Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SzaO4qIC0La3W8iiPBkuhxENj9s.roa
File: SzaO4qIC0La3W8iiPBkuhxENj9s.roa (raw, json)
Hash identifier: RsLss1r9OMVkxmDEK1ediC/p5XPAvDY4Sf2iad9S36Q=
Subject key identifier: 4B:36:8E:E2:A2:02:D0:B6:B7:5B:C8:A2:3C:19:2E:87:11:0D:8F:DB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01833B89969554FCFA01AC1B37683A7F7FCA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SzaO4qIC0La3W8iiPBkuhxENj9s.roa
Signing time: Wed 14 Sep 2022 10:26:56 +0000
ROA not before: Wed 14 Sep 2022 10:26:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:3b:89:96:95:54:fc:fa:01:ac:1b:37:68:3a:7f:7f:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 14 10:26:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4b368ee2a202d0b6b75bc8a23c192e87110d8fdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ea:68:bf:14:36:c6:b1:36:0f:1a:ea:ca:1f:
e4:33:b6:5a:4f:4b:70:2f:0b:e1:c3:0e:30:1f:fe:
98:ab:b1:b9:5f:c4:40:62:b5:5b:11:b2:68:f7:15:
a1:b3:6d:c5:75:56:4c:2b:32:be:4a:0a:1e:8b:7d:
9f:bb:72:9d:32:50:7f:cf:58:fa:36:79:66:08:7c:
ef:ac:35:87:b9:ff:37:40:f4:b6:17:2b:89:b0:20:
79:76:04:4b:51:da:bb:d5:35:3c:98:ec:4e:6b:c9:
ac:63:ec:eb:83:53:23:3b:87:07:07:f8:65:93:37:
c5:71:39:a6:11:fd:3e:2b:fe:31:b2:e3:40:1a:13:
72:0e:b2:7c:6a:a9:15:2b:ae:68:46:49:01:22:42:
09:1d:31:ca:3e:b9:4b:b0:ca:c2:85:81:7a:7f:0a:
28:0a:dc:68:10:d0:b0:52:44:a2:69:22:30:b2:a7:
e0:93:d1:d6:00:e8:bb:6b:ed:ab:49:8a:ce:c3:3f:
47:f8:78:09:49:ea:b3:06:60:65:ad:7a:3e:ea:59:
af:ac:24:c6:f2:c4:f4:b4:67:0c:0b:69:3e:54:10:
d4:c0:8c:33:60:b2:71:99:8f:82:2c:02:10:8a:22:
26:42:d3:dd:dc:eb:3a:a7:65:35:d0:c9:3c:6c:18:
6a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:36:8E:E2:A2:02:D0:B6:B7:5B:C8:A2:3C:19:2E:87:11:0D:8F:DB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SzaO4qIC0La3W8iiPBkuhxENj9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
00:cf:ba:14:a5:b9:2b:68:38:c3:4c:a7:ee:2e:25:b3:79:34:
53:a7:ab:96:18:f3:ff:d7:0e:25:92:17:70:69:97:f0:2c:a6:
6d:42:91:6b:18:b4:60:59:b3:1b:66:f3:bd:49:e1:c5:8d:d0:
ea:b6:ca:b1:f6:09:30:a3:85:27:43:5b:8a:d7:3b:12:47:4d:
f6:7d:d0:b2:6b:20:cf:a9:37:05:7a:4e:7f:b4:ea:6e:f2:85:
e6:f7:fd:48:2d:25:cf:a4:5a:a8:85:82:c5:f6:f1:84:72:2d:
16:7c:b5:b0:5f:53:a8:65:1d:4f:6b:63:e5:4e:15:86:5a:48:
3f:b8:38:70:8e:8f:32:bf:48:43:a5:85:ea:53:56:55:ba:bf:
02:68:00:65:87:f1:d6:80:d8:e1:b8:69:56:88:3e:61:73:34:
d2:09:de:03:6f:e3:87:e7:bc:70:fe:3b:b0:6d:f8:15:b5:54:
3d:2e:69:2b:d9:d4:44:9e:e3:0e:51:87:80:f0:bf:ac:52:69:
91:d3:74:13:fe:a4:50:61:70:7c:2c:b4:a6:ab:25:15:5b:57:
9d:2d:bc:85:9b:21:1f:b6:fd:dc:2c:8d:33:e8:a0:bf:c3:b7:
0d:12:f3:13:f6:6f:ee:f0:41:80:7f:c4:04:66:9a:30:7e:77:
12:33:84:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 13:11:13 2025 by rpki-client