Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RLos5qf7wi8zVIVs9ogeNWx9234.roa
File: RLos5qf7wi8zVIVs9ogeNWx9234.roa (raw, json)
Hash identifier: N6SMDwFr8d9Ud9nYE6E+2JnS29SYzCLSfgrNRONYmUY=
Subject key identifier: 44:BA:2C:E6:A7:FB:C2:2F:33:54:85:6C:F6:88:1E:35:6C:7D:DB:7E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01833C21900B03D476BD1F0D5FE9E703FE50
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RLos5qf7wi8zVIVs9ogeNWx9234.roa
Signing time: Wed 14 Sep 2022 13:12:56 +0000
ROA not before: Wed 14 Sep 2022 13:12:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:3c:21:90:0b:03:d4:76:bd:1f:0d:5f:e9:e7:03:fe:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 14 13:12:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=44ba2ce6a7fbc22f3354856cf6881e356c7ddb7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4f:66:0e:6b:69:97:67:33:a1:df:89:02:3a:
ed:e1:72:94:36:ba:41:e0:6e:09:42:fb:20:07:9f:
4a:90:d1:75:55:48:60:40:86:b7:03:b0:32:60:34:
9f:52:1c:8b:9a:4e:d0:c2:f2:8e:6a:40:b2:b4:0f:
0d:6f:d6:9a:3b:57:5b:9c:ae:5b:07:a5:ec:67:3f:
7a:4f:08:2f:da:bb:00:c2:1b:da:c8:5a:bd:0e:af:
bd:84:8d:00:6f:a1:dc:6e:66:26:98:14:36:c4:47:
04:6d:0d:08:07:9e:f3:27:dd:15:14:1b:9c:47:7f:
e4:2d:1d:ae:b9:29:3b:fa:6c:8d:7d:1e:60:df:dd:
b1:c8:48:4d:a0:98:b8:72:44:08:2f:cf:b1:b2:38:
c7:d4:02:bf:d1:b5:76:0c:82:41:ab:ff:00:b3:f2:
01:53:60:da:21:61:30:33:72:ed:72:14:08:cb:49:
64:9e:53:4e:4f:d4:a1:5e:21:e5:20:92:b7:e3:e0:
7f:c3:43:85:14:0e:bf:c7:f5:ad:b3:14:42:e7:e7:
8e:4e:4c:0c:96:1c:05:3c:7d:97:99:3c:93:22:0c:
17:8e:d2:c1:0c:3a:1d:95:ad:fa:d9:39:e9:34:05:
2b:e9:88:61:15:61:a5:f9:d1:d4:a0:a6:db:1e:66:
bc:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:BA:2C:E6:A7:FB:C2:2F:33:54:85:6C:F6:88:1E:35:6C:7D:DB:7E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RLos5qf7wi8zVIVs9ogeNWx9234.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6c:bc:bb:e3:0e:60:3d:04:4c:ba:e2:ea:54:55:c1:9d:f2:14:
59:f4:43:c5:4e:e5:3e:6f:c5:68:c6:90:e2:98:04:5f:92:7c:
c8:25:a3:80:26:a9:04:d5:49:79:8c:30:c2:94:88:a7:31:f7:
cd:21:c1:fd:ac:59:06:4b:28:fb:e4:bc:51:25:5f:3b:3f:f1:
be:79:9b:8c:69:1c:33:55:f2:a6:b3:a2:d1:15:85:9a:11:95:
83:8d:b4:88:11:b4:a4:3b:eb:da:30:82:4e:75:b0:7c:f6:b0:
e6:25:66:52:cd:c2:07:ba:bb:cc:80:c4:15:67:16:b5:d0:cc:
ef:47:38:0b:07:51:6e:3d:9b:bf:ec:f2:6f:c0:68:33:f0:89:
41:27:9c:23:98:f3:c6:01:2d:d6:b6:7e:ff:7e:39:52:34:14:
b8:ef:44:9a:cc:21:31:e2:95:05:33:8a:c8:b1:f3:bf:53:70:
fc:49:af:65:90:14:cf:97:bb:56:e8:6f:20:22:7a:0b:0b:fd:
0e:22:65:7a:87:c1:aa:9c:bc:2b:6b:30:e8:7a:30:33:ae:47:
68:78:4f:fd:0a:09:24:d8:85:7b:ae:4d:5b:47:56:33:96:b7:
18:31:1e:b8:78:ef:e2:34:c4:0f:44:e3:e5:05:09:c3:93:58:
3b:7d:9c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:14:09 2025 by rpki-client