Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/K5e5dO74WZgj4UNLNIAAdCEAbTY.roa
File: K5e5dO74WZgj4UNLNIAAdCEAbTY.roa (raw, json)
Hash identifier: gzDR7J069DUqFwUThLcQFkgulDc5KyEHlekMCfZMCyw=
Subject key identifier: 2B:97:B9:74:EE:F8:59:98:23:E1:43:4B:34:80:00:74:21:00:6D:36
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018428CF16241AAD599E6798CE27E62AFE66
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/K5e5dO74WZgj4UNLNIAAdCEAbTY.roa
Signing time: Sun 30 Oct 2022 12:12:51 +0000
ROA not before: Sun 30 Oct 2022 12:12:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:28:cf:16:24:1a:ad:59:9e:67:98:ce:27:e6:2a:fe:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 30 12:12:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2b97b974eef8599823e1434b3480007421006d36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:e8:10:ec:8f:92:68:bd:97:33:28:72:72:92:
8d:b0:b2:47:ce:60:8a:68:80:e1:50:9c:35:ad:d2:
f8:8c:87:12:25:d4:ba:4a:a0:cc:17:56:de:f5:cd:
d4:92:d2:40:da:ed:c7:55:49:ee:b6:ab:59:d0:c0:
e3:fb:e1:d2:97:5b:b6:69:4a:98:f1:a8:be:6b:78:
24:5a:ba:7a:1a:4b:bb:86:40:e2:d8:85:af:f1:b2:
71:fd:4f:c1:a6:95:bf:dc:16:2f:a5:b3:27:c6:3f:
c5:97:c9:fd:0a:5e:75:03:33:57:8e:d7:3d:45:05:
45:5d:d8:e0:b3:2f:70:19:b0:53:b9:85:7a:84:29:
15:67:45:8d:83:4e:4b:84:f4:af:af:a5:07:00:da:
09:f7:29:39:fd:58:a4:4c:61:2c:b3:06:7b:df:fd:
9e:99:61:30:47:6e:c4:82:b0:5e:83:fe:8b:ab:38:
63:ff:12:f1:54:3c:bc:e3:36:49:1a:c6:91:d3:5d:
ce:31:9a:5a:2b:af:c1:e3:15:e3:4b:df:54:2e:53:
25:56:71:5d:60:7d:0c:2f:2d:84:14:ea:a7:95:11:
a1:a4:60:90:74:e7:c4:27:de:c0:72:6c:a4:52:8c:
ef:76:01:f6:87:c5:1e:63:87:41:2d:a9:af:47:b3:
f9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:97:B9:74:EE:F8:59:98:23:E1:43:4B:34:80:00:74:21:00:6D:36
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/K5e5dO74WZgj4UNLNIAAdCEAbTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
27:bb:dd:d2:34:4b:ca:e0:75:f0:41:49:5f:c8:65:fb:f6:6c:
76:62:28:4a:32:aa:db:78:c7:ca:af:28:f6:1c:56:1b:05:79:
b6:9f:da:52:33:a4:44:92:50:3a:3d:d8:ed:b8:12:6f:32:8e:
01:e3:25:4c:77:12:ea:39:d0:64:62:44:e6:4f:36:ef:67:9d:
9a:05:c5:6b:61:eb:3c:5e:79:03:1f:cc:30:81:ef:04:5d:44:
19:8a:6d:6d:90:65:80:95:31:74:bf:53:2b:a4:b7:87:ef:12:
07:25:a9:83:61:72:e0:6d:10:e4:7d:01:16:e0:ef:54:c3:0d:
7a:9b:fe:dd:8c:8a:b3:64:60:c0:6c:71:c9:b5:fa:f9:7c:f2:
d6:24:5c:c6:76:0e:75:08:9c:65:b1:81:b8:99:ac:e6:ee:03:
ff:f0:31:f8:8c:ca:d9:e9:f7:d5:84:9a:3b:09:0b:4f:65:e5:
8e:f1:7b:a4:f1:96:f1:ee:63:81:62:8a:8d:4b:45:c3:51:4b:
79:5b:b4:b3:64:2d:d8:cc:7a:6d:0b:d9:cc:b4:70:de:22:2a:
ff:8b:38:77:97:20:0f:71:14:2d:b5:46:14:46:81:81:3c:02:
e1:a4:08:10:05:ca:7f:d2:e6:da:da:87:0a:55:40:8a:6d:cb:
63:4f:7d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:08:23 2025 by rpki-client