Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AdM8PUrvCUv8_FyMMEcKdVOR5Is.roa
File: AdM8PUrvCUv8_FyMMEcKdVOR5Is.roa (raw, json)
Hash identifier: ZMIJG911rNFJhSDCUU5ien4SSBuT97aBoHlH3ZNAbEk=
Subject key identifier: 01:D3:3C:3D:4A:EF:09:4B:FC:FC:5C:8C:30:47:0A:75:53:91:E4:8B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018548C18BA1FCA5B43F6E324085D02D8C63
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AdM8PUrvCUv8_FyMMEcKdVOR5Is.roa
Signing time: Sun 25 Dec 2022 10:08:41 +0000
ROA not before: Sun 25 Dec 2022 10:08:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:48:c1:8b:a1:fc:a5:b4:3f:6e:32:40:85:d0:2d:8c:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 25 10:08:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=01d33c3d4aef094bfcfc5c8c30470a755391e48b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:98:f1:fe:1f:7f:38:20:be:0a:dd:1b:0e:bb:
06:e7:e0:b6:1c:1e:3f:b6:95:80:62:22:be:69:59:
95:86:2f:05:75:aa:f5:98:c6:91:6f:86:a8:6f:a5:
58:98:fc:28:ea:da:51:e0:44:79:02:d9:1a:eb:0d:
d9:73:5b:ea:69:45:ed:08:98:af:04:d6:05:25:b9:
9d:6e:92:7d:47:16:23:9d:19:15:54:80:69:c2:2e:
0f:8b:c6:e8:1a:3b:82:e9:e3:86:4a:64:0a:6a:c9:
ae:c1:20:51:e4:e8:4c:48:f4:d1:fd:ab:00:34:c0:
e6:2f:26:b2:12:72:8a:05:cb:a4:3f:b5:c2:be:f1:
cd:36:bd:1e:19:dd:f4:c9:d1:fc:74:f4:22:9c:f0:
65:cc:75:8c:ce:0a:9b:7a:f6:6e:da:0c:8c:c1:46:
14:1f:49:4d:ff:a2:9e:43:39:06:ad:75:ab:3b:4a:
77:ee:ae:19:f4:51:09:00:9f:d0:bb:a7:29:45:9c:
35:56:bc:9e:73:c1:be:0d:c2:b2:21:6b:95:55:af:
3c:a3:03:21:52:44:65:7f:39:65:46:c4:6d:f7:74:
23:5e:07:84:34:c0:19:cd:c2:88:ff:49:aa:30:6c:
f4:4b:75:49:e1:99:98:71:ab:6f:4a:71:3f:67:86:
f6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D3:3C:3D:4A:EF:09:4B:FC:FC:5C:8C:30:47:0A:75:53:91:E4:8B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AdM8PUrvCUv8_FyMMEcKdVOR5Is.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b2:1e:07:7e:75:98:ec:a0:04:80:3d:f5:07:45:b7:d8:21:e3:
19:71:b3:b2:61:49:6b:ce:5c:02:06:0f:48:2c:a6:21:e9:5e:
ed:d4:2e:7c:1e:ef:5e:18:c3:56:46:5d:43:61:97:38:8c:e5:
12:0e:64:58:9a:64:5c:2b:2e:74:97:98:cd:9f:b7:99:91:e4:
14:67:62:82:8a:9f:06:d0:dd:61:23:e8:a0:d9:46:ed:06:28:
a6:3b:45:ac:8d:e7:c8:a9:24:b2:ee:24:7d:c6:53:2b:8c:30:
0c:f5:d9:56:0a:d5:66:ec:40:4b:11:26:93:bc:79:c9:23:b0:
bf:0d:ab:be:51:9d:a4:a8:b3:f7:55:2d:ef:a8:ed:f3:18:f2:
3f:e5:31:d3:de:de:ec:57:40:d8:36:cc:f7:7d:3e:57:3a:cf:
2c:f0:d0:f0:48:39:06:d5:88:47:c3:24:df:7a:ca:97:5b:84:
31:22:6f:92:0f:24:61:50:d5:b2:aa:95:a4:8c:4f:d0:49:9c:
dc:eb:28:45:23:c5:c4:60:e5:02:bb:94:17:aa:20:b5:db:c2:
c8:92:11:81:7d:5c:15:6b:db:19:43:b4:cc:96:e5:8d:47:38:
68:2a:60:37:09:99:c2:77:d6:f3:91:2e:bc:65:e9:66:5b:c2:
39:0c:01:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:19:28 2025 by rpki-client