Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/T43M7iC40phiHdmM5PdP4ruu4Qw.roa
File: T43M7iC40phiHdmM5PdP4ruu4Qw.roa (raw, json)
Hash identifier: DFvjBFsR+nnwdOuLAWZq8srjUgmqoK3zYOaZmecQuTc=
Subject key identifier: 4F:8D:CC:EE:20:B8:D2:98:62:1D:D9:8C:E4:F7:4F:E2:BB:AE:E1:0C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185149DF1CEA8270F5481BE09EBAA9FEB2B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/T43M7iC40phiHdmM5PdP4ruu4Qw.roa
Signing time: Thu 15 Dec 2022 07:09:33 +0000
ROA not before: Thu 15 Dec 2022 07:09:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:14:9d:f1:ce:a8:27:0f:54:81:be:09:eb:aa:9f:eb:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 15 07:09:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4f8dccee20b8d298621dd98ce4f74fe2bbaee10c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e6:60:1f:90:aa:e1:74:84:43:75:ba:3b:89:
e9:e9:c5:93:ad:4e:62:f8:69:55:da:69:4b:63:0a:
50:db:ff:79:cf:a7:05:93:86:ae:9a:25:24:a8:d6:
45:e9:c5:e1:8c:0a:92:d7:f0:04:6a:ce:b7:ed:de:
28:3f:67:14:9c:99:50:f7:f0:d7:de:c1:28:24:b3:
a3:79:9e:a7:f8:6f:fc:0e:3a:e6:b6:06:40:76:65:
dc:cd:9a:e4:2e:ce:fe:bb:e8:ba:3a:36:da:5d:2c:
af:4d:5d:e2:7d:54:4f:54:ff:a5:22:08:f2:a2:70:
f1:8c:81:7d:86:11:e4:b7:f9:12:c0:df:78:69:e1:
8d:28:83:90:55:8c:7c:40:d8:7f:4a:25:b4:8f:20:
85:b8:12:ed:43:49:a5:42:ff:aa:51:ab:a5:26:31:
fc:01:30:98:78:0d:a9:c4:c7:28:7a:db:cd:a1:9c:
a1:3d:66:05:4e:e4:1a:18:79:ba:69:e3:76:07:1e:
19:ac:27:a1:77:12:2c:49:57:81:b7:2e:6d:14:12:
bb:60:66:92:6d:58:c9:11:19:8b:46:01:f6:1f:eb:
9f:c6:5b:1b:5b:ee:d6:4a:0b:88:bc:11:ea:40:62:
2e:43:2d:f2:f1:54:ed:42:57:9a:9f:76:b7:67:2e:
9d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:8D:CC:EE:20:B8:D2:98:62:1D:D9:8C:E4:F7:4F:E2:BB:AE:E1:0C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/T43M7iC40phiHdmM5PdP4ruu4Qw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1d:c7:3e:d7:1f:d3:01:0a:e0:b0:ec:37:f2:52:64:8b:e9:ae:
f5:26:ee:22:77:50:b5:1c:32:ee:65:bc:4d:29:0b:2e:19:37:
3b:2a:d0:b6:17:42:f5:1c:45:70:c5:f7:d7:26:3c:dd:19:0d:
06:04:24:08:87:42:95:ac:f9:79:7c:e9:0b:53:eb:50:f5:ff:
59:c9:b6:0b:c4:8d:a2:a6:ca:89:f8:11:ee:bf:af:12:c5:5b:
c2:ab:08:e5:a9:68:1b:f3:67:71:22:63:0d:0b:65:d5:b1:69:
fc:fd:b6:f6:38:67:f0:31:af:92:93:f2:df:db:1c:0a:f2:92:
8e:50:2a:90:14:1d:88:d5:f9:83:9b:3e:8b:49:14:8a:1d:4b:
20:30:8b:03:79:9e:23:bd:95:76:2e:13:2d:67:03:07:73:d5:
09:3e:00:f1:f1:6a:f4:82:b2:a1:a9:60:b7:4f:d2:69:89:ea:
4e:6d:5a:d1:6c:61:86:5b:0b:81:f0:cd:b7:1a:9e:f7:c1:a5:
e0:5f:c5:de:c7:e6:95:67:f4:a3:ca:11:4f:8d:1f:99:07:7d:
de:18:26:0b:c4:79:03:93:72:a9:c8:03:84:69:85:87:59:f9:
25:86:18:90:6b:a7:4f:4e:b6:2c:97:5d:f1:b6:91:6c:8c:36:
f5:85:49:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:51:52 2025 by rpki-client