Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/R3et5TuI0Nrumjc85fENhZ9s7yA.roa
File: R3et5TuI0Nrumjc85fENhZ9s7yA.roa (raw, json)
Hash identifier: dt1DNMdyljI3Y5FOwTK4k9Y4xH/jJGhZNlMdPUFK+JQ=
Subject key identifier: 47:77:AD:E5:3B:88:D0:DA:EE:9A:37:3C:E5:F1:0D:85:9F:6C:EF:20
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01826821848D83E269BC0A0DD3EC0E741EE3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/R3et5TuI0Nrumjc85fENhZ9s7yA.roa
Signing time: Thu 04 Aug 2022 09:13:23 +0000
ROA not before: Thu 04 Aug 2022 09:13:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:68:21:84:8d:83:e2:69:bc:0a:0d:d3:ec:0e:74:1e:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 4 09:13:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4777ade53b88d0daee9a373ce5f10d859f6cef20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0a:a2:32:94:1b:39:3f:f8:36:16:0b:2e:ff:
70:11:48:65:1c:93:88:79:a0:86:07:9c:9e:43:59:
70:12:83:ba:8f:ca:2e:e3:99:d4:d2:8e:f6:a0:94:
b5:e6:71:43:27:69:42:a5:d1:f4:ac:46:e8:0f:3d:
f6:ca:3f:2e:f3:27:13:1a:c2:47:18:ba:4e:44:0c:
ff:96:74:66:9d:6f:e3:8d:0d:25:89:9f:78:7a:81:
fa:e6:ac:6c:be:eb:c8:75:8c:5a:91:4d:5f:1d:32:
b8:8c:a0:bb:af:aa:d8:f4:98:60:6c:46:02:26:b9:
2f:fa:01:3b:9d:b7:9f:23:75:d2:f3:65:ce:7b:64:
3c:e8:f1:10:d2:23:45:78:17:4c:87:b8:6f:b5:89:
91:6d:de:1f:20:80:3e:4f:b1:1b:a6:ac:ac:25:3f:
6c:da:81:f2:2b:4f:d9:e4:4f:db:9a:11:36:45:66:
b2:17:98:e9:41:07:72:03:3b:de:1a:a1:13:85:97:
4a:89:46:b9:1b:88:12:98:07:e5:03:d1:8e:04:13:
dd:c1:97:cb:f6:af:a3:52:44:5c:6b:f4:a4:96:dc:
e2:4a:eb:57:e8:99:21:7d:29:5d:6a:cc:62:ef:95:
7b:83:30:d2:80:c1:98:44:5b:d6:3c:6d:79:42:bd:
88:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:77:AD:E5:3B:88:D0:DA:EE:9A:37:3C:E5:F1:0D:85:9F:6C:EF:20
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/R3et5TuI0Nrumjc85fENhZ9s7yA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
38:e3:e3:58:b8:24:47:52:c9:1b:d6:33:af:03:42:5a:4e:f0:
fa:9a:4b:26:69:3c:1f:02:4d:3f:e4:3d:c8:e0:86:e3:86:bd:
7a:ce:51:3c:1b:ee:77:06:f2:ab:4f:66:b8:19:e6:ce:ce:0f:
ab:37:2d:c7:e3:a8:44:c0:7d:93:51:57:6e:dd:74:dd:ca:16:
ba:65:d9:b0:6e:fb:65:dd:21:61:21:f2:cc:99:67:48:27:8b:
40:22:88:ae:78:a9:56:81:0d:58:89:e7:e4:35:92:ab:4f:6a:
6b:fe:64:2e:e3:18:16:7e:24:74:88:fe:69:ce:c1:e3:8a:27:
d8:cc:f6:07:a7:8e:fa:18:4e:c3:f2:21:c1:7e:ad:cc:1a:0c:
3b:86:38:29:bd:79:30:79:40:d6:d0:76:18:c5:61:66:cf:dd:
45:41:8b:ed:10:20:09:97:33:a5:da:b2:ea:1f:b1:5d:53:d6:
38:c8:ad:82:50:30:c1:a2:27:a4:4b:d3:29:59:8d:0a:e0:0b:
fd:81:60:ab:0e:de:36:1a:76:17:22:a7:10:d8:58:e0:25:82:
bd:92:16:40:48:a6:81:59:5f:d0:ef:2c:13:7e:fa:c8:06:f3:
cc:f6:a9:c0:55:4d:36:c6:04:e1:a7:7c:7a:47:c9:3a:7e:2c:
06:d6:c7:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 23:01:04 2025 by rpki-client