Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/T5AnVMpl04miBI2v5FNJn9FPgYA.roa
File: T5AnVMpl04miBI2v5FNJn9FPgYA.roa (raw, json)
Hash identifier: cRnVv4FQc/catdE8y1ovLfCLMYDNBGHqf1MfWjhlwIY=
Subject key identifier: 4F:90:27:54:CA:65:D3:89:A2:04:8D:AF:E4:53:49:9F:D1:4F:81:80
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7769B168
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/T5AnVMpl04miBI2v5FNJn9FPgYA.roa
Signing time: Fri 01 Apr 2022 05:10:55 +0000
ROA not before: Fri 01 Apr 2022 05:10:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2003415400 (0x7769b168)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 1 05:10:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4f902754ca65d389a2048dafe453499fd14f8180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ea:1a:ac:9b:8f:32:05:72:4d:9b:61:af:66:
1b:4b:82:54:e3:ca:a0:0a:27:51:47:45:68:44:86:
00:82:95:30:02:55:da:9a:6e:f5:79:f1:b2:cb:37:
91:4c:dc:75:8f:6d:71:76:70:93:30:ae:9f:db:81:
78:b0:89:b3:58:2e:88:7d:3d:f8:23:de:20:c5:8e:
d2:0c:83:53:55:06:d6:9a:fd:67:09:f8:b1:c6:77:
35:38:c6:2d:51:57:7c:05:e2:17:54:c4:11:76:f3:
22:ae:21:ab:7c:82:fe:40:c4:fa:7e:1d:77:85:d2:
de:9e:aa:78:c9:4d:9d:51:b1:7a:1d:7d:08:2c:57:
39:22:f7:21:e9:39:90:3c:16:cf:3f:bf:27:70:88:
86:e2:a2:e9:1d:8a:b6:29:b0:65:a7:96:ed:07:bd:
aa:84:e3:d3:52:6e:cb:8d:2a:b0:ac:83:5c:31:af:
bd:87:41:b7:14:de:e9:cc:61:01:5f:9f:b9:88:15:
b2:c1:c3:42:97:57:de:32:24:fd:42:49:46:37:85:
dc:aa:32:e6:d6:5f:db:4c:6d:7e:c9:44:c3:86:ae:
c9:57:38:19:4c:71:67:28:c5:f5:fa:bc:95:76:0d:
67:f4:b2:e6:fa:fd:b5:a6:b9:92:6e:0a:4b:21:c6:
98:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:90:27:54:CA:65:D3:89:A2:04:8D:AF:E4:53:49:9F:D1:4F:81:80
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/T5AnVMpl04miBI2v5FNJn9FPgYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1e:86:7a:1d:fc:ab:3a:2c:14:05:ab:59:83:0e:32:70:84:b3:
79:fd:b9:f8:ff:d9:e2:89:58:08:78:df:84:b7:16:d7:a3:9e:
82:ee:5d:b5:90:c6:1b:3d:7c:52:ac:69:79:e0:51:36:89:24:
82:d3:8b:1c:06:85:55:86:3e:31:95:2e:99:62:25:26:f8:e2:
9a:7c:45:8f:9b:07:bd:7b:e2:60:2a:eb:fc:e3:65:1a:55:9f:
d0:51:fd:9b:b2:90:69:f8:8b:63:2f:e7:5c:a3:0f:7c:be:5c:
42:d0:b4:83:94:d1:95:1a:3d:37:1d:b2:c8:51:f7:64:bb:63:
73:ca:fe:8f:a6:5a:33:77:d9:9b:c7:61:fb:a8:47:81:db:31:
d2:2c:fe:49:a0:11:d9:15:50:22:d8:26:96:6c:52:5f:c8:17:
5f:f8:93:92:83:94:c8:b1:5d:da:c8:e6:94:ed:cb:cf:f3:59:
66:5a:f9:d4:3d:54:b1:20:b9:cf:1e:be:d2:12:89:ff:96:cf:
c7:51:78:5b:e1:cf:2f:0d:5c:ba:ee:94:9b:13:17:d9:3c:e0:
84:2e:0e:f7:64:f1:3f:93:a4:f3:22:cd:fc:da:ab:ba:f9:7f:
ff:06:19:7d:34:a0:41:46:3e:28:a7:e5:d9:74:45:85:77:1a:
fe:65:6e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:31:38 2025 by rpki-client