Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EdlbdsbnzsVOe4dAhkMbprqlch4.roa
File: EdlbdsbnzsVOe4dAhkMbprqlch4.roa (raw, json)
Hash identifier: YoItfFTN1LbI+TIaeFyFmUX5Z0GvAXNjlVfgNokQEv0=
Subject key identifier: 11:D9:5B:76:C6:E7:CE:C5:4E:7B:87:40:86:43:1B:A6:BA:A5:72:1E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01821218796F8E40BBDDC391BFB4C4A6A1EB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EdlbdsbnzsVOe4dAhkMbprqlch4.roa
Signing time: Mon 18 Jul 2022 16:16:10 +0000
ROA not before: Mon 18 Jul 2022 16:16:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:12:18:79:6f:8e:40:bb:dd:c3:91:bf:b4:c4:a6:a1:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 18 16:16:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=11d95b76c6e7cec54e7b874086431ba6baa5721e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:97:5a:f8:67:14:64:e0:9b:f6:a8:48:27:e6:
68:87:83:76:08:91:af:7c:4f:3a:61:22:15:13:46:
44:4d:29:06:c1:4f:f8:de:d7:f4:d2:27:13:d2:3c:
7b:00:54:7f:84:8a:0e:53:58:26:ae:8c:89:1f:ca:
88:bb:67:5e:95:b7:ac:63:d4:f5:9c:90:d4:f2:bd:
8f:a8:4d:ff:c2:22:09:a6:b9:99:25:69:25:fb:27:
fc:eb:fc:38:56:04:ab:36:9f:2d:38:e1:a0:ba:b7:
d9:0f:0e:0b:d9:61:62:91:00:32:87:65:24:27:c0:
cc:24:52:58:03:a9:84:20:c2:64:f1:b4:2a:8d:88:
40:67:52:a1:8c:96:54:4c:a6:aa:be:8b:c2:cb:75:
cc:a8:dc:8c:a1:3c:00:e9:f4:f9:42:0c:82:10:56:
89:3b:4f:26:ea:65:f3:e1:ef:50:9e:36:78:e0:8c:
ea:c3:4f:ee:a4:2a:5a:58:ed:ef:ff:9b:12:26:b0:
9a:28:6b:0e:2c:ae:b6:8f:e1:9f:23:8e:95:1c:47:
2a:0b:13:89:ad:6b:1e:d8:f1:67:32:46:62:8d:4e:
31:ee:d2:d0:8d:94:46:44:aa:3f:2f:06:4d:60:de:
0d:12:6a:d7:c5:dc:40:0d:70:f4:8e:3f:bd:ff:dc:
83:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D9:5B:76:C6:E7:CE:C5:4E:7B:87:40:86:43:1B:A6:BA:A5:72:1E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EdlbdsbnzsVOe4dAhkMbprqlch4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
96:0e:73:78:23:ec:de:75:eb:c9:c1:ad:77:5e:ca:15:b6:03:
df:c4:60:a6:de:89:ec:6f:50:84:da:a7:eb:16:b5:45:0e:62:
eb:03:d3:de:4e:40:ef:eb:09:a8:38:6b:d0:0b:b1:23:95:52:
e5:b2:ba:8d:f7:92:ed:7b:c6:0f:ed:71:5b:86:4f:6b:49:9c:
ec:71:06:09:56:9c:c0:4e:12:25:9e:c7:f1:bb:65:aa:8b:16:
1b:bc:f9:4c:5f:17:d8:fe:4b:8b:6b:4a:d0:97:e3:8c:9e:bf:
b8:52:75:72:91:30:4e:76:23:01:4c:51:9e:0a:bf:e8:d1:b3:
b3:c8:26:15:a4:31:9a:10:1c:a2:bc:e6:a1:b7:95:e4:55:28:
e0:b1:8e:a8:49:5d:74:19:46:33:97:4d:a2:f8:65:b6:df:a7:
f8:d7:45:7d:20:a1:ea:1a:12:ed:66:ad:da:5b:5f:b2:95:87:
cb:ec:da:df:23:ec:bf:f0:3d:fd:41:21:25:89:d9:1d:fb:79:
29:9d:68:b7:64:3f:c5:e9:c9:f2:e4:60:91:5b:de:c1:e8:52:
70:d5:b3:6e:eb:a4:87:2c:ca:36:3d:6c:41:ea:45:9f:a9:48:
85:1f:71:81:64:c5:d6:b8:4f:93:56:aa:80:2b:46:49:ca:03:
dd:a4:ff:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:04 2025 by rpki-client