Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RC8iyGr6uRTwWwUjQBzSz6iiVJw.roa
File: RC8iyGr6uRTwWwUjQBzSz6iiVJw.roa (raw, json)
Hash identifier: OnNSQRMDh0ptSenEgdnYbK8sjAO3WYoKKRebxwFepk4=
Subject key identifier: 44:2F:22:C8:6A:FA:B9:14:F0:5B:05:23:40:1C:D2:CF:A8:A2:54:9C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184DA416221A55A8AAD64617231DEAB9839
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RC8iyGr6uRTwWwUjQBzSz6iiVJw.roa
Signing time: Sat 03 Dec 2022 23:10:28 +0000
ROA not before: Sat 03 Dec 2022 23:10:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:da:41:62:21:a5:5a:8a:ad:64:61:72:31:de:ab:98:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 3 23:10:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=442f22c86afab914f05b0523401cd2cfa8a2549c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:07:b0:4f:8e:f9:93:4c:5a:14:53:25:b6:7d:
a5:46:31:14:99:03:b4:49:3d:1d:a4:da:7a:b2:76:
9d:0d:96:a3:03:1b:e3:8f:df:71:79:62:2d:bb:b6:
f4:5b:76:85:79:c4:fb:db:f4:72:35:a2:47:68:ce:
58:65:c9:fe:7d:d4:4e:64:be:dd:07:76:c7:a0:d9:
54:39:5c:e8:6c:05:48:9e:5e:50:ef:23:f8:28:89:
da:80:ff:72:bc:de:8c:4b:ee:39:1c:c8:c3:bc:05:
46:64:e2:46:f7:43:d8:d6:44:0d:b4:4a:6e:ff:fc:
f8:1b:25:d3:60:fc:ca:84:87:4b:e9:7f:cb:0b:14:
2c:74:c7:b9:77:3a:aa:01:55:ba:8d:3d:ed:57:7e:
71:f4:ff:b4:1d:40:04:a6:6f:9b:23:03:bd:40:59:
90:c9:7f:64:c3:0e:e4:ef:3b:f5:28:64:93:09:15:
4a:c8:e5:cc:da:0b:13:bc:58:9c:81:a6:c3:46:19:
02:05:44:24:8d:4a:ca:c4:8d:34:d9:16:ba:10:5d:
6f:03:f5:e0:44:4d:20:77:36:30:1f:f0:fe:f7:8d:
24:5f:33:bf:1a:ed:de:16:d4:87:e5:0a:8b:66:98:
2f:fc:88:9f:02:e7:fa:30:90:24:a0:6f:25:84:23:
a7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:2F:22:C8:6A:FA:B9:14:F0:5B:05:23:40:1C:D2:CF:A8:A2:54:9C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RC8iyGr6uRTwWwUjQBzSz6iiVJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
44:2a:00:a8:54:b4:6d:0a:a7:ec:56:db:96:09:9f:5c:9b:12:
a3:59:eb:13:c5:9c:45:b5:67:ca:8b:36:75:04:95:62:2e:fa:
d3:55:7c:69:a3:2f:c6:fe:b1:d3:59:53:0f:a3:ae:97:3b:ca:
77:ae:3d:45:af:19:54:82:54:e5:68:81:29:51:b6:d7:b2:27:
ac:50:3a:4c:3f:ed:e2:96:d8:b8:d4:20:58:5e:d6:71:50:12:
f8:39:28:01:03:d8:68:f6:55:47:97:ad:e2:d6:44:f1:f7:25:
7a:47:24:5a:f5:3e:85:ff:4d:ea:bd:6e:2d:42:b1:40:e2:d0:
44:d2:d3:1c:52:35:c8:8a:d1:b3:b2:83:47:07:2a:e5:25:67:
dd:ef:b9:83:29:14:7d:7a:fc:50:e7:b2:3f:2c:f8:c4:44:74:
0a:d5:81:c6:58:7b:7a:1c:90:6b:9d:b2:9b:f7:b9:65:98:ad:
3b:a1:46:a2:e0:cc:8e:8c:cd:f4:d5:5b:13:ea:b5:ef:b3:4d:
8f:84:92:fd:53:c1:8f:47:26:45:94:26:eb:2a:a5:c6:4c:05:
48:c0:fe:2f:7f:95:e4:00:14:53:38:3d:bf:4e:96:f1:1f:5c:
4c:39:6b:fa:67:b7:7d:86:8a:fa:24:6c:2a:cd:c9:3b:0c:ec:
4c:bc:0d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 01:45:05 2025 by rpki-client