Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/T1SGNPVdw5KDj4rtu-AZpeGYCLk.roa
File: T1SGNPVdw5KDj4rtu-AZpeGYCLk.roa (raw, json)
Hash identifier: jqURkX+dutSW+vv4/Wp66ZSGpohJoRSBKg7Bje57nRs=
Subject key identifier: 4F:54:86:34:F5:5D:C3:92:83:8F:8A:ED:BB:E0:19:A5:E1:98:08:B9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018540967AF372042A058900702271866E5A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/T1SGNPVdw5KDj4rtu-AZpeGYCLk.roa
Signing time: Fri 23 Dec 2022 20:04:41 +0000
ROA not before: Fri 23 Dec 2022 20:04:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:185:4095:f651/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:40:96:7a:f3:72:04:2a:05:89:00:70:22:71:86:6e:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 23 20:04:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4f548634f55dc392838f8aedbbe019a5e19808b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:8d:ca:c2:ca:e3:08:c4:6d:5f:ce:7f:6d:c8:
ce:7b:e8:07:5a:42:81:fb:78:f1:a2:a6:d9:21:81:
07:23:fd:f7:7d:c0:4c:39:8c:29:b4:23:a6:61:0d:
e8:05:9f:be:45:91:71:7f:bd:71:f2:a0:11:cb:e8:
d0:c0:76:da:55:53:19:30:c4:ec:89:72:17:e3:0a:
da:ef:03:df:76:d6:f8:5d:2b:78:bb:cc:9b:c8:57:
8d:14:df:94:64:1f:27:48:7e:4c:e9:82:fe:1d:3c:
bd:50:1d:11:e9:3d:0d:19:2a:01:10:20:89:08:ea:
43:6f:a4:6c:e7:1a:a9:72:99:72:29:47:e2:a9:e5:
a7:f5:9c:9c:79:bc:cf:6f:57:b1:5a:72:b7:bb:2f:
50:2b:ba:b6:e1:6a:64:29:11:a2:50:e7:15:32:ae:
ed:6f:19:0b:28:a8:37:a6:6f:81:fb:26:5c:70:a2:
a8:84:8d:a8:d6:8f:d4:9a:56:b4:b0:70:a1:1d:9a:
69:d4:47:02:ab:73:79:1a:65:89:51:14:cb:32:d5:
7d:6f:5f:85:bd:e8:6a:1b:45:9e:a9:49:67:4e:e9:
18:cf:dd:36:7e:8b:6e:79:0a:b7:d4:45:96:87:8b:
25:42:17:f7:a7:a2:68:5d:c3:c6:f8:b6:3e:35:60:
90:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:54:86:34:F5:5D:C3:92:83:8F:8A:ED:BB:E0:19:A5:E1:98:08:B9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/T1SGNPVdw5KDj4rtu-AZpeGYCLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
09:e4:c4:f4:35:16:c5:ca:85:3b:64:56:a5:1a:66:ae:2f:c4:
ff:e6:08:fa:13:2e:dd:3d:e6:f4:65:48:08:92:5e:27:9b:d5:
bc:7b:74:82:e8:ef:b9:7b:66:dd:7e:c2:11:64:a4:2a:c9:0f:
da:08:a8:15:0c:55:41:f0:97:81:ee:41:06:59:9b:a2:d1:3d:
3a:3a:5c:15:63:77:57:3f:ef:15:f6:f0:ce:2d:a9:97:3f:47:
ab:d5:c3:25:22:07:d3:f9:99:b3:2f:fb:c9:99:4b:0a:17:c8:
d1:0b:7f:d3:8a:41:55:f2:25:86:70:f6:f1:a6:f0:f2:bb:90:
2e:a0:ae:72:d0:fc:5c:38:0c:1a:49:20:a5:fa:14:e8:94:ae:
4d:22:21:e5:e9:46:8a:2b:48:dc:1d:99:5e:16:ff:ed:3d:e2:
a1:6b:91:69:f7:3a:d2:c2:6b:48:d6:e4:18:34:29:c2:64:7b:
d6:e1:1e:cc:af:4e:fd:32:92:39:f0:01:22:de:de:70:17:c5:
41:29:f3:26:01:ee:d5:f0:e3:97:66:f9:b5:ff:e1:c3:fc:4c:
d3:cf:0e:9e:f1:ff:32:b1:36:fa:77:75:dc:cd:77:a9:b2:c3:
b1:e4:43:0a:f0:47:14:9a:85:65:6d:cd:55:f5:40:f7:43:ef:
fa:74:92:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:36:31 2025 by rpki-client