Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/R2dM_rtcRiX8R2am6xe358OQnC0.roa
File: R2dM_rtcRiX8R2am6xe358OQnC0.roa (raw, json)
Hash identifier: a2+6wXO2z/C4PwhCNZHIpzL1UjW9uKie7ar+Df0DyM8=
Subject key identifier: 47:67:4C:FE:BB:5C:46:25:FC:47:66:A6:EB:17:B7:E7:C3:90:9C:2D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01851DA119B69DEB0D1F1D8CCDAB394A3133
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/R2dM_rtcRiX8R2am6xe358OQnC0.roa
Signing time: Sat 17 Dec 2022 01:09:35 +0000
ROA not before: Sat 17 Dec 2022 01:09:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:1d:a1:19:b6:9d:eb:0d:1f:1d:8c:cd:ab:39:4a:31:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 17 01:09:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=47674cfebb5c4625fc4766a6eb17b7e7c3909c2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:74:87:03:60:5e:df:89:49:20:83:fe:9e:60:
bc:eb:ac:00:9e:65:b8:d0:f1:4f:f3:9b:44:5d:ca:
02:68:12:a5:b5:91:1e:bf:f1:ee:d7:d2:1c:f2:c7:
c0:ec:c1:53:24:86:7e:18:8f:ac:a3:97:a0:cb:f8:
55:ae:c5:42:99:9c:41:08:d8:b4:c0:0c:16:27:c4:
94:da:ae:6c:69:27:aa:a8:82:48:1b:73:b9:0d:32:
32:ef:f3:cc:7b:87:3b:56:a5:ba:46:db:64:26:57:
a6:25:2d:49:4b:7e:8c:41:81:f7:06:33:4d:c5:c6:
85:a1:45:eb:e0:a1:89:95:10:64:ac:e9:32:86:a8:
40:57:f1:75:32:9a:85:d3:9f:a7:04:da:07:b7:ca:
cf:58:2a:08:5f:7d:d2:86:da:86:0c:24:c2:e2:1b:
ae:25:34:fa:e4:52:c4:ba:0c:8b:8b:2e:e5:d2:3b:
72:d1:33:f5:d3:3c:55:db:97:10:8f:fa:0a:95:ed:
bd:15:73:2f:14:f3:5b:1e:c4:8b:38:73:ed:b5:15:
83:18:e4:b6:ce:af:47:1f:37:b7:6c:47:b4:cf:e5:
7f:5a:db:fd:10:37:d8:3c:c5:a3:b2:95:63:fe:5d:
35:79:1b:4d:14:86:d9:a5:c4:ce:71:17:45:87:92:
6c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:67:4C:FE:BB:5C:46:25:FC:47:66:A6:EB:17:B7:E7:C3:90:9C:2D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/R2dM_rtcRiX8R2am6xe358OQnC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
43:21:25:bc:33:52:67:a7:1e:02:ad:dd:dc:76:51:d4:30:f4:
86:fa:a5:d1:d0:3d:f4:21:14:9f:45:7b:17:87:b5:82:a0:cc:
e8:c0:60:72:0b:0e:1e:27:16:2b:18:1f:81:61:87:bc:37:aa:
14:72:47:91:85:43:cc:e0:84:35:6d:92:63:c4:54:38:ee:ba:
5e:00:af:0d:78:93:a1:a0:c0:60:42:0b:c9:78:df:9d:29:62:
77:05:1d:dd:ef:7b:1c:ec:ba:ef:5a:98:3a:b0:73:b4:91:80:
4e:34:3e:f6:b9:ea:ae:9c:75:0c:36:46:2d:d3:de:d8:5b:f7:
5f:3b:07:25:54:78:f7:31:bc:8a:8e:65:7f:37:f0:32:b0:73:
9e:12:a5:c2:17:9d:c1:0a:f7:83:bf:64:ff:4b:40:ca:ff:f2:
30:fd:f4:13:cd:70:47:82:c5:ac:bc:16:1e:03:9a:27:25:bd:
4f:d5:5a:38:84:18:01:35:f8:15:e9:9f:cc:d3:aa:10:ba:9b:
bf:54:b6:7a:79:bd:1f:dc:37:fa:a6:b8:f6:ed:8e:5a:ab:a8:
0c:67:42:6e:5a:f6:a7:01:77:47:9f:eb:5d:b5:e3:25:36:3a:
b6:ac:4e:13:84:11:23:0e:ad:73:8f:fc:f7:6b:66:2c:53:4c:
88:20:83:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:09:24 2025 by rpki-client