Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/83z4Fj4i4ELqNCPaK8WdVthDlPg.roa
File: 83z4Fj4i4ELqNCPaK8WdVthDlPg.roa (raw, json)
Hash identifier: DRsn821FMcSJY7S32MhvBFb7kb+z1VSHLRDpThptD+E=
Subject key identifier: F3:7C:F8:16:3E:22:E0:42:EA:34:23:DA:2B:C5:9D:56:D8:43:94:F8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01855D20626BB6A6899A270B08C95986F888
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/83z4Fj4i4ELqNCPaK8WdVthDlPg.roa
Signing time: Thu 29 Dec 2022 09:04:41 +0000
ROA not before: Thu 29 Dec 2022 09:04:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:185:5d20:2bb4/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:5d:20:62:6b:b6:a6:89:9a:27:0b:08:c9:59:86:f8:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 29 09:04:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f37cf8163e22e042ea3423da2bc59d56d84394f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:62:03:c3:1b:14:8c:39:a0:a0:15:bf:1b:c7:
56:64:35:b8:34:71:32:b3:0d:59:a3:1e:0d:bb:23:
22:9c:c9:8b:a9:a1:43:16:4e:3b:29:42:ac:7d:2b:
a4:fd:4d:89:49:14:10:b9:9b:7c:47:2f:b9:7c:94:
62:b4:4b:1b:2d:d3:c2:cf:06:4e:fe:0d:9d:71:0c:
f1:21:e4:35:2d:c1:f3:22:85:79:00:a2:4c:31:07:
ed:e9:22:90:f0:40:80:0e:18:cc:81:60:af:2e:5f:
8d:7a:a6:4c:00:ad:b5:48:6c:fe:76:19:3d:9f:37:
36:64:4a:ae:b5:6c:18:03:16:8e:6e:fd:d6:b1:33:
82:61:5f:d7:d0:c1:93:d9:87:55:97:71:dc:6d:d0:
15:74:55:03:1b:dc:36:85:cc:58:b3:dc:f4:f7:e4:
93:b6:10:a4:61:60:30:80:e4:4c:64:85:f7:7b:bc:
b8:ff:0b:21:17:5c:6c:16:6e:16:99:98:d0:03:a9:
a9:86:26:01:58:93:fb:9d:5f:26:8a:6e:ef:35:a4:
06:be:77:02:98:a1:e3:40:98:e1:b0:ca:02:c5:aa:
4a:d5:28:7f:37:b2:be:3c:4d:f3:92:ac:dc:d0:73:
0d:e4:1a:29:ff:3b:9d:2c:f2:a4:67:84:75:00:b7:
ee:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:7C:F8:16:3E:22:E0:42:EA:34:23:DA:2B:C5:9D:56:D8:43:94:F8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/83z4Fj4i4ELqNCPaK8WdVthDlPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
35:a0:06:9c:96:ed:21:b3:06:34:70:ec:f8:5a:66:83:d1:e2:
3e:be:1e:1d:a7:a3:38:b0:51:e9:fc:30:23:b1:6e:b2:2f:3e:
dc:fb:31:8c:9a:ae:50:b6:de:a4:23:ab:9f:99:b9:cc:d6:50:
d0:24:22:5c:14:ac:29:1c:7e:fe:42:10:b3:c1:7e:4b:b3:81:
68:f0:ed:ea:cc:f3:30:95:f3:ff:1b:45:4a:bc:f9:f6:50:07:
da:ad:fa:d3:0c:e6:90:25:ff:e1:f3:b6:7a:9a:7b:eb:82:47:
4e:04:30:8a:d3:5c:b3:5d:a0:06:f9:59:68:1a:5e:54:a7:b4:
ef:73:63:69:7a:73:58:79:c2:b3:5c:fc:05:5d:61:f9:7b:c2:
eb:3b:d0:02:01:77:03:7f:85:db:8d:42:0b:34:d8:10:a6:25:
97:34:4a:a5:6d:6e:43:5a:96:9c:46:85:67:61:d3:c3:e3:1a:
b7:89:60:ba:9a:b7:4f:09:82:a5:d7:0e:e7:ab:e8:e7:6e:a2:
0d:68:07:b3:41:fe:c7:de:94:33:be:4d:fc:dd:57:7b:9e:11:
13:29:61:66:c5:7e:7b:fb:82:75:10:0b:85:c2:c0:9d:ab:ef:
15:70:48:47:c9:cc:6a:06:a6:3b:a1:ae:95:ac:3a:42:9a:07:
6d:bc:10:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 06:40:07 2025 by rpki-client