Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/90A_coq0pqD-czGikcGgnqTstb8.roa
File: 90A_coq0pqD-czGikcGgnqTstb8.roa (raw, json)
Hash identifier: csjhHOx887tR+WP3LU0BkQbVatGwRNHANLfFOcJh2CY=
Subject key identifier: F7:40:3F:72:8A:B4:A6:A0:FE:73:31:A2:91:C1:A0:9E:A4:EC:B5:BF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7EE17178
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/90A_coq0pqD-czGikcGgnqTstb8.roa
Signing time: Wed 27 Apr 2022 07:09:19 +0000
ROA not before: Wed 27 Apr 2022 07:09:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2128703864 (0x7ee17178)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 27 07:09:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f7403f728ab4a6a0fe7331a291c1a09ea4ecb5bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:0b:77:36:92:4e:7f:c9:00:74:d6:79:b1:c5:
81:79:40:d8:06:8d:2b:b1:5d:05:2b:b8:18:90:3f:
9c:5d:e6:a8:f9:ae:c2:2f:9b:ce:a5:ee:60:62:22:
bb:60:c9:96:60:a2:42:bc:a6:81:d7:8f:28:72:f5:
71:2b:a6:23:ed:b0:78:60:c7:f3:10:be:99:fb:90:
2d:81:23:7b:e7:d9:aa:63:8b:c7:d8:5c:25:aa:d9:
c9:c4:d5:e0:bf:a3:57:ec:28:3d:f9:a4:f2:fb:8e:
8e:0d:db:b4:fc:00:70:c6:e0:d3:15:d8:02:26:e2:
a5:a9:36:29:c4:b8:23:a1:56:a9:0a:fb:27:94:c1:
44:3c:9d:77:2c:34:c3:cb:a2:11:41:6c:3c:9a:ce:
aa:3e:78:3f:2a:13:81:41:d0:1a:d7:08:81:51:17:
79:a9:c8:52:97:45:da:49:c6:d1:e1:d3:6c:d8:68:
7c:d4:0a:be:2c:2d:ea:a7:ae:51:94:b0:f4:e5:73:
5d:3e:10:45:bf:98:ff:b0:a0:52:08:99:50:cf:91:
80:db:65:23:ca:2f:f6:cb:84:ea:04:29:cb:72:76:
28:1f:8b:02:39:b5:74:c1:fc:11:04:65:b6:af:34:
0a:b1:5b:38:9c:a8:be:15:df:e5:e3:aa:26:15:00:
78:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:40:3F:72:8A:B4:A6:A0:FE:73:31:A2:91:C1:A0:9E:A4:EC:B5:BF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/90A_coq0pqD-czGikcGgnqTstb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5c:0e:34:54:94:2d:36:5d:e5:19:81:2f:6e:5c:4f:92:d7:04:
ff:85:48:00:a0:66:88:1b:ca:5d:3f:34:a4:7b:95:82:06:aa:
7b:01:48:4c:c2:d9:99:a0:29:33:1b:b4:e8:74:13:43:8e:9d:
e0:e1:12:a9:2d:14:95:5a:b1:06:9c:38:c8:9d:c3:30:db:49:
ab:97:7e:c5:f6:50:ba:c6:17:de:25:05:7d:80:74:e6:11:55:
af:2f:94:44:02:89:7e:d4:39:58:90:a2:9b:44:97:ea:10:e9:
7c:be:32:26:4a:81:65:43:b1:db:08:c6:e6:8b:62:63:40:41:
3c:34:fe:22:47:2a:5a:ba:11:09:bb:8e:c9:81:d6:e9:7b:19:
ff:bd:73:1c:54:72:80:f4:5d:ac:9f:4d:ec:97:74:a7:5d:d4:
e9:e9:5c:02:3f:65:9d:ec:e6:82:ab:65:05:1f:fc:7a:d6:19:
17:6c:e7:22:f0:5d:23:3b:66:17:cf:56:e7:39:9e:90:c3:63:
de:03:60:1d:44:ed:fb:9d:27:9c:3d:33:47:6e:87:9d:99:2e:
a1:c5:0f:11:a6:f2:2f:3a:33:51:b8:9a:d0:f5:85:6d:b4:ed:
17:5a:92:a4:90:55:55:d5:d1:9a:95:7c:c3:ba:c6:78:0a:ba:
cf:92:87:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:08:12 2025 by rpki-client