Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CXht2qWtURbECqXjiOr6ju-xSMc.roa
File: CXht2qWtURbECqXjiOr6ju-xSMc.roa (raw, json)
Hash identifier: xeRwv/5f5z53Meqkg13ArzOnDO94AFkT0EgFPQUvTYs=
Subject key identifier: 09:78:6D:DA:A5:AD:51:16:C4:0A:A5:E3:88:EA:FA:8E:EF:B1:48:C7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01843C1D1671AE492EC9004FCE14CF5687A9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CXht2qWtURbECqXjiOr6ju-xSMc.roa
Signing time: Thu 03 Nov 2022 06:10:49 +0000
ROA not before: Thu 03 Nov 2022 06:10:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:3c:1d:16:71:ae:49:2e:c9:00:4f:ce:14:cf:56:87:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 3 06:10:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=09786ddaa5ad5116c40aa5e388eafa8eefb148c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0e:4c:e9:a9:36:97:98:05:04:06:cd:32:72:
47:95:85:ba:61:e2:7a:fa:01:64:61:2a:3e:a2:69:
8c:50:31:04:8d:bc:0f:42:9f:f2:2f:7f:da:f0:72:
4a:ce:9d:5f:e2:2d:01:04:e9:0b:22:bb:91:97:92:
4d:fc:00:86:6d:04:05:f2:44:d2:72:f1:30:df:85:
fd:fb:b5:b8:34:95:3a:7b:2a:4b:98:5f:bc:9f:0c:
b1:a7:e2:6f:d8:49:1c:dd:e7:c1:db:58:89:71:d2:
96:b6:87:f8:4a:a2:0f:af:88:7b:c3:ef:00:bc:90:
84:0a:36:02:98:63:8b:db:4d:b2:b2:db:26:24:df:
0b:c4:31:5c:00:a0:89:b5:2d:c2:0c:8b:0a:bd:41:
01:49:f2:25:d1:40:14:e8:b2:f7:ae:85:3e:d7:d6:
cd:c0:3e:7d:76:cf:13:84:70:c2:fd:47:10:56:f2:
ce:e0:2c:b5:49:fe:97:e5:cf:ee:2a:05:dd:7f:e5:
57:fa:0d:d0:be:aa:e6:d3:eb:41:67:91:fa:ee:48:
cd:30:4d:bd:5b:a2:91:38:c8:e7:b9:3c:39:0c:a6:
eb:da:d3:94:4f:f6:ce:38:42:69:9c:4e:7b:b7:ad:
64:1c:f6:a8:db:2b:07:d0:fa:95:34:a6:97:85:31:
ad:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:78:6D:DA:A5:AD:51:16:C4:0A:A5:E3:88:EA:FA:8E:EF:B1:48:C7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CXht2qWtURbECqXjiOr6ju-xSMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1f:29:98:bc:3d:db:7c:4a:c4:86:65:5a:f8:18:40:72:50:43:
b6:a0:ab:6a:e4:eb:6b:29:19:83:1d:01:7b:a0:0e:78:76:2d:
99:50:46:c3:2c:5d:31:a8:cd:54:cb:4a:02:52:82:f6:9b:11:
cc:71:57:75:30:f3:cb:44:10:2c:b4:58:b0:1a:a2:73:0e:02:
f1:50:d6:5b:87:18:44:50:c2:d7:6a:76:af:75:77:cd:03:61:
e8:67:5c:bd:8c:3d:98:ee:69:e1:44:fe:ba:5f:16:42:7f:db:
83:3f:64:65:4f:a4:80:c0:45:6b:ff:ed:63:0d:6c:5e:4f:e6:
e0:3c:21:52:a6:a9:e8:6c:c3:bf:d7:72:8e:8b:74:70:ac:61:
e3:08:e6:04:64:37:de:ab:88:31:72:15:e8:1f:09:0d:1e:3d:
5f:33:2a:55:c1:6f:9e:df:66:41:2c:d9:b0:e7:49:a4:ee:fb:
1a:e4:1f:1a:88:84:7a:35:39:12:61:b0:57:7a:e3:5b:f1:de:
42:bd:c7:37:17:64:46:c8:93:20:a2:32:eb:5b:a3:1f:79:f8:
dd:3a:0e:5b:c2:ba:d1:52:e4:4c:f1:b3:dc:b7:81:33:96:82:
48:b0:0a:6b:3a:6f:26:f9:bd:cf:ad:28:54:f2:3c:a5:83:eb:
b7:dd:f5:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:41:27 2025 by rpki-client