Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SO1v9LOKsiPy3MSN1Pt7eJCtMCs.roa
File: SO1v9LOKsiPy3MSN1Pt7eJCtMCs.roa (raw, json)
Hash identifier: MTmeYc4i2SbQwkAQS1vJJr9A7hEkvcK/hRRCodL5v8w=
Subject key identifier: 48:ED:6F:F4:B3:8A:B2:23:F2:DC:C4:8D:D4:FB:7B:78:90:AD:30:2B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7DE12915
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SO1v9LOKsiPy3MSN1Pt7eJCtMCs.roa
Signing time: Sat 23 Apr 2022 19:09:32 +0000
ROA not before: Sat 23 Apr 2022 19:09:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2111908117 (0x7de12915)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 23 19:09:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=48ed6ff4b38ab223f2dcc48dd4fb7b7890ad302b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c5:59:8f:cb:07:cf:db:49:fd:56:c1:c9:6e:
ef:37:28:23:ea:f2:89:c9:14:62:be:00:2e:59:e8:
49:a0:04:e2:38:b8:e3:09:2d:c7:2e:63:e9:da:fd:
0c:34:b6:e9:52:1f:00:3d:50:10:9e:aa:79:70:1e:
c3:e2:26:69:e7:75:ae:46:af:97:82:6d:85:bc:b0:
7f:8c:60:3a:c2:e5:0a:c4:dc:21:52:af:95:ad:07:
d5:ca:28:a1:de:35:0d:ba:be:4e:7b:3a:e0:19:e6:
98:c6:f1:bd:3a:56:30:69:66:2b:7a:3d:1b:26:d4:
76:0d:10:9c:1d:04:04:29:39:f0:c3:9a:fa:10:dc:
a6:f6:34:fb:65:f9:3b:12:08:54:2b:c3:a6:3b:81:
c4:da:68:ca:93:f1:7c:0f:60:f2:ed:08:ff:a6:c2:
9f:8c:ba:51:e4:35:dc:f7:a0:c4:2a:24:d8:e5:62:
64:da:5d:b0:d2:6d:79:18:35:d5:5a:8d:a2:e8:f4:
c9:9d:b0:6b:a6:0a:fd:f8:16:d6:23:b7:df:d8:72:
ed:b3:66:fa:3f:a6:24:e3:9d:63:65:80:02:02:5c:
2a:bc:e7:2e:32:1d:c1:6f:cd:2a:37:57:bb:16:bf:
f9:b1:db:b8:f3:a7:90:d2:19:a2:7e:ff:44:6d:23:
ca:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:ED:6F:F4:B3:8A:B2:23:F2:DC:C4:8D:D4:FB:7B:78:90:AD:30:2B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SO1v9LOKsiPy3MSN1Pt7eJCtMCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b4:ca:29:93:74:a7:a6:24:41:ad:93:e1:5f:5f:e0:63:76:97:
47:90:0b:a9:86:e3:50:b1:21:bb:10:bc:d4:36:a3:76:49:ec:
b9:4f:ac:74:cd:cd:b9:0a:0c:57:18:95:b7:78:dd:35:2b:47:
ca:df:c6:94:d3:56:2e:3d:38:83:81:a2:30:40:bc:63:d0:2f:
51:9c:52:4c:70:99:14:7d:3d:88:d2:12:28:9e:fe:25:a8:73:
2e:8f:a8:e8:34:7b:d6:25:e7:b8:69:76:28:34:fd:d1:c0:08:
54:8a:6f:fd:fe:fc:da:ae:57:e6:6f:15:cb:4b:b7:5a:e4:51:
9b:07:83:34:18:ca:f6:17:b3:d4:d6:5e:2e:28:21:a8:b0:b9:
70:55:1a:35:84:27:b0:3e:64:d6:24:b3:46:d3:b7:78:8e:c9:
45:09:ff:f8:b8:0b:b7:24:e2:06:f6:2a:4e:cf:44:0e:ff:e2:
23:df:a5:e3:15:58:f9:f9:2d:75:01:0b:ef:30:d5:d9:67:16:
e3:9b:d2:3f:42:e8:d9:b1:aa:61:2e:b6:d7:23:c8:10:60:b0:
7e:f8:94:d1:82:b7:ea:6a:87:59:cc:cf:29:ad:16:a9:3b:5b:
49:8e:db:06:e0:c9:d8:d7:73:f6:d9:91:b2:fa:f0:5c:8c:28:
66:3c:c6:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:24:48 2025 by rpki-client