Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/S_cNONBPa8DbYsJMsp2gK-mpCU4.roa
File: S_cNONBPa8DbYsJMsp2gK-mpCU4.roa (raw, json)
Hash identifier: degsKwObGtwI2CCx0reSfeD0PXcmfXEuP/VxZ6v5FqA=
Subject key identifier: 4B:F7:0D:38:D0:4F:6B:C0:DB:62:C2:4C:B2:9D:A0:2B:E9:A9:09:4E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182AADD7062642C2747F82716D8FDB4C493
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/S_cNONBPa8DbYsJMsp2gK-mpCU4.roa
Signing time: Wed 17 Aug 2022 08:13:35 +0000
ROA not before: Wed 17 Aug 2022 08:13:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:aa:dd:70:62:64:2c:27:47:f8:27:16:d8:fd:b4:c4:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 17 08:13:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4bf70d38d04f6bc0db62c24cb29da02be9a9094e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:12:45:3e:12:73:e2:88:e8:a0:b8:15:f2:e3:
46:9c:98:03:22:06:2d:c7:6d:16:21:a0:90:a6:f8:
24:d1:b3:f9:a7:5c:31:f6:94:0c:d6:38:46:c9:d1:
a7:8f:99:ad:c7:57:a3:ef:15:ff:85:3c:cf:8b:fb:
f1:ae:7c:88:e3:2f:ae:a0:c5:2b:6f:18:ee:38:63:
c4:d1:ca:7f:13:8e:39:e1:2d:ae:36:ce:e1:25:47:
d8:50:68:37:67:c4:17:ea:85:4e:66:98:d8:b0:c8:
1c:cc:65:47:95:c4:a8:19:bd:55:41:4d:60:af:56:
ce:96:de:2e:fb:29:ba:49:7f:e5:b9:24:b8:5e:99:
8b:80:4e:5e:0e:9e:a6:e5:fc:0a:ef:7e:94:55:ce:
3c:d8:7d:a4:26:fc:2b:f0:ae:27:30:25:dd:96:1b:
c4:70:43:1c:36:6d:02:40:78:8b:e3:67:7c:ed:b9:
43:8c:e9:ae:9f:d6:81:6b:ba:dc:5e:8e:08:64:a4:
0e:4e:c4:39:5f:13:3c:11:a0:d3:14:88:78:62:45:
1d:27:9f:36:2b:ae:16:ed:64:46:42:76:94:27:89:
7f:2f:b1:87:9b:15:13:fa:1a:da:7c:cd:a6:e0:16:
a6:32:d0:42:38:a5:fc:9a:06:74:8e:09:02:97:cf:
ee:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F7:0D:38:D0:4F:6B:C0:DB:62:C2:4C:B2:9D:A0:2B:E9:A9:09:4E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/S_cNONBPa8DbYsJMsp2gK-mpCU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9a:05:f8:21:cf:18:8a:ea:d8:ab:3b:d3:2b:11:9d:84:db:02:
80:24:63:60:14:3c:ff:f7:51:5e:99:6d:ab:2b:6f:20:58:4b:
1a:db:c7:1f:21:9d:79:c0:9c:5b:57:02:75:4b:d3:cb:5c:d9:
fe:04:32:07:b4:a3:6e:b4:7c:f8:7c:b9:e3:e7:74:49:6d:e1:
24:1f:33:d1:8e:a9:3c:ff:86:3a:a2:83:83:76:db:b6:6a:1a:
47:c2:bb:f1:3f:b1:b0:ac:7a:90:a8:57:15:85:7a:5d:38:67:
36:88:e3:7c:1c:81:8d:d8:3e:ee:61:b3:a8:8b:84:49:dc:d2:
ac:14:91:51:80:b8:7a:e3:29:e8:e5:ad:73:68:be:b7:36:5f:
34:0a:2a:2b:13:00:0d:0e:9b:52:6b:94:32:a8:20:80:61:97:
45:24:17:29:e6:0c:cd:91:8e:e3:51:a7:b0:1f:77:c8:7e:9c:
3a:b3:2a:9b:41:e2:3c:45:9b:14:0b:ea:60:08:b1:76:f4:9b:
8b:e9:ff:23:0d:d6:c3:cb:9c:4e:db:c0:db:13:4d:3c:86:3d:
06:db:6e:a2:a7:a8:d0:25:79:4d:e9:b5:a3:5d:27:62:f2:c6:
51:b2:7a:3b:96:30:bf:fe:9d:b6:74:7a:38:a3:2c:96:fa:38:
a7:72:f9:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:24:46 2025 by rpki-client