Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SLUxeRbupyVHkDjuCvhPIvu_0CQ.roa
File: SLUxeRbupyVHkDjuCvhPIvu_0CQ.roa (raw, json)
Hash identifier: o0L47IAnV7U9ZIgniugW1uBMG9GA3OCfs9vTNeO0BRU=
Subject key identifier: 48:B5:31:79:16:EE:A7:25:47:90:38:EE:0A:F8:4F:22:FB:BF:D0:24
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6F215707
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SLUxeRbupyVHkDjuCvhPIvu_0CQ.roa
Signing time: Wed 02 Mar 2022 20:09:12 +0000
ROA not before: Wed 02 Mar 2022 20:09:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1864455943 (0x6f215707)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 2 20:09:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=48b5317916eea725479038ee0af84f22fbbfd024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:48:b4:32:08:71:31:54:d1:d0:3b:64:54:12:
0d:5e:cb:80:b3:2d:45:4f:d3:0e:36:87:ce:c0:74:
a7:04:e0:ad:62:49:ff:47:e9:cc:b3:10:12:ca:a4:
1e:2b:31:4c:d3:93:4e:48:c2:29:ba:27:ba:ba:70:
9a:52:04:71:77:85:a4:25:9c:e3:79:66:f2:aa:a4:
d2:6e:19:43:f3:4a:1e:3e:78:58:5d:83:81:9f:b7:
ba:04:54:07:f2:13:cd:7c:67:94:93:71:77:c0:ff:
42:a2:fa:ec:ac:11:b8:a2:69:59:c9:4e:9d:5a:57:
68:6a:cf:c5:68:ee:89:79:96:ba:e8:3b:ab:8d:a0:
ca:a5:4a:a2:f1:48:f3:70:98:98:d4:31:7c:55:ff:
66:44:80:cd:09:91:5c:ca:42:5f:7f:d4:3a:84:6a:
2f:f9:b2:b2:a2:0e:cc:07:b9:7a:38:c0:e9:4e:43:
1e:01:61:dd:38:76:22:3d:88:97:9d:80:29:26:99:
f0:a0:8f:32:3d:f4:a8:86:9f:34:a9:70:4e:a7:9f:
83:1d:45:34:42:97:88:fe:c6:21:bd:0b:90:0b:1c:
4a:d2:d6:55:1f:83:2b:4b:8d:0e:55:e3:85:f2:9e:
e7:6c:04:56:b5:8f:ef:a4:f3:ee:bb:a6:ea:8f:15:
77:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B5:31:79:16:EE:A7:25:47:90:38:EE:0A:F8:4F:22:FB:BF:D0:24
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SLUxeRbupyVHkDjuCvhPIvu_0CQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
aa:f2:12:40:47:be:18:63:9c:82:be:ff:30:ee:08:f6:94:24:
fc:e2:56:fa:0b:59:e5:0b:ac:6e:bc:dc:d3:67:80:39:47:9d:
43:03:35:43:83:7f:7e:04:3d:ed:fc:e4:f1:0e:6e:8b:09:04:
0a:1e:1d:52:58:cf:95:52:8b:f6:db:f4:ac:93:b4:bb:0e:b2:
96:0f:08:c0:40:6b:0c:d0:14:36:0d:eb:e9:24:4f:5e:b3:fc:
c4:e9:26:9c:ff:ee:3e:18:13:73:7e:1b:9c:81:ec:ac:54:c3:
44:7d:b8:75:0a:e5:8c:12:a8:02:b7:33:de:24:58:f1:7e:aa:
f0:96:77:b0:d4:55:3d:c5:56:34:2e:6f:b4:97:6e:ec:fe:c7:
e1:ae:97:c6:fd:0d:87:eb:0a:e4:3b:3d:36:ba:39:70:c5:5a:
91:3e:eb:97:9c:ab:80:31:06:fe:70:e2:e0:d9:c8:e5:ac:ce:
04:f9:30:dc:cc:40:42:3d:52:33:83:a3:fb:59:08:b5:0b:03:
77:d8:03:97:24:90:19:7d:17:81:29:5f:b8:c0:b6:a7:5f:f0:
8d:7f:89:dd:90:ec:26:02:45:82:aa:d4:ea:a1:fd:5f:2a:13:
48:1d:e3:40:8c:ab:a2:8f:24:55:6b:e3:3c:a9:94:ac:9d:52:
3b:fe:21:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:29:00 2025 by rpki-client