Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Sv9l29n6sRxTvrWOmr5uMlJjRGQ.roa
File: Sv9l29n6sRxTvrWOmr5uMlJjRGQ.roa (raw, json)
Hash identifier: Cd0do8iqFVLpTAvb1xeah5QwE5f2kKB92OZVp5nVeeo=
Subject key identifier: 4A:FF:65:DB:D9:FA:B1:1C:53:BE:B5:8E:9A:BE:6E:32:52:63:44:64
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182034771AF6946279BD28C6CE016DE3A93
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Sv9l29n6sRxTvrWOmr5uMlJjRGQ.roa
Signing time: Fri 15 Jul 2022 19:13:10 +0000
ROA not before: Fri 15 Jul 2022 19:13:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:03:47:71:af:69:46:27:9b:d2:8c:6c:e0:16:de:3a:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 15 19:13:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4aff65dbd9fab11c53beb58e9abe6e3252634464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4b:45:0e:ba:79:fa:01:c8:fc:e8:9d:7e:c3:
db:07:4c:f8:bb:cd:e8:49:9a:8c:19:54:a7:48:dd:
65:c4:a3:89:12:f9:25:52:93:30:c6:7f:04:bb:6b:
cf:72:1a:5d:85:af:05:ce:c6:d4:47:72:c1:a4:e7:
c4:a8:1e:33:67:8e:4c:0d:12:1d:be:22:44:d1:6f:
d3:5d:97:96:e0:6c:66:66:67:6a:39:88:66:d7:bb:
b0:f4:9c:2c:14:76:f5:35:33:d5:f9:28:c2:fa:57:
47:c9:0c:69:54:a2:b8:0f:cf:21:60:b8:ab:3e:b2:
ea:08:65:63:19:91:28:a0:3e:58:20:7c:da:7e:4f:
34:ac:6c:72:e6:d7:3d:77:9b:01:19:72:26:70:87:
ad:52:25:ab:90:f5:7d:66:4a:d7:a5:57:eb:19:b4:
3a:2a:59:d1:fc:d1:82:8f:4f:5e:d7:72:73:00:b5:
4a:8f:d1:af:4d:9f:ae:43:93:d8:81:df:76:75:8b:
1c:bc:6c:33:c6:5b:5d:8d:8a:e7:8c:e3:2a:0d:14:
c8:ff:a2:c8:7e:50:0d:ab:15:f1:59:2b:50:34:5d:
ce:2d:51:f4:d8:cd:06:41:c0:4b:a4:3c:9a:3f:89:
72:55:2b:a7:ec:0a:e5:c1:34:ed:66:5e:f3:e3:b4:
32:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:FF:65:DB:D9:FA:B1:1C:53:BE:B5:8E:9A:BE:6E:32:52:63:44:64
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Sv9l29n6sRxTvrWOmr5uMlJjRGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3f:40:78:95:66:07:6f:17:4c:b1:17:ea:ac:e2:8f:01:87:35:
e8:1d:75:04:0b:37:c0:f8:34:9b:ef:ef:ab:3b:9a:a4:a3:cf:
56:44:dd:39:57:dc:de:49:ab:5e:fb:b1:c9:a5:af:2f:98:62:
83:9c:37:e7:40:89:28:4a:c5:6b:06:5d:ec:03:c1:4d:1d:a4:
8c:4a:ab:53:84:3e:ce:78:d8:a9:bc:ed:3e:18:07:41:d6:fc:
0b:21:f5:a1:70:72:ab:a2:9e:0f:5c:cd:b3:be:47:1a:05:37:
c9:80:8f:52:a9:8e:bd:33:c9:17:ce:8b:86:51:86:89:6a:f2:
dc:20:4d:3a:26:a1:7f:3b:d2:8c:2a:3a:dc:83:a9:9e:76:56:
25:cc:ec:5b:fe:eb:91:2c:eb:80:4c:99:65:2a:27:63:20:d9:
2f:75:da:a3:d9:32:cb:c0:da:bf:da:90:66:22:a1:d8:4d:4e:
fd:9b:1a:e3:ba:23:b3:b1:58:a9:5b:53:c4:af:08:c8:78:f1:
02:7a:ec:76:26:a9:92:8c:30:17:29:c1:a3:38:9e:2b:e8:0d:
46:89:44:99:16:f1:bf:f5:1a:6e:00:d3:c0:40:04:3a:4f:9f:
1e:6b:56:f3:5f:6a:50:9b:03:26:bd:2e:3c:56:fd:ba:23:54:
e8:f2:82:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 06:00:47 2025 by rpki-client