Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DIxFnVdT582AjVYigtU4Uvp8SWw.roa
File: DIxFnVdT582AjVYigtU4Uvp8SWw.roa (raw, json)
Hash identifier: BA0getKhL2t1wx3aH0qfTMWvIstprv1VV5izvKw1CTg=
Subject key identifier: 0C:8C:45:9D:57:53:E7:CD:80:8D:56:22:82:D5:38:52:FA:7C:49:6C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018280D0C50CA306A622C689C1C0D65E4034
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DIxFnVdT582AjVYigtU4Uvp8SWw.roa
Signing time: Tue 09 Aug 2022 04:15:41 +0000
ROA not before: Tue 09 Aug 2022 04:15:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:80:d0:c5:0c:a3:06:a6:22:c6:89:c1:c0:d6:5e:40:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 9 04:15:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0c8c459d5753e7cd808d562282d53852fa7c496c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:86:da:e2:09:ee:17:13:55:a4:c8:f0:bc:23:
67:fe:b6:9b:15:ca:b9:3e:5d:d9:3b:6d:dc:a0:a3:
4c:a9:c2:f3:f3:f4:87:37:5f:c7:dc:8a:9a:b6:e2:
94:0c:83:13:de:0d:e3:b0:d5:04:41:73:05:a3:2e:
87:27:26:27:cf:44:2e:ed:9b:00:a9:e2:b4:54:04:
a3:18:cc:55:c3:14:37:eb:e4:97:d3:6c:f7:18:fb:
1b:30:07:3e:1a:4f:6a:53:53:e3:3f:d0:c0:af:cd:
24:a3:8a:87:ca:a1:9d:25:08:1c:4e:91:2b:f2:98:
58:f3:ed:e1:b3:d7:a5:a4:9e:a4:d3:7c:1b:1b:62:
70:30:21:95:8e:e4:e3:0f:71:6b:41:2a:fd:c6:aa:
36:72:30:43:74:5b:da:27:dd:ca:73:1b:6d:c7:d6:
2c:0b:75:80:a3:b6:bd:4d:b5:32:69:fa:bb:f5:59:
ff:db:f4:e7:7f:1e:f9:26:de:f8:4b:54:d1:8b:a2:
e7:fc:bb:ec:17:3a:1f:80:25:0a:2f:ac:83:e7:b3:
8c:2d:fe:87:b0:82:7d:b4:c3:aa:31:c1:51:69:1a:
02:f1:1c:b1:43:b4:ea:e4:34:82:64:ad:a3:a6:f5:
69:46:bf:58:c1:44:4b:ce:5f:30:01:aa:b3:22:34:
00:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:8C:45:9D:57:53:E7:CD:80:8D:56:22:82:D5:38:52:FA:7C:49:6C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DIxFnVdT582AjVYigtU4Uvp8SWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
44:6d:e8:6d:b6:06:ba:6c:73:0b:c1:2a:7d:c5:99:20:f6:2e:
71:88:ef:08:b4:6f:af:b0:13:17:2b:fa:42:70:7b:7e:2c:09:
d1:05:fe:ec:2a:b4:17:05:ee:af:05:21:d4:af:93:58:52:7d:
17:f2:af:cd:35:d7:4b:3e:06:ce:f5:3a:e2:5b:c6:b0:9e:7d:
f3:b9:5d:2f:f1:12:5d:23:92:1c:e7:30:58:d5:08:87:23:57:
8c:fa:9d:83:1b:24:7d:00:32:2c:22:14:5f:5a:98:1a:64:bc:
88:c5:59:7a:64:56:6e:1b:c7:4d:60:92:62:55:f9:10:a9:51:
24:9c:a7:5f:a6:e9:83:bf:94:74:4d:5a:3b:c2:f6:42:95:28:
1a:94:ab:5d:1e:8b:f6:75:7b:b6:0c:6f:7f:8a:73:ec:70:68:
d4:57:05:27:f5:ca:0a:e1:d6:48:0b:9d:3d:d7:a2:9a:e5:f8:
f8:50:29:b9:67:4b:43:53:e5:57:75:9a:cd:c0:3b:9d:3d:fa:
38:7f:25:24:84:eb:43:78:44:57:da:0a:12:a2:ea:6c:fe:0d:
dc:50:52:e7:12:a7:87:58:4d:a5:a0:20:d6:25:57:a6:a7:e1:
f5:ab:ab:79:b9:cd:74:3d:67:da:38:53:92:5c:19:b5:7b:a0:
13:7b:8f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 00:51:46 2025 by rpki-client