Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/81zTwbHSpkH5yL8gxoxug34zMMg.roa
File: 81zTwbHSpkH5yL8gxoxug34zMMg.roa (raw, json)
Hash identifier: kipqQjSMn68yhLBFU04QR05hF6NMxrGa0wKh9Wvb4pY=
Subject key identifier: F3:5C:D3:C1:B1:D2:A6:41:F9:C8:BF:20:C6:8C:6E:83:7E:33:30:C8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184F513697FA502ABAE6EE8F243386A3775
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/81zTwbHSpkH5yL8gxoxug34zMMg.roa
Signing time: Fri 09 Dec 2022 04:10:00 +0000
ROA not before: Fri 09 Dec 2022 04:10:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f5:13:69:7f:a5:02:ab:ae:6e:e8:f2:43:38:6a:37:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 9 04:10:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f35cd3c1b1d2a641f9c8bf20c68c6e837e3330c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:6b:97:9c:cb:0a:24:d7:aa:45:c4:7d:6c:6a:
a6:76:57:16:5e:fb:93:d2:ac:94:88:89:b9:a5:b0:
64:8d:44:9d:9e:e6:65:31:e2:fd:e5:45:65:1b:36:
c6:ef:42:07:cf:9d:43:73:a8:2a:c4:9e:3a:46:76:
48:89:24:93:52:b0:57:25:f3:e6:0c:6d:f6:50:8e:
e7:d1:6e:6c:ea:40:c9:57:f5:16:44:4d:4b:01:d6:
fa:09:75:34:05:95:d1:bd:57:53:55:cc:76:17:ab:
5e:78:c2:d0:40:e5:7d:12:ca:96:29:30:88:12:1d:
d4:5d:28:74:5f:43:e9:20:fb:d9:b9:5c:90:b6:b0:
95:83:22:1f:d4:8d:10:f1:64:a4:5b:21:24:15:47:
e6:f7:38:ac:de:cc:2f:f4:b0:4e:31:ae:64:61:fc:
67:65:67:d6:59:ac:6b:60:6f:98:69:ef:06:5d:c3:
af:e9:3c:7a:ec:27:2d:ae:61:c2:de:da:f4:4b:46:
bd:50:85:d7:8d:de:ed:ed:30:77:4a:7e:97:b4:7a:
9b:3c:d3:37:de:28:16:83:51:9f:ed:d6:cc:7c:ab:
f2:f2:c4:f7:82:1c:95:f4:26:b1:9d:14:42:6e:bd:
95:01:11:a3:48:e0:f6:32:49:4d:db:ae:3b:bc:c2:
3f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:5C:D3:C1:B1:D2:A6:41:F9:C8:BF:20:C6:8C:6E:83:7E:33:30:C8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/81zTwbHSpkH5yL8gxoxug34zMMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0b:89:d6:6a:44:89:11:c9:07:a8:10:ee:46:1b:c4:45:c3:26:
c1:05:45:48:dc:8c:b3:9b:9f:e5:02:d5:6b:d5:b5:7e:28:d8:
97:ae:16:f2:44:53:de:16:5a:8a:51:82:25:55:2a:74:03:e7:
58:f3:3e:79:0a:7e:c3:50:9b:d1:de:9d:08:b6:3e:6e:bf:d6:
22:a9:28:c1:e0:d5:80:ab:f9:47:6e:26:53:d7:fc:d3:be:2f:
60:0d:57:44:76:a5:ca:93:0a:9f:a0:a4:58:3b:7d:a2:fb:fc:
7c:f7:43:07:fe:ca:bc:45:da:da:96:51:b6:61:65:ca:8d:35:
ad:c5:35:ef:1d:20:b3:f1:e0:a1:d2:77:49:1e:ba:65:04:88:
be:59:aa:b7:7e:9b:d1:f6:d7:93:92:20:1a:d3:5b:03:1a:fb:
01:8f:84:e6:1a:53:0c:9e:21:af:5e:38:69:b9:eb:b9:d2:6f:
c2:c1:3d:3c:74:b7:73:8f:bc:89:8c:fd:8d:4a:24:c7:ed:2d:
38:3d:df:50:6e:38:d2:b7:63:37:a0:4f:b7:1a:e7:e2:ac:de:
5f:3d:37:55:f6:a1:fb:a7:9e:16:1f:c2:9d:45:95:2c:49:66:
ee:09:38:2f:42:2a:56:8a:46:51:93:37:7f:80:00:b9:5d:5d:
ca:e9:b8:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 19:49:21 2025 by rpki-client