Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KSSsqtxH1VudK1u74BhrViPmIfw.roa
File: KSSsqtxH1VudK1u74BhrViPmIfw.roa (raw, json)
Hash identifier: qZSoP7MYiLLTZjOF0LCTvA6SdbdKTniOYW+q3fybj6c=
Subject key identifier: 29:24:AC:AA:DC:47:D5:5B:9D:2B:5B:BB:E0:18:6B:56:23:E6:21:FC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184D4781314A682716F6D27BBF2DE50B2EE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KSSsqtxH1VudK1u74BhrViPmIfw.roa
Signing time: Fri 02 Dec 2022 20:12:29 +0000
ROA not before: Fri 02 Dec 2022 20:12:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d4:78:13:14:a6:82:71:6f:6d:27:bb:f2:de:50:b2:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 2 20:12:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2924acaadc47d55b9d2b5bbbe0186b5623e621fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8a:3d:25:ad:03:4b:59:87:7e:7b:68:0e:4e:
bf:32:be:68:e9:64:5d:33:b8:d3:3e:97:20:92:61:
18:7b:cb:76:f6:03:98:07:00:63:b6:72:8a:11:a8:
c8:2e:64:88:9a:cf:d4:1b:dd:1e:9f:11:18:ca:d3:
aa:8b:48:9b:73:e0:f3:3b:e9:fb:29:d4:23:ee:86:
e0:6e:65:04:8a:bc:8d:d9:9e:9e:57:0f:4d:a1:44:
d5:4d:c8:46:74:5a:66:f8:05:51:e3:7f:74:40:93:
17:1d:a8:53:5b:c2:2a:f8:cf:72:fc:bb:05:94:34:
51:f6:c9:39:01:1e:d2:81:a8:d1:4b:96:a5:97:71:
2b:23:46:d4:e4:bb:09:02:3e:ea:e7:3d:e1:29:a9:
40:0a:49:5e:39:2c:31:d8:b8:cb:f9:08:8b:4e:84:
7a:93:6c:66:32:08:84:78:6f:71:7a:5d:bd:c5:2e:
33:18:50:7f:c9:28:d6:83:c8:fb:a4:f1:7e:8e:a1:
44:46:85:3a:41:2b:53:9b:41:80:40:fc:02:3d:79:
0c:58:82:02:cd:9a:2a:af:63:ce:b5:d7:4f:43:00:
ac:35:ad:7a:78:5d:ec:e7:54:21:f5:6d:73:8a:13:
98:31:47:92:9d:2d:53:29:13:10:46:5e:d1:a8:65:
1a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:24:AC:AA:DC:47:D5:5B:9D:2B:5B:BB:E0:18:6B:56:23:E6:21:FC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KSSsqtxH1VudK1u74BhrViPmIfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
90:42:7f:84:c1:58:b1:ac:22:49:51:49:04:bc:3b:00:28:c1:
c7:2f:59:51:33:32:2d:ab:49:11:ea:ba:93:9f:6b:4f:1b:f3:
7d:65:72:d6:44:d3:eb:80:88:d2:ee:58:4c:ba:83:19:d5:aa:
d9:75:8a:7a:59:56:36:52:61:bf:de:1b:87:29:51:8b:1c:e6:
81:ae:f9:0d:55:05:59:3e:c7:51:41:55:89:d0:b6:d0:67:61:
2a:47:dd:75:90:d6:b3:54:e4:38:b2:40:21:63:ac:54:6e:53:
28:3d:ae:cf:0f:02:cc:37:46:26:fb:9b:df:31:64:ca:b8:d0:
1f:f1:17:da:9f:53:d5:72:6a:5f:ba:f3:8a:cc:ef:59:8b:4d:
ce:81:06:1f:5a:c6:c2:65:c2:b2:cf:c7:3a:d1:1a:72:46:78:
9e:e0:cc:ff:96:4f:94:20:99:6c:e7:9a:fe:4e:31:8a:ab:f6:
3c:21:b1:e7:25:28:57:c6:cf:ba:7e:80:6b:5a:ba:37:a6:00:
cf:d6:d2:73:07:ea:74:24:02:90:c8:d4:46:25:23:01:6d:ce:
2b:ea:94:10:97:54:17:eb:e7:40:c6:61:af:42:3e:e1:9d:d3:
5b:c7:5d:e5:3f:0f:15:1c:82:1f:95:9d:86:29:38:94:10:2e:
fe:1e:f4:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:01:32 2025 by rpki-client