Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Rrxo_lKne5Mwb-94bNEq_oJmCXM.roa
File: Rrxo_lKne5Mwb-94bNEq_oJmCXM.roa (raw, json)
Hash identifier: WYPeowjhN+SF02nqO1PeJP26RUcDue4LjuunuXiQ0t0=
Subject key identifier: 46:BC:68:FE:52:A7:7B:93:30:6F:EF:78:6C:D1:2A:FE:82:66:09:73
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01854F2DD69D36BD651B90E5C574BEFA0C3E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Rrxo_lKne5Mwb-94bNEq_oJmCXM.roa
Signing time: Mon 26 Dec 2022 16:04:42 +0000
ROA not before: Mon 26 Dec 2022 16:04:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:185:4f2d:5786/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:4f:2d:d6:9d:36:bd:65:1b:90:e5:c5:74:be:fa:0c:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 26 16:04:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=46bc68fe52a77b93306fef786cd12afe82660973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:36:7d:72:33:b5:7b:1d:93:46:67:8b:9e:bd:
93:b9:21:fb:99:0a:fb:e5:65:3f:d9:d8:03:2f:fc:
44:5a:bf:7c:0e:0b:5c:47:11:a8:44:bf:fc:3b:b8:
cc:f4:ba:e5:72:79:62:bb:10:55:26:fe:a9:39:a1:
1e:4a:d4:1a:f9:7c:e1:6b:2c:30:de:21:44:6d:82:
26:29:ff:6d:d0:1b:6a:f9:f1:2e:0b:51:ce:92:bd:
20:a3:1f:1f:35:8f:1c:3f:34:09:d7:c3:b5:63:1c:
14:dc:ad:54:d8:16:3d:90:39:3f:98:9a:9e:3a:81:
ac:d8:08:14:7e:a4:aa:0e:d0:f9:f7:fd:b2:53:de:
08:3f:ad:1a:a2:70:04:66:18:4e:14:04:83:73:76:
e0:42:36:f6:c9:5e:1a:6c:71:fd:79:f3:b0:54:6e:
6f:93:f0:d0:9a:02:be:34:0a:13:78:76:7c:9c:4d:
7a:6a:46:5f:f1:e1:ad:70:d5:cf:14:b2:ab:b2:e9:
ef:67:c4:14:36:38:ae:8f:88:c9:16:a8:92:b1:7e:
1f:0f:0f:0c:e3:47:b5:4b:79:6d:46:f4:48:a2:9e:
b6:dd:79:2c:72:33:38:40:80:09:9d:67:e3:36:7b:
9e:84:c4:25:8f:bc:b5:4a:11:16:81:ae:9d:dc:bd:
4b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:BC:68:FE:52:A7:7B:93:30:6F:EF:78:6C:D1:2A:FE:82:66:09:73
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Rrxo_lKne5Mwb-94bNEq_oJmCXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a9:2a:6a:8d:74:f3:05:45:ff:10:44:f9:9c:e6:f1:03:35:1b:
9b:7c:24:47:07:8c:d7:c7:df:ea:fc:e5:b8:61:5a:71:18:93:
a9:33:38:11:f3:26:e5:c0:9f:96:f4:cb:e8:57:99:9d:01:94:
bd:d4:e4:99:00:cc:d0:f6:81:98:b0:5b:65:38:28:ab:8b:52:
f9:db:74:ae:0c:cc:be:12:3f:d4:f2:6c:fd:96:93:6e:6f:0d:
96:6d:fb:19:b9:8a:91:90:ba:ce:1b:ec:36:68:8d:66:c6:99:
ef:6e:50:79:53:9d:62:14:f7:ab:bc:5f:15:b4:0d:63:b0:76:
22:8c:0d:56:e3:31:45:b0:ab:7d:44:21:71:11:a7:28:cd:39:
19:1a:ab:bc:3e:54:cc:f6:97:2a:ec:1a:73:2e:07:f0:e5:b1:
c2:cd:d6:bd:59:5c:c5:88:d9:ea:b0:4a:2a:5a:7a:85:79:6b:
65:07:50:94:09:72:2a:99:a4:8d:ec:b3:f4:87:9f:eb:0a:7d:
f3:bf:2c:d5:60:2a:47:a4:fb:b7:97:ab:ce:27:1d:71:49:79:
de:d7:3b:c9:9e:39:53:1a:9f:7e:ab:0e:c3:bb:1b:c1:2d:8d:
b9:fd:93:83:30:41:6e:1f:1d:08:ee:9f:f1:0a:42:e6:8a:39:
14:79:14:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:48:13 2025 by rpki-client