Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IDW0SwNxpBHFhW7s4nsUHyf6E00.roa
File: IDW0SwNxpBHFhW7s4nsUHyf6E00.roa (raw, json)
Hash identifier: OumwKeSYgIy2vzw9E+Pj1GeZcmie1bD1whNT6WlQmbY=
Subject key identifier: 20:35:B4:4B:03:71:A4:11:C5:85:6E:EC:E2:7B:14:1F:27:FA:13:4D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184DD7B2FE7AEF8BF663EB97D374E0BF1D3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IDW0SwNxpBHFhW7s4nsUHyf6E00.roa
Signing time: Sun 04 Dec 2022 14:12:28 +0000
ROA not before: Sun 04 Dec 2022 14:12:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:dd:7b:2f:e7:ae:f8:bf:66:3e:b9:7d:37:4e:0b:f1:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 4 14:12:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2035b44b0371a411c5856eece27b141f27fa134d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:55:dc:04:87:fb:67:1e:ec:3e:14:97:3a:24:
c1:4f:29:b6:6e:38:ad:5b:c4:17:f5:bd:1f:df:ba:
0f:9c:58:9e:33:33:9e:db:63:a5:a0:b9:d8:44:f1:
57:4f:56:92:df:2e:5c:e2:2a:56:8c:35:3d:5d:9c:
c2:dc:ac:24:0a:5e:ea:66:78:b5:d3:7d:6e:55:4a:
14:7d:12:05:5c:82:28:5d:5f:c8:45:7e:3a:4b:75:
79:69:ea:85:19:77:17:75:78:47:c5:ab:16:b9:11:
49:68:3f:dc:c8:43:e5:4c:05:78:7a:0c:11:f5:4f:
a8:03:87:ac:dc:f7:ad:f5:79:39:47:06:3c:a1:64:
1e:2e:49:b2:61:ee:e6:3d:90:5f:d1:45:73:89:bb:
6f:ce:f6:d0:82:ce:5b:06:22:6b:c0:4b:1c:e5:f5:
12:fa:ee:bc:1c:7f:ba:47:37:7e:2e:3a:d3:4d:dd:
79:8d:ae:ee:14:11:65:cc:1b:8b:a2:e2:4d:58:64:
81:49:33:71:af:eb:46:ad:8a:8a:5a:c6:d9:b6:3e:
15:3e:50:5a:3a:88:1f:e3:ab:33:3e:fc:ea:fe:5e:
2b:7e:96:fe:f0:51:0f:89:ca:92:86:7b:f1:ad:67:
11:88:16:e5:04:e9:a8:17:c1:9c:b4:98:aa:76:64:
23:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:35:B4:4B:03:71:A4:11:C5:85:6E:EC:E2:7B:14:1F:27:FA:13:4D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IDW0SwNxpBHFhW7s4nsUHyf6E00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
01:2a:eb:0b:b4:d6:5f:e7:59:15:f2:dd:cc:e2:a0:8b:00:b7:
5f:8b:cf:48:9b:4f:67:54:f8:f3:e3:27:e8:d6:b6:80:31:70:
42:f3:46:fb:55:c1:14:96:09:52:c2:84:1b:03:37:d8:94:ee:
2f:7c:e6:1a:11:c6:39:f7:12:f6:d2:85:d4:08:4d:b4:92:1b:
fe:8e:24:d5:95:79:1d:ab:45:84:d2:ce:93:05:ca:01:66:a5:
e8:b2:cd:b3:b4:05:d5:09:7e:c9:2b:3b:bc:8a:f4:3f:12:71:
8c:fe:73:e9:52:0d:da:27:83:0f:5a:b3:a3:f3:a1:69:bd:1e:
68:f8:d4:ec:19:a6:d3:ba:60:9e:44:d6:6e:22:95:7f:53:89:
32:c0:59:87:12:a6:1e:df:b7:bd:fe:dc:8e:82:52:44:dc:87:
2b:1e:7d:95:c4:ed:7e:b9:9d:10:de:df:d5:85:5f:40:73:e9:
da:60:b9:5a:20:d8:ea:48:46:2a:9b:7e:18:25:89:25:80:6c:
b3:5f:c3:3e:03:48:25:8a:eb:00:68:db:15:8f:74:e4:04:b2:
e4:e4:bc:a6:43:58:1b:30:a3:f3:e1:c6:c4:93:99:7e:63:c6:
a9:a8:a1:74:03:06:96:de:df:72:59:b4:8c:9e:a8:a1:5d:17:
5a:a3:b1:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:27:45 2025 by rpki-client