Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RUD9NKZMKM29_VCjXWNGLwkESm4.roa
File: RUD9NKZMKM29_VCjXWNGLwkESm4.roa (raw, json)
Hash identifier: ayt3wGU0vuVeNgM2XYo8XkE9l13ll2T1DMmWMW0CuXs=
Subject key identifier: 45:40:FD:34:A6:4C:28:CD:BD:FD:50:A3:5D:63:46:2F:09:04:4A:6E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01841D317380F4C88D453780F26DA13A4770
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RUD9NKZMKM29_VCjXWNGLwkESm4.roa
Signing time: Fri 28 Oct 2022 06:04:50 +0000
ROA not before: Fri 28 Oct 2022 06:04:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:1d30:ea79/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1d:31:73:80:f4:c8:8d:45:37:80:f2:6d:a1:3a:47:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 28 06:04:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4540fd34a64c28cdbdfd50a35d63462f09044a6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e2:52:d2:93:3a:f1:e1:c9:df:ca:4b:08:c0:
f4:61:74:b2:1d:8f:42:de:93:f7:ff:2a:0e:44:59:
f8:14:4e:62:60:48:db:c0:f0:cd:d6:14:83:30:5e:
47:b2:cb:43:38:8b:16:8e:06:09:82:0e:5b:d9:21:
af:50:a9:e8:a8:34:be:38:72:0e:10:07:4e:89:34:
6c:fb:87:97:49:40:31:5a:6c:e5:3b:fd:03:93:0b:
6e:2a:33:2c:81:28:b4:61:49:8a:47:10:30:ec:7c:
7a:d6:eb:d4:be:27:95:47:55:9d:26:46:27:b0:fe:
b1:38:ff:98:69:59:a0:62:c1:c6:85:41:08:6f:64:
26:80:43:5e:16:d0:e4:2f:4a:71:fd:06:07:f5:73:
7e:b6:69:3c:d6:56:ff:f0:af:22:03:dd:5c:77:dc:
29:28:36:b0:c0:7a:bc:ef:59:7f:6e:77:c0:6c:6b:
5a:69:34:14:fe:1c:9c:a9:cd:0c:a1:09:38:f3:99:
b4:cd:71:6f:d8:16:34:61:f6:61:bb:b4:d0:45:9f:
59:52:86:f0:2a:0a:bb:b8:ec:8f:92:6a:fa:d6:e3:
b3:b6:33:a5:ca:ab:4b:9f:14:f9:45:da:b7:81:6b:
44:b0:57:00:8f:28:6c:18:b8:e0:ff:17:cd:2f:61:
42:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:40:FD:34:A6:4C:28:CD:BD:FD:50:A3:5D:63:46:2F:09:04:4A:6E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RUD9NKZMKM29_VCjXWNGLwkESm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
88:a1:74:80:d5:af:d2:99:12:17:9f:62:74:67:ff:61:41:c3:
0e:32:04:e2:55:d2:69:0f:d4:f2:54:49:ed:a8:c8:b6:d5:7e:
8e:1f:bb:47:74:94:cd:2e:a1:2e:24:a3:83:d3:02:7e:2d:78:
ff:74:77:e1:50:56:75:4b:10:9f:2c:1d:82:35:f2:71:e7:a9:
4c:51:d2:e1:d5:4d:6c:52:5c:09:2f:f9:97:e8:dd:b5:b0:f4:
e3:95:55:8d:d3:0d:0f:06:2f:66:32:8e:d1:94:62:89:70:2f:
1d:0c:4f:30:5c:ff:49:39:d8:9b:44:c3:8f:6e:d9:84:a5:51:
9a:c0:ea:e2:e4:01:91:2f:a0:62:58:41:70:22:55:0d:7c:7a:
c4:fa:3e:6a:46:0a:5f:8f:c7:10:47:55:ea:97:1a:fd:24:57:
d2:79:c9:a8:7f:57:17:db:6d:76:5c:b3:71:db:d6:5c:a6:8c:
ec:4f:e3:c4:61:69:a3:91:a5:ea:9e:6f:6b:77:1c:39:31:1b:
b5:7c:6f:bc:b6:bc:bf:bf:73:98:d3:fb:4d:b4:de:87:d4:82:
66:ea:11:63:88:ee:b5:4f:e6:1d:69:27:8c:22:06:3c:26:c0:
88:2a:e9:e7:ed:52:4d:2a:87:4e:6e:4a:1e:61:e7:a0:c6:66:
d9:13:aa:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:45:24 2025 by rpki-client