Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AcSVaEX4anQE5bYmR1NsCwL-eiA.roa
File: AcSVaEX4anQE5bYmR1NsCwL-eiA.roa (raw, json)
Hash identifier: zQxaKTTR63JSdFV5iIu5kw0GqslOMJNmsAaX1nLKbjU=
Subject key identifier: 01:C4:95:68:45:F8:6A:74:04:E5:B6:26:47:53:6C:0B:02:FE:7A:20
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184425139E3C8BD9D4D34A6106DFB566464
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AcSVaEX4anQE5bYmR1NsCwL-eiA.roa
Signing time: Fri 04 Nov 2022 11:05:30 +0000
ROA not before: Fri 04 Nov 2022 11:05:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:42:51:39:e3:c8:bd:9d:4d:34:a6:10:6d:fb:56:64:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 4 11:05:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=01c4956845f86a7404e5b62647536c0b02fe7a20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b5:45:2f:b9:af:fd:e4:43:22:9b:a8:ff:03:
18:9a:c3:8d:bb:f3:e7:d7:57:9e:a2:d8:68:1b:e3:
26:96:56:0d:8d:f5:0f:4d:78:1a:b9:5b:06:48:19:
95:38:11:9b:86:cc:85:98:37:1b:e9:8e:46:c4:65:
38:c9:99:ec:3e:94:94:02:dd:ec:da:ff:f2:0f:c1:
71:b3:74:5c:c1:9c:08:e4:4a:9e:1a:8c:80:22:28:
5c:88:d0:cb:87:95:f7:1e:d7:19:69:e6:7c:d1:c0:
0b:fe:fc:2d:b1:3a:2f:76:12:59:e9:cc:5e:86:7d:
09:2a:05:c6:e8:d3:0a:da:02:d3:5d:02:4e:1a:be:
fc:f9:70:b1:ba:74:bd:9d:9f:aa:9b:bb:a8:c3:4f:
a6:97:4e:e0:67:77:9f:65:20:00:d2:66:8d:bb:98:
9a:78:84:ae:ee:17:a5:21:ba:c5:ce:74:55:62:17:
5a:7b:92:22:56:fe:de:19:71:59:9b:18:32:66:dc:
dc:e3:44:4c:1d:40:42:06:dc:01:d7:c9:30:1e:e2:
9f:54:52:93:7c:f2:47:ba:34:8e:0d:76:c0:e5:5a:
05:c5:86:8b:d8:e3:16:0a:37:a4:c4:69:25:cd:2f:
9a:cf:31:f4:c4:ef:b3:d5:cb:09:6b:81:10:7e:c6:
48:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C4:95:68:45:F8:6A:74:04:E5:B6:26:47:53:6C:0B:02:FE:7A:20
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AcSVaEX4anQE5bYmR1NsCwL-eiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
48:ca:ea:bf:12:05:10:8a:56:60:ed:be:c8:1c:c8:e1:50:4d:
2f:0d:d0:30:a0:18:a8:4b:67:46:16:87:b7:30:fb:84:73:be:
87:58:23:19:9c:da:ca:ff:69:ab:66:d2:85:ea:9c:34:5a:e9:
70:5b:4d:28:87:64:24:28:ee:0f:1f:d7:59:05:5d:b4:12:5c:
72:e8:c5:1e:1e:3e:8d:9a:be:0d:aa:45:52:e0:b3:f7:97:7f:
0a:8b:90:9d:ba:62:22:12:a7:bd:2c:3b:ca:9c:fb:cd:0f:ba:
eb:1e:18:0f:14:36:0e:73:b2:93:2f:0a:07:dd:f1:53:81:1d:
14:11:cd:f9:56:f4:d2:21:79:4e:73:8d:74:5f:9a:bf:ec:b6:
6f:47:3b:d9:a4:fe:78:b7:16:26:d4:95:e2:d8:ac:c7:89:1a:
f3:b3:54:17:f5:cf:e4:e6:4a:99:e6:3c:a8:ea:42:2a:20:d2:
6f:d2:31:a5:12:e0:7b:cc:8e:2e:f4:9e:fa:6d:7b:14:24:87:
68:d4:be:1b:06:be:f3:64:52:4c:28:9c:01:1e:2d:0f:dd:cc:
9d:36:54:8a:cd:08:ae:12:e4:8f:4e:c1:64:a1:6b:91:c6:56:
35:a3:84:81:bc:a3:fc:2c:84:95:39:26:fd:7e:2f:2a:ec:a0:
3f:99:19:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:33:59 2025 by rpki-client