Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/A2RvaX0SV72weZWLe3eIYG3ly48.roa
File: A2RvaX0SV72weZWLe3eIYG3ly48.roa (raw, json)
Hash identifier: PDw5URB6zu/PDPcySbDFzHMIJLRPEVEaJNIZeitTN4I=
Subject key identifier: 03:64:6F:69:7D:12:57:BD:B0:79:95:8B:7B:77:88:60:6D:E5:CB:8F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185285C987F52BFB2836AE1C39A683D8702
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/A2RvaX0SV72weZWLe3eIYG3ly48.roa
Signing time: Mon 19 Dec 2022 03:10:35 +0000
ROA not before: Mon 19 Dec 2022 03:10:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:28:5c:98:7f:52:bf:b2:83:6a:e1:c3:9a:68:3d:87:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 19 03:10:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=03646f697d1257bdb079958b7b7788606de5cb8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:55:cb:45:05:f8:46:9f:1d:ab:4e:51:5a:e9:
f0:d8:89:a6:f2:2a:a7:a4:24:73:1e:fa:4f:df:1c:
23:1d:ba:09:e2:5e:51:5e:d9:f2:00:1b:28:a2:de:
2f:44:74:73:2a:ed:7f:c3:fb:4d:50:09:df:80:04:
e8:2f:c7:c3:6b:1f:a6:94:ef:16:26:4d:a1:89:76:
e9:87:eb:73:1c:1f:ae:4c:cf:5a:be:92:bd:76:d8:
62:d0:ac:b0:82:66:d3:e4:be:30:08:62:d9:67:dd:
57:aa:b9:fa:57:d6:45:3f:ac:f8:41:7b:9b:88:4e:
33:c2:6e:64:4f:48:cc:af:35:52:5d:10:4f:97:67:
f3:c5:dd:d9:cc:01:4e:2b:ca:8a:5e:41:74:46:fe:
ac:16:18:ca:0e:fe:59:77:17:f4:22:6a:77:89:58:
3b:c8:bb:21:af:cb:6c:7f:5d:f9:2b:5b:8b:e8:e9:
ce:41:f2:ca:2f:70:8a:49:9e:0e:94:81:eb:dd:1c:
98:24:38:1f:91:2e:0f:7f:53:03:14:21:c2:21:06:
51:c6:64:b5:2f:30:d0:e9:8c:0d:5a:aa:1d:31:a7:
2b:e3:27:99:ef:7e:3a:55:ba:cf:03:d7:38:1a:dc:
c0:d4:c3:a9:c6:60:dd:30:f1:26:90:f1:cb:5b:1a:
52:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:64:6F:69:7D:12:57:BD:B0:79:95:8B:7B:77:88:60:6D:E5:CB:8F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/A2RvaX0SV72weZWLe3eIYG3ly48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2f:88:39:91:18:0a:ee:cf:ed:fe:f2:15:d5:23:4c:d8:68:c2:
7d:e5:92:37:d1:2d:3f:df:45:f0:f7:b1:68:52:c8:d5:b9:1b:
f9:76:df:61:2a:8a:4c:c0:7a:4b:ed:b9:3e:f8:b6:c3:83:f7:
9d:fc:b4:18:10:1b:90:09:6d:98:f5:6f:bf:cd:b0:5c:59:e0:
e7:7a:e2:9a:28:cd:50:a8:7f:ff:8d:2c:b0:48:ba:96:51:b6:
57:9e:ba:8f:7e:e5:c6:d5:3a:a9:21:76:4b:1e:e4:7f:a0:15:
27:06:94:1d:57:5e:6a:af:4d:56:8a:d1:39:25:47:5c:79:de:
85:c3:2d:a1:43:b5:00:74:4f:a8:ac:53:73:cd:51:77:b6:63:
4c:11:c0:1b:fb:f7:02:38:26:a3:41:50:f8:d8:8e:33:8b:b6:
f1:c8:a9:60:ab:e7:df:a8:db:e6:d5:4d:c6:03:2a:28:6a:2d:
9a:53:8f:02:c9:77:23:38:b3:aa:37:3a:3f:a8:a2:1f:01:1f:
e8:32:b3:6a:64:2f:b9:b6:eb:8d:ef:3d:b7:c3:f4:ea:1c:a6:
83:af:e7:ac:ac:51:16:c6:ed:a0:12:da:de:61:dd:6c:3b:05:
50:10:6e:9e:94:ba:70:11:2b:11:8a:00:48:9d:a7:bc:19:40:
c9:44:50:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:12:00 2025 by rpki-client