Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9yVDXEr2pZaXnuCEkRW0sFp6lH4.roa
File: 9yVDXEr2pZaXnuCEkRW0sFp6lH4.roa (raw, json)
Hash identifier: DufkSd8QVL6zfeMeTBi0G5Easg5LAXuVlYL/HJhoctg=
Subject key identifier: F7:25:43:5C:4A:F6:A5:96:97:9E:E0:84:91:15:B4:B0:5A:7A:94:7E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0181EAD087534DB92151DF65F67A5C2618BB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9yVDXEr2pZaXnuCEkRW0sFp6lH4.roa
Signing time: Mon 11 Jul 2022 01:12:23 +0000
ROA not before: Mon 11 Jul 2022 01:12:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:ea:d0:87:53:4d:b9:21:51:df:65:f6:7a:5c:26:18:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 11 01:12:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f725435c4af6a596979ee0849115b4b05a7a947e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:94:30:cc:f5:51:06:f8:b6:a7:29:0d:53:30:
b2:92:f8:b3:0d:1d:f8:97:dd:ad:6c:c0:be:94:99:
82:26:01:0f:30:7d:d2:5d:06:a7:2a:0c:37:c5:79:
aa:1f:6b:94:af:81:dc:2f:64:ee:cf:32:93:7e:d7:
a1:14:ee:92:be:d4:cb:0b:f2:db:a8:5c:13:62:4b:
c2:c8:51:e5:09:29:9d:83:dc:8a:f8:0e:d2:82:5f:
1c:ec:c3:eb:0b:26:9c:a8:92:4a:0d:ed:c6:d7:53:
02:14:bf:a5:93:e2:c1:ae:04:f8:59:d6:81:23:67:
5e:c1:11:99:da:7d:15:67:35:fe:28:65:67:83:fa:
39:ab:62:92:27:84:35:e0:e8:d1:1f:b9:26:64:5c:
ed:72:51:e9:68:64:7b:f6:0c:29:d3:4c:d3:a8:31:
d0:6b:d9:b9:ea:a8:c3:bf:3d:77:1c:d3:4a:e8:2b:
dd:3a:a7:d9:dd:ce:9f:ef:57:29:14:13:db:71:cf:
79:d5:f9:dd:6c:15:ff:f7:88:58:ac:b5:62:05:3a:
64:0c:00:b1:ed:3b:ca:27:d0:71:fc:61:ef:4a:9f:
48:74:32:e5:1f:5a:20:92:7b:19:14:f5:91:97:9b:
de:82:12:d5:d4:7a:17:a4:63:cb:b2:2b:1a:b4:f2:
57:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:25:43:5C:4A:F6:A5:96:97:9E:E0:84:91:15:B4:B0:5A:7A:94:7E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9yVDXEr2pZaXnuCEkRW0sFp6lH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4c:9b:dd:8b:8d:5e:ae:e9:ac:1b:1d:51:32:6f:79:86:e6:55:
93:4b:f6:b0:23:18:82:58:de:20:ef:92:40:19:f1:12:f3:1a:
ed:2a:b5:6c:5b:1b:27:f0:85:74:d8:1b:9a:c5:d2:a8:cb:2f:
2c:00:27:08:cb:db:5d:26:33:eb:b6:ef:3d:8a:32:59:41:95:
da:d2:0f:f7:49:20:de:c2:b8:20:96:8c:01:15:1b:63:07:19:
88:7a:0a:7e:8d:a0:ef:7a:15:af:d7:48:f2:28:7b:e6:9f:ea:
09:4b:e6:b1:b7:d0:69:fd:d1:a5:23:d9:8d:7d:29:d5:00:59:
b9:4c:ef:b3:f4:94:6d:d0:28:55:23:f7:61:8c:58:13:01:e2:
f4:55:0a:d0:3b:3d:33:79:dd:83:10:9c:9b:6c:80:ba:fc:1d:
a2:62:7e:62:11:f2:45:5f:37:3d:3e:e7:64:25:a8:95:46:07:
05:e3:8c:77:2e:ee:6b:94:ad:00:b7:26:4a:88:40:b8:39:63:
ce:d0:21:6f:36:b7:5e:ea:79:52:fc:88:92:7b:36:6f:b6:b1:
21:a6:bf:7f:cb:40:c0:e5:0d:4b:d0:17:de:d2:21:e4:7a:5c:
b3:91:a5:65:fa:d7:96:ef:1a:8e:ac:2a:46:82:0b:4d:a9:e2:
05:28:37:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:39:17 2025 by rpki-client