchWkVFX6PmXNqxf-EYGdRFk.roa (raw, json)
Hash identifier: 45vdvZGuqY9rLlkH+jCnTxxFDIzurjUiu4vvXnMqTow=
Subject key identifier: ED:5E:25:72:15:A4:54:55:FA:3E:65:CD:AB:17:FE:11:81:9D:44:59
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0181FB1E35D56C0ED6EC117F6A147166453E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7V4lchWkVFX6PmXNqxf-EYGdRFk.roa
Signing time: Thu 14 Jul 2022 05:11:09 +0000
ROA not before: Thu 14 Jul 2022 05:11:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:fb:1e:35:d5:6c:0e:d6:ec:11:7f:6a:14:71:66:45:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 14 05:11:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ed5e257215a45455fa3e65cdab17fe11819d4459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:2c:c3:50:a5:34:84:f5:dc:08:d1:72:8d:dc:
99:c1:a0:fb:da:4c:df:0f:4e:93:a3:86:dd:42:b0:
0a:ef:4b:0d:5b:a4:52:8b:35:78:52:db:21:45:c1:
0a:21:ab:69:59:ac:02:fc:cb:3d:5f:aa:71:e1:58:
b4:bc:c8:87:0c:ea:1f:eb:b0:22:61:d5:f2:34:2c:
79:3f:65:07:bb:ff:7c:bf:09:bf:19:15:f9:44:bd:
08:31:1f:59:4d:83:87:f8:96:0a:5b:58:a7:3b:06:
b1:4f:04:9d:55:0a:28:41:8b:11:4a:c5:57:8d:68:
8b:0a:1a:d4:4d:23:31:dd:bc:22:64:d5:fa:ba:5f:
f7:f9:09:b0:12:c6:88:b8:01:fb:6e:ed:19:fb:5c:
f5:e2:c5:44:08:92:f6:d0:db:58:82:1a:36:7b:6d:
1c:67:f0:19:37:c4:b4:c3:2c:ee:dc:2c:e4:42:2f:
be:26:e9:ce:f6:a0:ce:0e:2f:64:da:3c:7b:94:73:
f8:85:6d:4a:8a:ae:8f:8c:62:80:9a:df:ec:f9:0b:
a4:77:2c:e1:aa:6c:61:b8:62:0b:7d:62:f1:5b:b0:
07:58:4c:39:b0:bd:ce:e9:a7:16:64:54:c8:94:69:
c9:83:d7:e3:e3:43:d3:65:c3:ac:0f:e0:6e:c7:5d:
48:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:5E:25:72:15:A4:54:55:FA:3E:65:CD:AB:17:FE:11:81:9D:44:59
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7V4lchWkVFX6PmXNqxf-EYGdRFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
34:02:cf:e4:ad:49:6a:95:c5:cd:98:b9:9e:d5:f6:be:ba:d2:
df:a3:b1:64:0b:d9:f1:c5:8b:5f:6d:26:49:53:db:ae:1d:8c:
1b:8b:11:7d:e7:48:e3:e5:78:88:96:3c:08:8e:b9:02:80:eb:
ef:1d:d2:bf:fb:36:28:09:f3:5c:9f:27:0b:42:76:42:24:95:
57:86:e4:0a:7b:e9:21:67:8f:e8:c9:58:b4:74:88:99:4e:1a:
8a:c9:26:b4:d9:11:2c:4b:0d:b4:ec:1d:86:11:19:56:75:15:
f5:f5:fe:f8:1b:b0:93:3e:9f:01:be:8a:d3:da:5a:d1:02:4e:
48:0b:4c:d1:b3:16:85:b8:d0:1a:f7:e6:3b:9f:7b:9d:65:12:
7e:80:ce:7c:26:7e:fd:63:62:24:ac:db:fb:bc:66:2d:43:cc:
9f:95:f9:b4:10:85:17:bc:41:69:6a:8f:81:25:43:84:fd:f2:
9b:55:95:68:51:a7:02:73:50:c2:bd:9b:76:14:57:b3:1d:a4:
16:b7:dc:3d:15:a9:d3:24:96:49:53:74:c1:49:c3:46:de:3c:
3b:f5:d0:0c:24:80:b0:7b:2c:27:7b:75:21:94:d2:2f:46:1f:
ed:5b:b1:1a:f3:07:cd:6e:3e:0d:c3:51:53:1e:32:ed:14:5a:
15:9c:e9:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:51:50 2025 by rpki-client