Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CLpIW6KTg6MO2VdRRalXh1TkbkU.roa
File: CLpIW6KTg6MO2VdRRalXh1TkbkU.roa (raw, json)
Hash identifier: qlbbb5aQBGxMjw+J7b891+kRxeMEE5b2I+9X5EQ2x90=
Subject key identifier: 08:BA:48:5B:A2:93:83:A3:0E:D9:57:51:45:A9:57:87:54:E4:6E:45
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 78AFFE5A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CLpIW6KTg6MO2VdRRalXh1TkbkU.roa
Signing time: Tue 05 Apr 2022 14:09:55 +0000
ROA not before: Tue 05 Apr 2022 14:09:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2024799834 (0x78affe5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 5 14:09:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=08ba485ba29383a30ed9575145a9578754e46e45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a2:d2:5f:0d:8a:0e:fe:7e:9e:b9:13:eb:63:
cd:19:6e:b8:13:c5:dd:91:1a:37:2d:44:7c:5c:97:
2c:52:99:21:7c:48:a4:a0:6f:e8:50:0f:29:c8:f2:
8c:5d:79:19:e9:46:9a:99:8f:34:b4:66:d4:da:c7:
18:97:43:13:bb:b1:12:86:b5:2f:8e:bd:bf:ea:64:
71:29:be:45:e6:18:b1:2d:2b:83:cd:74:21:c9:5d:
5d:0d:1e:53:24:49:2c:d1:ff:13:d8:5b:88:7d:cf:
a2:e6:ce:70:74:58:11:b7:f3:76:d8:14:58:6a:c5:
42:22:fd:b0:68:32:9b:80:96:f4:1e:41:b5:b2:70:
13:c0:dc:c5:27:c3:57:b9:32:10:60:8f:5e:9a:8c:
1e:be:36:5b:64:cb:66:69:8d:2d:22:92:ed:de:f0:
c1:2a:8a:b9:36:69:f1:fc:17:8a:44:29:a0:b5:b0:
a7:25:f4:58:5c:98:22:c0:bd:5f:1f:eb:fa:d9:1f:
d2:e5:1d:3d:9d:71:e7:d3:86:d1:ff:c6:6d:51:a4:
ca:49:1b:30:58:55:8d:c0:46:59:de:dd:0f:53:23:
54:c6:66:89:a0:69:ad:b9:40:bb:b9:43:aa:d2:20:
5f:7c:09:ea:c9:8e:4c:c7:5f:39:41:a7:4e:7d:6b:
36:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:BA:48:5B:A2:93:83:A3:0E:D9:57:51:45:A9:57:87:54:E4:6E:45
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CLpIW6KTg6MO2VdRRalXh1TkbkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1b:00:0d:71:3a:d1:d6:58:22:f5:dc:eb:eb:df:19:af:28:62:
57:eb:52:cc:e2:89:c3:2a:9b:56:60:3b:52:b2:b8:4c:63:50:
38:77:25:89:46:4b:bb:92:b2:6c:73:7d:69:0e:fa:96:59:76:
60:1f:d3:d6:95:69:fd:b0:b1:63:64:1a:1f:70:cd:96:b0:ba:
52:10:92:f5:65:3b:15:58:d6:f6:55:3c:b3:bb:cd:00:9c:94:
76:d3:7a:1e:96:9d:90:8a:96:ae:85:fa:87:78:04:27:81:20:
0e:a4:b6:92:96:f3:31:f5:fd:9e:79:08:43:bd:a8:23:e5:c7:
29:ac:d2:57:c4:12:b7:78:72:57:a5:5c:a1:59:58:5c:1d:fb:
25:f4:de:8e:78:b3:8c:12:66:b0:43:5a:bb:a2:d2:54:1d:2f:
bf:81:00:31:70:e7:47:13:5c:b4:8f:cd:8e:b6:77:4e:13:9e:
b7:a0:3a:2c:17:24:ec:94:0c:66:5f:cd:a9:dc:17:5a:37:f5:
a9:80:03:e9:94:1b:83:39:4b:71:e4:c8:44:90:ef:9b:3f:77:
cb:25:04:e9:bc:08:73:93:53:44:d8:c7:b1:c8:e8:cc:03:b0:
00:1f:a7:a5:bb:2f:09:d7:2e:08:39:e5:52:21:b4:3c:7d:c2:
c5:5e:f1:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 20:02:16 2025 by rpki-client