Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ScCXOFW1bfnWNuN5sH9zv-D2QKM.roa
File: ScCXOFW1bfnWNuN5sH9zv-D2QKM.roa (raw, json)
Hash identifier: Pp7RzJDI7B+5N3TL0/nlHSqBvZX2Ve5m6J3no4P9hog=
Subject key identifier: 49:C0:97:38:55:B5:6D:F9:D6:36:E3:79:B0:7F:73:BF:E0:F6:40:A3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8DC5A5B0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ScCXOFW1bfnWNuN5sH9zv-D2QKM.roa
Signing time: Sat 18 Jun 2022 11:17:42 +0000
ROA not before: Sat 18 Jun 2022 11:17:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:56ba:5b78/128 maxlen: 128
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:181:477e:58d8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2378540464 (0x8dc5a5b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 18 11:17:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=49c0973855b56df9d636e379b07f73bfe0f640a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ed:7e:b3:59:78:18:3c:35:12:10:33:ab:4b:
45:39:c8:c6:91:bc:89:53:43:81:a9:f1:58:83:2d:
35:a3:b8:b0:38:57:b8:be:3b:14:d2:3f:64:47:98:
eb:eb:07:02:2b:a7:8e:45:1b:ec:e9:6f:3a:64:9e:
ed:ac:8e:eb:44:be:b1:72:94:07:0f:bf:ed:c1:17:
86:60:5a:de:d7:32:9b:be:fe:0a:56:32:d8:f5:40:
27:ca:b6:12:6f:2d:87:93:1b:64:96:8c:de:31:2b:
7d:d5:41:37:a8:7a:61:94:6d:2d:b2:67:51:ad:b8:
68:38:df:0f:fc:38:f3:fa:04:00:f1:b4:7c:7c:68:
6a:cc:4f:00:49:93:8d:95:11:6c:e7:4a:56:d3:9b:
1b:4b:e5:b1:09:c6:3e:47:89:6b:2e:87:14:d9:80:
77:ca:d9:72:85:a1:e4:7a:08:72:37:7a:39:ee:a8:
49:ff:cf:45:1b:8a:fa:fb:19:16:b5:22:0d:f6:b1:
2c:a0:6b:33:da:03:2e:11:7a:f5:8a:ce:e3:bf:47:
8e:9c:0c:2c:9e:b0:6c:b2:af:51:43:9c:5e:ae:1a:
24:59:a8:7d:ef:9c:61:d1:f1:9d:88:0c:ac:04:04:
09:1c:7a:0a:5d:1d:61:26:24:e1:22:0d:8e:ce:b7:
5b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C0:97:38:55:B5:6D:F9:D6:36:E3:79:B0:7F:73:BF:E0:F6:40:A3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ScCXOFW1bfnWNuN5sH9zv-D2QKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
81:3d:41:55:39:03:c3:c4:8a:82:19:bf:bf:0b:a6:d0:2c:99:
24:bb:7f:55:53:d4:ca:45:53:0e:c3:70:93:0d:cb:a0:91:a5:
23:aa:ad:cb:73:c7:7d:46:26:e8:f4:45:d2:11:6b:2c:20:7e:
40:63:2a:b1:ae:e6:12:5d:44:91:75:ba:58:e3:51:71:79:87:
b7:13:eb:00:1d:cc:f4:2f:34:e2:0a:ca:70:cb:35:98:24:b9:
08:6e:b5:22:bf:5e:3a:fb:5f:3a:89:75:ef:ae:c2:15:bf:d6:
3a:95:ec:70:e3:42:98:27:2e:b6:9e:8e:89:7c:de:7b:5e:7d:
89:b0:16:99:a3:0b:3f:e9:dd:f9:66:7c:a1:9c:de:c6:d4:67:
b8:1e:65:33:b5:4e:78:57:6d:88:6a:a0:60:a8:38:f2:51:b2:
71:b0:e5:fe:5c:b5:f9:de:b3:aa:02:43:91:84:a6:b0:13:cd:
38:f6:21:6f:5e:a1:a4:48:8a:7b:0f:1c:00:8d:f7:0c:27:c8:
8c:c3:19:5f:0f:83:b3:d7:ab:65:d9:5d:65:71:ed:84:ea:d5:
ac:c2:96:eb:92:0b:c8:61:35:d6:10:11:2c:f9:00:78:81:89:
40:a2:8e:10:4c:7d:1e:90:99:d1:75:0a:67:b4:83:90:82:d1:
eb:b6:d4:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 01:14:10 2025 by rpki-client