Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/R2Cv1HmeyEUQfTMCv-ytSWGu4j0.roa
File: R2Cv1HmeyEUQfTMCv-ytSWGu4j0.roa (raw, json)
Hash identifier: q9X4zfbt5cSjeVFk3MQ9vJ2wOKOKlBcIQ/N2K4Ux6M0=
Subject key identifier: 47:60:AF:D4:79:9E:C8:45:10:7D:33:02:BF:EC:AD:49:61:AE:E2:3D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185530F2DDB3FCE307819157A9C6B8B3040
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/R2Cv1HmeyEUQfTMCv-ytSWGu4j0.roa
Signing time: Tue 27 Dec 2022 10:09:41 +0000
ROA not before: Tue 27 Dec 2022 10:09:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:53:0f:2d:db:3f:ce:30:78:19:15:7a:9c:6b:8b:30:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 27 10:09:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4760afd4799ec845107d3302bfecad4961aee23d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e5:cd:ef:22:eb:7a:44:0a:ea:65:86:be:27:
0a:8e:45:3d:81:57:37:32:4e:3d:02:4b:64:33:96:
f2:4b:e3:41:09:94:af:27:80:e2:7f:54:85:73:71:
22:02:fb:b2:37:32:f3:7c:76:2f:40:55:ec:8d:42:
71:d0:ec:3c:56:5b:62:b5:ef:b9:a5:58:bd:82:83:
16:4a:12:6f:01:a7:02:11:13:25:e6:11:8c:c1:03:
c5:42:65:ad:25:69:3c:55:a5:76:4b:68:72:e5:b6:
7e:9b:32:fa:dd:39:04:ce:b6:b8:51:3d:97:1f:52:
9b:4c:e5:7e:83:05:3f:7b:18:4e:74:8a:a9:42:3e:
de:61:7d:07:e8:95:51:63:8f:fa:48:f2:ae:0a:26:
6a:c2:6c:59:cd:29:87:2f:a5:9d:b2:bd:8c:11:ce:
e4:4e:51:9e:c1:11:1f:84:86:3e:ac:f9:53:2c:05:
77:34:98:12:a4:82:ed:14:6b:59:79:cd:4b:ce:00:
44:0f:8c:ad:26:d7:f7:7c:0a:7d:66:a8:fc:bf:29:
98:9a:3d:70:bc:7d:7e:17:c5:dc:26:ef:af:41:96:
cd:45:3a:1b:93:f9:b7:fc:0f:b5:b7:b2:9d:46:e0:
d2:20:bc:e8:95:7f:74:82:57:3b:8a:47:0b:3c:5d:
a1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:60:AF:D4:79:9E:C8:45:10:7D:33:02:BF:EC:AD:49:61:AE:E2:3D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/R2Cv1HmeyEUQfTMCv-ytSWGu4j0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b2:aa:73:56:1a:80:9e:7f:5f:84:1e:f0:50:6a:e2:3b:11:f3:
02:e7:09:11:44:51:d1:4b:9b:ca:f4:33:ea:a3:86:41:48:13:
34:c5:30:50:b6:9a:11:66:9e:01:44:0f:c1:4f:8f:65:22:5d:
c2:9d:e0:0a:f0:2c:b4:64:8e:e0:44:86:9c:ed:a0:1c:3a:ff:
0c:d4:7b:ef:c8:2d:71:45:6e:24:2d:34:5a:a3:1f:62:1a:53:
5e:3f:49:b2:44:2b:30:e6:65:8b:f8:71:a3:a2:ae:0c:c4:b3:
00:01:7a:62:4f:d8:7d:51:69:76:d5:78:9d:92:02:d8:59:b5:
c8:cc:da:0e:05:d3:0c:e2:64:23:a9:98:42:03:9b:29:23:49:
d8:17:2c:d5:0a:39:9e:3d:6f:7c:bf:fe:7e:14:62:63:a5:4b:
27:44:23:60:20:ed:67:5f:90:2b:20:e4:26:94:ec:df:cf:cc:
55:f9:38:d4:f3:44:04:e3:bc:1e:78:7d:b9:e2:f4:7a:a9:a2:
9d:b9:da:8a:46:a1:28:2d:3c:a2:a9:62:8f:8e:19:2e:dd:78:
bd:d2:bc:95:6a:cd:cd:60:42:60:37:21:40:39:78:5f:d0:4a:
ac:8f:61:b6:7b:8f:31:9a:97:09:e9:99:fe:db:83:2b:16:e3:
1b:f0:43:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:35:43 2025 by rpki-client