Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/T82m9w4wOIoIUYGQvmBUL3lmj1k.roa
File: T82m9w4wOIoIUYGQvmBUL3lmj1k.roa (raw, json)
Hash identifier: wHiv9n227jNtnwBucRMJxJZ/ikgLBCZ8IV2gExI9Oic=
Subject key identifier: 4F:CD:A6:F7:0E:30:38:8A:08:51:81:90:BE:60:54:2F:79:66:8F:59
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182EB753F8E6A41C92452B67F312C52280D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/T82m9w4wOIoIUYGQvmBUL3lmj1k.roa
Signing time: Mon 29 Aug 2022 21:15:05 +0000
ROA not before: Mon 29 Aug 2022 21:15:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:eb:75:3f:8e:6a:41:c9:24:52:b6:7f:31:2c:52:28:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 29 21:15:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4fcda6f70e30388a08518190be60542f79668f59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d2:88:72:87:1b:b5:c8:59:6e:1e:df:91:1f:
07:1d:4f:d2:4e:78:a1:3f:5c:cf:79:91:4b:c9:35:
cc:bd:0c:c0:a8:b5:2e:99:c2:73:10:8e:68:fe:a7:
f0:09:44:9e:7f:89:24:22:2b:f2:0f:9b:70:45:3e:
84:ae:62:33:bc:fa:99:f0:49:47:f2:b6:78:0b:1b:
0d:4f:74:3a:7b:9a:44:e3:df:56:67:e2:4c:6a:be:
c5:75:31:12:74:18:03:1b:3c:1b:f5:dd:8f:d7:40:
5d:a3:99:92:7a:e0:7f:8a:2c:8f:7e:02:64:b2:cf:
c7:0c:ac:47:27:8c:07:e5:36:7d:93:28:f9:4b:4b:
97:2a:26:2f:0c:99:e4:4d:c7:4b:45:4f:64:42:46:
00:cb:4a:99:e0:2b:b2:c1:dc:3c:f3:00:90:5b:c1:
16:ed:3a:c5:78:e8:c1:d0:8e:c7:38:ee:4b:fa:1b:
6a:5b:25:19:0a:f8:24:77:55:57:9a:75:db:ce:e5:
8f:8c:44:25:7f:cc:3d:4a:18:48:34:7a:8b:2b:df:
c2:b2:fc:e1:30:a2:6b:76:03:7e:8a:54:2e:6b:e1:
b7:c6:37:d8:8a:0a:4a:3d:07:9d:ef:80:5e:31:db:
85:49:9a:91:8e:56:0d:b1:ed:27:94:3a:c2:4c:ca:
8a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:CD:A6:F7:0E:30:38:8A:08:51:81:90:BE:60:54:2F:79:66:8F:59
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/T82m9w4wOIoIUYGQvmBUL3lmj1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
83:73:a2:01:f0:23:8e:81:00:e2:1e:13:0b:0f:ad:66:fe:8c:
96:02:02:c9:f3:e2:3a:19:f8:18:a6:43:f2:36:c9:22:a8:c5:
0a:5e:64:a5:7c:7a:12:1f:d7:50:68:b5:e8:64:79:74:f1:c3:
00:b5:d8:37:4e:ed:1d:c6:11:48:64:a0:5e:f1:54:45:d1:3a:
c4:f5:68:68:32:5b:b4:59:74:f9:74:44:17:0d:ad:5f:66:b1:
2f:9d:9a:b6:62:cd:93:ca:14:35:79:7a:87:32:f6:f3:d6:bc:
d9:13:f7:15:14:83:95:a9:4d:55:25:0b:ee:2c:42:24:c8:3c:
16:80:d6:d4:0e:1a:d9:6a:96:51:e8:78:12:7c:d7:43:61:d2:
52:c7:a8:d6:5f:98:78:03:dd:17:de:8c:a7:a9:f7:bb:c0:1d:
0a:6d:3e:64:e2:11:28:df:db:3a:e3:ca:4c:62:16:03:66:50:
38:52:54:f1:d7:a7:a7:03:24:fc:09:ca:c4:8f:58:f3:70:ad:
f5:13:27:83:f7:d5:47:08:05:59:2c:29:b9:6f:4f:f0:26:e6:
f2:39:98:8b:0d:57:50:95:67:20:ea:23:05:ca:4b:4f:05:a9:
8b:b9:45:da:26:42:86:45:e3:b0:3f:07:f6:e4:4e:ba:e2:10:
fc:fc:48:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:42:02 2025 by rpki-client