Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IAo-mj0KmG9uqOpUnOu0dumou_4.roa
File: IAo-mj0KmG9uqOpUnOu0dumou_4.roa (raw, json)
Hash identifier: mPf6egYFZPJi6sqLSANB34725ilyWPOrm5Zz20ugHSk=
Subject key identifier: 20:0A:3E:9A:3D:0A:98:6F:6E:A8:EA:54:9C:EB:B4:76:E9:A8:BB:FE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 779FB980
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IAo-mj0KmG9uqOpUnOu0dumou_4.roa
Signing time: Fri 01 Apr 2022 23:07:26 +0000
ROA not before: Fri 01 Apr 2022 23:07:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2006956416 (0x779fb980)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 1 23:07:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=200a3e9a3d0a986f6ea8ea549cebb476e9a8bbfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:96:b1:d4:d2:24:20:40:88:ab:2d:e1:04:67:
d1:f2:4a:8c:1a:4a:80:e6:4b:08:f0:d5:45:1e:42:
81:4b:a8:c4:d1:fc:fd:c3:da:ab:a5:ca:28:97:93:
06:97:5f:e2:cb:6e:d2:4a:d2:d5:14:f4:a6:93:cb:
60:44:62:23:72:2a:c6:5e:42:f7:98:af:4d:78:b8:
d1:70:9b:44:84:56:d9:cc:09:ee:df:08:50:ba:f7:
84:2a:c3:41:11:57:42:ce:8b:35:f7:dc:3a:c7:a4:
6f:6a:24:16:32:f3:bd:16:3d:61:dc:62:9b:51:4e:
25:b7:f2:9f:3c:c9:89:8e:c2:c9:97:b3:90:b3:fc:
ab:3e:cc:4b:d8:eb:12:cb:cc:24:ab:14:de:84:ed:
3d:77:c7:71:9c:28:87:22:58:03:05:fd:e6:1b:35:
d9:40:ce:59:f4:65:6a:81:d9:93:23:5e:3e:15:97:
e5:b1:48:b1:8d:b7:79:b9:f8:e9:30:bc:60:70:b3:
d7:f8:04:3f:be:c6:42:35:14:02:b4:0e:8c:0c:ba:
c3:a7:c7:b7:bd:77:59:c3:cd:18:7b:6a:ac:f0:a9:
bc:d9:d0:e5:61:c8:74:ec:d5:34:24:4e:59:ce:b7:
70:aa:cc:3d:e9:b8:49:60:42:8e:ed:b2:ba:a7:20:
38:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:0A:3E:9A:3D:0A:98:6F:6E:A8:EA:54:9C:EB:B4:76:E9:A8:BB:FE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IAo-mj0KmG9uqOpUnOu0dumou_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
66:28:9b:66:8b:36:ed:c8:f0:0f:48:4f:5c:cf:cc:4f:56:cc:
0a:61:de:bc:2f:7f:c3:e8:5b:f7:0d:55:77:de:60:59:2f:93:
80:51:c4:fb:a9:dc:91:f8:45:78:b2:ca:10:90:5b:07:4b:8e:
5c:01:e2:d2:4f:9c:7b:ed:d5:ab:e7:88:36:1b:ca:81:d1:03:
4b:68:6f:a8:93:6f:d0:7c:69:4b:cf:95:14:fb:09:f4:76:45:
18:59:f2:56:22:b1:04:8f:c8:31:c1:b0:4c:ad:0c:f4:96:1c:
10:74:57:d9:bd:7a:99:21:73:33:d8:8f:31:ca:27:81:5e:90:
14:4f:b6:b0:32:8a:2e:74:8e:4a:28:e1:2c:40:9f:ea:d4:f7:
4e:c1:3e:e1:58:45:6b:33:44:57:ee:cf:7c:7f:a2:5e:6e:cb:
ad:ee:df:c5:e8:49:37:a4:a9:f8:ee:33:b9:7d:5f:ae:57:15:
86:e7:44:3d:82:8f:7f:ff:2f:bf:54:dc:04:12:67:1c:94:2e:
a0:20:ef:d3:41:e6:69:b8:42:76:6c:be:44:1b:be:cb:5a:3c:
d8:4c:e0:3a:cd:0b:14:f6:d4:61:2c:60:52:ce:62:e8:f1:21:
7f:a3:73:cb:02:95:79:13:48:99:2f:18:35:71:f1:1b:72:08:
4b:3e:db:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:58:52 2025 by rpki-client