Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/E3E5F78r9YlcyBrKdW3ePLb5YP0.roa
File: E3E5F78r9YlcyBrKdW3ePLb5YP0.roa (raw, json)
Hash identifier: YmWVLCWH5k3Md2lJUHt/YYI+diyA7Yabc1MpPW6EBNg=
Subject key identifier: 13:71:39:17:BF:2B:F5:89:5C:C8:1A:CA:75:6D:DE:3C:B6:F9:60:FD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 71F12A66
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/E3E5F78r9YlcyBrKdW3ePLb5YP0.roa
Signing time: Sat 12 Mar 2022 14:09:53 +0000
ROA not before: Sat 12 Mar 2022 14:09:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1911630438 (0x71f12a66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 12 14:09:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=13713917bf2bf5895cc81aca756dde3cb6f960fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:1d:f9:24:85:fd:b2:b5:7e:14:3d:cc:fc:3f:
44:d9:13:0f:21:72:4a:7f:c6:3f:c5:f4:a6:36:16:
7b:e3:35:58:ec:60:7c:27:66:ff:9e:48:66:83:4a:
77:26:c9:8c:48:95:82:a0:05:cf:3f:ed:f5:a8:de:
47:ee:ee:86:c0:c5:37:15:1e:1b:25:f2:0a:0c:e5:
49:96:5f:9e:94:e8:16:de:f2:1d:e5:21:f9:a4:56:
df:48:d9:ae:23:a6:99:2c:79:ee:8f:ac:05:86:f8:
8b:eb:38:14:fc:ad:91:c7:1d:f5:e3:02:62:07:e6:
ed:e2:bd:08:75:0f:ab:20:82:ff:d2:ab:30:1f:2c:
0e:f9:fc:67:b1:c9:3c:20:59:2c:43:f5:44:e3:e6:
6b:5e:22:39:76:c4:e3:3a:cb:ab:2c:45:8f:25:d7:
8d:58:15:04:25:a8:e6:d6:c9:bb:d0:68:3d:52:62:
3e:91:af:69:8e:4b:71:1f:92:c1:9a:28:e5:b1:2b:
ae:1b:dd:f1:4b:fc:5a:48:21:d9:17:89:dc:8c:52:
8d:ee:85:52:4d:04:c5:f5:34:5f:af:47:f4:83:15:
e7:dd:cd:35:dc:13:f0:4a:b6:14:ea:a3:3f:80:b6:
65:5d:04:bf:10:f3:6d:1a:2e:98:bd:b9:23:6a:f9:
68:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:71:39:17:BF:2B:F5:89:5C:C8:1A:CA:75:6D:DE:3C:B6:F9:60:FD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/E3E5F78r9YlcyBrKdW3ePLb5YP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
12:88:09:cb:01:51:88:ed:f4:a9:52:b9:32:9a:8c:4b:47:15:
ec:43:cc:45:40:6d:d1:e0:68:71:a3:ca:c7:45:02:0e:6a:c9:
b8:b9:9a:ee:af:3a:ec:d7:90:84:9c:42:d0:6e:9b:e6:d2:30:
58:b1:80:c3:48:9b:38:7d:ba:85:26:84:05:b3:a6:71:b1:bf:
20:7c:9a:b0:0d:3c:93:e4:b6:60:88:bc:7c:56:07:36:7b:da:
25:dd:f9:27:59:83:56:e1:11:a2:f1:d7:19:79:c6:8f:ed:96:
76:b6:2d:aa:91:aa:a5:4a:16:f6:61:c4:7b:45:cc:6e:ad:cb:
85:d8:bd:d5:94:2e:b1:72:56:6b:59:09:23:6f:68:f7:10:d4:
b0:6c:64:f9:0e:46:4f:71:d2:e8:dc:ff:f0:fb:52:ea:45:e1:
92:5f:81:97:02:f8:8a:c5:e4:2c:e3:cd:07:1d:d1:da:08:10:
6f:d0:a1:a1:1d:d9:16:6a:36:54:9d:9b:f9:28:26:2d:84:cd:
0d:63:b3:95:d3:cc:09:5e:c8:6c:a7:98:0f:77:cd:7a:22:b3:
f3:68:2d:82:f3:05:20:da:31:c8:24:44:3c:b7:43:e0:64:c5:
ec:72:99:47:8a:01:8f:4b:4f:c5:cf:0b:38:ea:5e:84:bc:15:
3e:81:11:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:48:35 2025 by rpki-client