Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/E7rdoy3v7WwQf7Xy1ml0j64m5lU.roa
File: E7rdoy3v7WwQf7Xy1ml0j64m5lU.roa (raw, json)
Hash identifier: Kye7GBqk2Sa1CTBSyHc70z5neIEs1PwEPjzidTPMG4M=
Subject key identifier: 13:BA:DD:A3:2D:EF:ED:6C:10:7F:B5:F2:D6:69:74:8F:AE:26:E6:55
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01840C7B991F8EAC82538071B232807F820C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/E7rdoy3v7WwQf7Xy1ml0j64m5lU.roa
Signing time: Tue 25 Oct 2022 00:12:17 +0000
ROA not before: Tue 25 Oct 2022 00:12:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:0c:7b:99:1f:8e:ac:82:53:80:71:b2:32:80:7f:82:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 25 00:12:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=13badda32defed6c107fb5f2d669748fae26e655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:bb:92:9b:6e:50:b0:e0:68:26:41:8b:63:c4:
29:2a:b6:46:62:59:74:08:4b:93:b2:a1:a8:17:ae:
6e:89:00:75:89:ea:a3:2d:78:3e:77:b7:10:40:93:
69:a2:cd:43:f3:86:2f:8e:18:9b:5d:7c:77:3e:7e:
71:3b:3a:46:c0:e8:c7:e5:c9:b6:d5:62:91:01:ec:
1c:fd:a5:ba:01:a5:87:b4:a6:af:2e:39:5d:56:3d:
6e:bc:c5:b9:37:10:5b:b2:8e:9a:5e:96:5b:b6:3a:
e2:71:c3:a9:62:3b:b3:7a:7d:96:ae:09:1f:ee:17:
52:8d:0d:5a:df:1c:47:d1:1c:72:42:54:b4:5e:bd:
35:a0:3e:dd:ad:55:78:64:ce:da:41:ab:94:99:56:
46:28:1d:a1:99:5b:47:5d:e8:52:86:e2:61:2c:b2:
12:1f:46:71:40:5a:f8:5c:58:cb:01:c1:e3:47:0a:
5e:9f:6f:13:c1:0b:83:38:7a:cb:0c:91:08:4d:28:
11:69:01:3c:70:d5:b8:ee:a3:6b:ae:5f:f4:42:04:
fc:c7:f7:14:c3:1d:a5:ea:d0:8b:da:66:3e:25:9f:
d6:61:b8:71:e0:3e:7e:5c:bc:40:43:7a:0c:c1:e6:
3a:45:1b:2f:2b:b1:c6:a1:13:af:69:61:f3:02:64:
48:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:BA:DD:A3:2D:EF:ED:6C:10:7F:B5:F2:D6:69:74:8F:AE:26:E6:55
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/E7rdoy3v7WwQf7Xy1ml0j64m5lU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5b:ee:95:d3:1c:34:a3:11:09:7f:2d:db:03:3c:40:1c:16:aa:
2e:e5:87:7e:20:49:05:d1:f4:ef:04:9d:35:49:35:e6:cc:e7:
74:c3:e2:65:b1:d7:55:fc:83:a2:43:ea:35:e1:7b:1a:bd:79:
f9:3f:a7:07:f0:b5:bc:6e:4e:79:fa:c4:5e:9e:74:9f:f9:93:
4d:7e:5e:4f:38:56:d9:20:16:ed:59:f8:9c:47:85:9a:5c:a9:
d7:23:1a:cb:90:96:c9:04:8a:fa:6f:83:96:5b:89:a3:e1:c3:
f0:db:0a:90:8f:6a:48:fb:c6:dc:c3:71:43:bf:b2:a5:19:18:
33:f8:79:c4:4b:e5:28:ba:56:ef:74:cc:e7:e6:35:78:07:a1:
3f:28:16:a5:dd:70:0d:52:4d:80:5f:14:bc:b2:21:b7:bf:e6:
76:b7:76:05:03:fb:39:de:95:8d:da:20:f8:dc:56:13:a3:4c:
92:55:8d:c9:40:70:6b:83:9c:47:63:fc:5d:b5:62:2e:78:6a:
72:ef:27:f3:d0:13:f5:66:dc:1a:87:4c:48:0f:7f:b4:3f:12:
fd:16:19:64:ce:38:bc:a5:59:3c:85:2c:a3:54:0d:d4:fb:36:
1d:fc:b6:aa:d7:e2:3a:c3:24:6d:10:06:f5:80:f0:7c:93:4c:
be:43:48:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:00:56 2025 by rpki-client