Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RexkZOMFaKazTy36FJHLDofFsi8.roa
File: RexkZOMFaKazTy36FJHLDofFsi8.roa (raw, json)
Hash identifier: +xA6//nRgMRFbnOi3CnDzSeYeGtMPdGP0Gy1xXCkvtU=
Subject key identifier: 45:EC:64:64:E3:05:68:A6:B3:4F:2D:FA:14:91:CB:0E:87:C5:B2:2F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018234D9C5584AE1BAC358453A6BA7AE8217
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RexkZOMFaKazTy36FJHLDofFsi8.roa
Signing time: Mon 25 Jul 2022 10:14:23 +0000
ROA not before: Mon 25 Jul 2022 10:14:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:34:d9:c5:58:4a:e1:ba:c3:58:45:3a:6b:a7:ae:82:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 25 10:14:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=45ec6464e30568a6b34f2dfa1491cb0e87c5b22f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:74:1c:f6:be:08:e7:3a:75:7f:f3:0f:ff:b9:
0a:b1:d7:94:b5:35:30:c5:85:9e:f1:0b:24:ed:72:
95:89:ce:9e:22:0e:62:d0:3b:24:44:9e:a3:75:76:
9d:43:13:e7:b4:dc:33:cb:40:c9:45:ab:ad:a2:c2:
4a:5c:cd:e7:f4:d6:6c:50:2d:d4:b0:3c:89:18:1f:
2a:0f:5d:15:ba:92:1c:d5:0e:d3:33:74:d0:fc:d9:
00:e8:e4:12:a1:a3:54:03:26:d3:4a:71:d3:83:b8:
f3:b3:70:47:c6:85:c3:bb:76:ed:4f:66:ee:67:02:
c2:a9:2f:81:ba:3f:12:ae:52:2c:15:5b:03:0b:5d:
52:c7:73:05:2f:3c:64:d9:89:ac:26:83:fe:a2:ba:
22:2f:5a:cf:74:25:8e:91:6b:11:c5:c9:de:49:2e:
8e:92:0e:4d:d5:fa:e3:e8:dc:60:9d:62:c1:38:11:
77:ac:64:01:64:da:1a:a0:00:62:e0:24:8e:93:52:
80:ff:16:f5:75:81:1c:b5:76:d8:44:68:21:a9:2c:
fa:fa:f2:98:ea:c3:15:29:01:4e:56:47:59:57:e6:
5b:8f:c2:10:9b:fb:f5:4a:cc:01:1a:3a:3d:f4:47:
60:8b:79:c2:0f:7b:8c:15:1c:08:52:85:d6:60:e9:
6d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:EC:64:64:E3:05:68:A6:B3:4F:2D:FA:14:91:CB:0E:87:C5:B2:2F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RexkZOMFaKazTy36FJHLDofFsi8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
17:ba:1e:20:b8:5e:c0:d5:8d:2a:8c:ec:5b:a4:6f:e8:63:ad:
da:6a:60:8e:00:19:62:e8:f9:c9:02:ee:90:88:64:59:87:2e:
d9:7a:d9:73:67:7d:e6:47:57:40:84:3d:b9:2d:89:42:10:42:
4b:06:ad:b3:8e:6e:c5:ed:9a:b3:29:b5:3d:d5:38:dd:57:1b:
d3:c2:46:f0:c4:9c:56:28:bd:75:c2:3e:8e:0e:bf:2b:93:05:
61:7d:d7:1f:88:1c:6f:5c:79:1b:b4:db:d2:4a:18:ed:8a:3c:
1f:1e:03:8f:3e:4b:37:31:67:04:65:a7:f0:ce:56:c1:6d:35:
57:b5:22:9d:d3:28:48:5c:7c:b1:0f:b2:3f:0b:d7:a5:40:2c:
de:cd:08:0a:68:41:7a:d7:7a:5e:92:1c:0c:f3:cc:fa:4c:ad:
18:05:a2:4c:36:bc:27:d5:45:d4:68:23:d4:7a:79:95:8d:32:
a3:15:a1:41:55:0d:f6:ea:e3:05:33:53:a4:b2:e1:9f:de:16:
f1:a0:64:2a:a3:bd:a9:13:7a:67:ad:a9:20:2b:96:55:01:ee:
4d:48:57:9c:b9:61:6a:f0:61:4b:a2:a8:51:7b:c8:26:a8:c2:
a6:61:b9:f6:3f:4c:95:ff:17:2a:ed:5c:4d:b9:17:69:16:95:
3e:26:aa:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:42:43 2025 by rpki-client