Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/P0c9I0mrOQVbEl3IQLxGDrlHHrs.roa
File: P0c9I0mrOQVbEl3IQLxGDrlHHrs.roa (raw, json)
Hash identifier: whxl9twkoOjbabUUuQK+6LeOw/WVNVUurC400oDZq64=
Subject key identifier: 3F:47:3D:23:49:AB:39:05:5B:12:5D:C8:40:BC:46:0E:B9:47:1E:BB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 66F0A41B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/P0c9I0mrOQVbEl3IQLxGDrlHHrs.roa
Signing time: Tue 01 Feb 2022 15:08:58 +0000
ROA not before: Tue 01 Feb 2022 15:08:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1727046683 (0x66f0a41b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 1 15:08:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3f473d2349ab39055b125dc840bc460eb9471ebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0b:99:c6:77:eb:1f:36:ac:3d:be:28:95:71:
f9:6f:f7:71:3c:3a:cc:17:b7:0f:96:ba:36:05:ed:
68:b4:27:b9:26:a9:53:fe:26:0a:15:3a:05:ac:22:
a1:e9:06:42:4a:fb:8b:04:3a:e0:1b:50:88:de:c0:
82:1a:d9:5f:d5:d3:e4:cc:b6:9f:b9:60:94:72:76:
3f:60:1c:c5:0e:3f:7c:29:0c:21:a5:15:ef:ae:97:
97:a5:d3:e5:3e:8b:06:9f:72:12:0c:33:3d:15:a6:
6f:4b:18:3b:0d:40:16:2b:07:51:1f:27:fa:ce:56:
b8:f4:14:15:8b:aa:ca:2c:15:95:43:8e:22:a1:25:
2f:bd:35:05:75:90:2b:5d:79:39:6f:70:02:a9:3e:
22:31:ee:8d:c6:09:84:65:46:a2:6c:3d:fc:2b:80:
55:26:ec:36:fd:34:4e:6d:b4:13:4d:a3:90:3f:4c:
04:d7:2e:a9:6e:68:4a:f3:35:0c:10:4f:a9:8c:24:
df:0d:83:73:9b:a8:8b:df:b0:bf:9f:e7:67:df:6f:
ff:c0:c3:0f:77:34:06:07:ae:4e:ed:82:e5:84:06:
75:d5:02:89:9c:e7:54:86:5f:27:5d:1d:d3:9e:7a:
7f:e4:e0:6a:97:b4:18:dc:88:f8:fc:db:7a:eb:d8:
ed:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:47:3D:23:49:AB:39:05:5B:12:5D:C8:40:BC:46:0E:B9:47:1E:BB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/P0c9I0mrOQVbEl3IQLxGDrlHHrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9d:ad:34:b4:c3:1c:f8:58:78:16:16:88:c0:a2:8c:81:68:11:
4f:a5:ad:b3:b3:c8:56:c3:fb:70:b6:56:bd:28:fa:75:75:7c:
fc:fc:79:6e:58:35:ac:9c:e3:bf:86:1a:07:94:84:1b:8b:97:
a9:7b:a4:6f:05:d9:bc:3f:57:93:90:29:58:b1:85:01:80:e6:
60:de:79:91:c4:9a:91:8f:bb:35:c3:28:03:dd:7f:53:61:a3:
ac:6d:2b:e7:26:84:5f:9a:43:3a:9d:a2:9d:87:de:da:6c:6d:
3d:fb:2e:1b:ee:7c:b6:26:d8:05:79:86:de:db:f9:39:03:86:
b8:49:8a:88:41:ae:3b:fb:39:0a:9d:a4:96:49:23:8c:0f:9f:
c9:15:31:f2:82:a3:76:cd:08:ca:2a:d6:35:ec:2e:96:7f:ae:
d6:8d:e8:f3:d6:0e:c7:02:cf:17:01:49:61:c3:0c:25:55:f6:
cc:15:02:b1:a8:e5:ee:57:2d:cd:bf:d3:f4:ab:e0:62:dc:57:
3a:91:65:7f:d6:d0:6e:bb:83:60:4d:06:f1:68:71:34:d7:d7:
c8:e2:86:8a:c3:3a:81:b1:de:9f:54:d5:38:22:63:1f:37:df:
f7:70:c7:1c:24:fc:fa:91:42:6d:51:ed:a7:53:de:bc:19:39:
73:7a:09:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:42:31 2025 by rpki-client