Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MD4bRwOEv12lb7YSBqbdi1_FYvw.roa
File: MD4bRwOEv12lb7YSBqbdi1_FYvw.roa (raw, json)
Hash identifier: NnVQb0mPKCFc5k+Ro+o+0ovW+vZlzho4mWn7Qc7wgUY=
Subject key identifier: 30:3E:1B:47:03:84:BF:5D:A5:6F:B6:12:06:A6:DD:8B:5F:C5:62:FC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01851B43EF0A30E85E0E76F32AC61808DB18
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MD4bRwOEv12lb7YSBqbdi1_FYvw.roa
Signing time: Fri 16 Dec 2022 14:08:34 +0000
ROA not before: Fri 16 Dec 2022 14:08:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:1b:43:ef:0a:30:e8:5e:0e:76:f3:2a:c6:18:08:db:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 16 14:08:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=303e1b470384bf5da56fb61206a6dd8b5fc562fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ac:17:f0:3e:7a:9c:6a:96:89:30:a1:9d:b0:
33:6b:b5:c1:20:7a:8e:03:c3:82:7f:70:9d:aa:0b:
30:ad:8d:0f:9e:c7:0e:06:6b:08:bd:70:98:3c:1c:
d8:cc:74:f1:3c:fa:82:12:07:0f:45:ee:cd:1c:1f:
63:d3:95:cf:0e:25:2b:a1:51:72:95:89:04:c3:32:
8f:06:a9:4d:52:f5:3c:e8:9d:8e:fb:8d:e7:b2:9e:
65:d9:76:97:13:d9:56:e1:24:d0:d6:84:68:2c:3c:
70:55:f0:41:54:bf:30:a2:0d:5d:65:bf:09:70:08:
38:b4:20:e1:22:ad:fb:92:07:b7:4c:ae:ac:42:9f:
f6:b2:e0:3b:4d:4d:3a:e5:37:4c:67:a7:f6:77:6b:
49:4f:94:5a:55:6d:d6:42:95:f8:43:16:08:47:60:
43:fd:3b:3b:41:e8:92:dd:2e:0e:84:69:45:43:f0:
6d:72:08:14:0e:15:0b:77:6c:1e:0c:87:9d:37:af:
b9:56:c6:e9:ca:66:17:e8:11:1a:32:25:75:08:8f:
fe:b8:15:ed:99:48:1e:16:9b:2f:0d:44:1d:c1:df:
b1:d3:89:0a:8e:74:f5:c4:dd:01:a3:b0:c7:67:02:
25:82:d9:f8:03:02:a4:b1:80:73:ab:35:96:31:0c:
30:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:3E:1B:47:03:84:BF:5D:A5:6F:B6:12:06:A6:DD:8B:5F:C5:62:FC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MD4bRwOEv12lb7YSBqbdi1_FYvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
47:2e:c2:ad:25:9e:9c:0e:01:53:a0:59:ea:af:41:f2:95:3f:
45:bd:18:c3:58:2f:9b:7d:1f:1b:3d:b4:66:03:9e:cc:17:f5:
31:5f:1b:4c:1b:87:e3:3c:e0:eb:80:b2:cc:10:48:71:66:54:
47:4a:c7:92:d6:cd:f7:c2:a5:38:12:26:e5:14:b0:95:5c:4d:
03:0a:a0:5d:03:26:7e:db:7a:49:85:30:8c:58:04:68:b6:70:
d5:2a:e3:2a:08:69:9b:02:d6:77:e1:73:78:0a:21:60:3c:68:
4e:37:c6:62:37:32:de:48:a4:3b:1f:85:7b:e0:8e:4c:4e:f7:
c5:ea:59:18:67:9e:f6:58:6e:19:65:21:ea:21:9a:33:71:51:
7d:f7:14:b8:5b:ad:a0:59:f0:49:fb:14:46:ba:3a:c8:00:40:
61:eb:a6:99:41:03:95:02:9e:ef:4d:df:f5:88:cd:06:5a:e9:
5c:5d:03:c1:41:95:76:3f:d9:db:a5:5a:05:35:60:cd:76:c7:
4a:05:a8:bf:76:11:9b:bb:97:77:7f:c0:a7:95:f4:55:e5:9e:
54:68:cc:c1:c9:93:5f:f2:f6:ef:11:c1:5b:d5:66:76:fe:36:
fb:c4:42:86:5d:eb:24:cb:21:af:7b:a2:eb:3f:75:98:a1:48:
4b:5a:26:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:15:23 2025 by rpki-client