Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/K2PHFpqyymfUKrux8YLpRG5vIwk.roa
File: K2PHFpqyymfUKrux8YLpRG5vIwk.roa (raw, json)
Hash identifier: 6LfYrj8vzSjeumtjGEy3oP5HS8pI5YEz8QjWZvinPe8=
Subject key identifier: 2B:63:C7:16:9A:B2:CA:67:D4:2A:BB:B1:F1:82:E9:44:6E:6F:23:09
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0181FA0AA3E201E1DA09DBD9C6AD90119E3A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/K2PHFpqyymfUKrux8YLpRG5vIwk.roa
Signing time: Thu 14 Jul 2022 00:10:09 +0000
ROA not before: Thu 14 Jul 2022 00:10:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:fa:0a:a3:e2:01:e1:da:09:db:d9:c6:ad:90:11:9e:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 14 00:10:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2b63c7169ab2ca67d42abbb1f182e9446e6f2309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2d:37:7f:e2:c2:28:f6:d6:f0:da:ee:e4:23:
fd:5b:1a:07:30:db:15:fe:a3:1e:66:52:cb:52:af:
49:2e:1a:17:60:da:06:49:7c:b9:43:7f:ec:9c:89:
3f:6a:cb:1a:82:25:8e:8a:7c:54:9a:f0:f5:ea:77:
11:27:c9:f6:3b:4a:6b:55:43:27:c9:bf:fe:54:fb:
f7:19:09:69:ec:62:92:11:a0:99:f5:38:62:e4:a9:
38:50:b5:2c:08:3f:4e:b6:74:e6:2d:b0:60:8d:c0:
0b:39:f6:18:ac:a4:5f:17:2e:eb:7a:37:ba:13:f2:
56:44:8c:8c:37:e6:d2:ad:21:79:88:72:94:73:f6:
41:6c:b5:af:38:52:d6:72:2a:c6:9c:ca:6d:b5:eb:
0e:7e:71:ad:48:75:57:5b:fb:1c:25:1e:87:4d:c6:
ed:4f:16:42:ca:8a:83:97:25:f5:4e:7f:d1:15:84:
eb:cc:b7:15:96:bd:4e:00:c0:3c:a4:f8:df:25:a7:
ea:e9:fb:85:e0:50:dc:6a:2e:06:bf:2a:b1:9a:7e:
40:2a:09:af:a0:db:7f:31:ec:86:92:02:9a:ea:4b:
be:ab:3c:e7:21:90:d2:09:2c:13:ec:c5:10:4d:e0:
25:fa:f9:59:38:99:c3:e1:e2:9c:c3:82:86:de:80:
3f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:63:C7:16:9A:B2:CA:67:D4:2A:BB:B1:F1:82:E9:44:6E:6F:23:09
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/K2PHFpqyymfUKrux8YLpRG5vIwk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8d:0b:bb:2c:da:1c:85:a5:24:62:85:c6:1b:07:ce:bd:ef:4f:
d7:8a:91:a4:ed:6d:43:55:ca:38:3a:62:79:b7:21:0a:15:18:
d9:00:aa:df:b3:55:5c:74:59:7a:2b:f8:10:c9:3e:bd:28:89:
80:a8:a2:71:50:de:0d:17:d5:bd:fe:2e:c6:c5:cf:11:20:00:
c2:b8:c2:af:cc:db:2d:7a:85:d0:30:09:98:4a:8b:e9:2b:ea:
8e:3a:9c:6f:e2:2a:ad:6c:e8:34:4f:dc:74:17:e1:9b:1a:58:
b5:ed:96:35:c7:27:d3:a9:19:d3:46:3a:f2:22:02:1a:ab:76:
39:68:11:3c:29:72:9a:64:73:df:46:e5:fb:b6:92:03:ab:9d:
ae:6a:92:bc:eb:db:ed:1d:09:cc:be:76:5e:ba:ed:31:a5:db:
cd:64:61:23:a9:db:f8:12:d0:b0:cd:63:5a:bc:28:05:b9:f9:
94:14:e2:02:f8:da:48:73:38:61:9f:f0:7d:3f:bc:33:65:d5:
6a:a8:8c:66:90:83:13:f6:70:e5:97:ab:65:ed:64:35:e9:81:
94:1a:68:b4:33:5b:da:d0:87:17:35:9b:25:68:d7:69:72:b7:
2d:d8:5d:14:12:c0:e9:81:2f:8b:56:4f:b1:96:a5:45:51:47:
57:f9:17:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:53:15 2025 by rpki-client