Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/U2q9rgSW12VBJ5xLdO1gowVGGtU.roa
File: U2q9rgSW12VBJ5xLdO1gowVGGtU.roa (raw, json)
Hash identifier: E2D2wU2eoO5Q0WXaM+7LEQBsNl+Pjctx53xQrpPzMOw=
Subject key identifier: 53:6A:BD:AE:04:96:D7:65:41:27:9C:4B:74:ED:60:A3:05:46:1A:D5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185372997F66B56F9A2230FD0F1745C8FC3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/U2q9rgSW12VBJ5xLdO1gowVGGtU.roa
Signing time: Thu 22 Dec 2022 00:09:10 +0000
ROA not before: Thu 22 Dec 2022 00:09:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:37:29:97:f6:6b:56:f9:a2:23:0f:d0:f1:74:5c:8f:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 22 00:09:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=536abdae0496d76541279c4b74ed60a305461ad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b1:6c:7b:3b:24:a6:79:0f:ff:ca:d1:c6:77:
bc:2f:3e:7b:e9:96:95:86:2a:4f:d8:22:b6:41:e7:
fd:5f:1e:50:9b:76:ce:fa:c6:57:b3:a2:80:d4:47:
a7:1b:a4:49:a4:69:47:60:2e:0e:04:d9:76:6d:13:
9e:ec:c5:93:de:fa:08:85:23:f6:74:f2:a1:b3:23:
1b:ec:a1:ef:b0:4e:96:1c:8e:0d:45:a7:7d:33:4d:
e8:21:79:58:e4:5b:a7:47:bf:fb:04:1d:a0:9c:1a:
ad:5f:cd:90:4c:88:6c:c1:9f:87:6f:72:25:7d:a9:
03:7d:a5:98:9e:0c:bc:9c:9e:06:90:fe:82:0a:e1:
6c:6e:85:46:4f:e1:2f:32:7f:75:1a:99:a9:02:cc:
e3:89:ed:d7:84:d1:32:32:83:4a:23:39:40:50:d8:
39:e5:e1:6d:ef:af:0c:7b:c5:d4:83:8f:33:bc:d6:
93:e3:9b:1f:8c:95:26:65:97:83:ab:0d:6a:db:4f:
c3:86:e5:ff:13:dc:60:0b:de:20:94:87:dc:55:a5:
f1:80:5b:2c:62:c1:5b:a6:91:4f:88:bf:a9:48:69:
49:37:88:7d:cb:ad:86:4e:c5:15:77:11:5f:03:28:
3e:b4:ca:fd:11:95:9f:03:75:d8:7d:11:28:36:34:
e9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:6A:BD:AE:04:96:D7:65:41:27:9C:4B:74:ED:60:A3:05:46:1A:D5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/U2q9rgSW12VBJ5xLdO1gowVGGtU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
19:41:91:83:54:96:4b:d0:8d:ae:50:17:a7:38:0c:aa:43:b8:
70:dd:a6:f6:d3:17:54:95:ac:0a:7b:dc:47:06:ea:bc:5b:36:
ca:2b:28:3f:f8:28:46:a3:91:8a:41:58:d7:ef:ec:58:66:bc:
04:79:95:b4:97:c2:d8:9b:15:7f:e1:70:d2:2a:a0:ea:36:f7:
d6:5a:8e:fb:90:57:e2:e9:61:cd:1f:82:f8:c7:76:34:b8:46:
cd:59:41:66:d7:6a:a7:d8:f2:c5:5d:1c:2b:1e:66:5e:4c:07:
be:d9:6c:dc:0e:07:b8:bf:41:b6:25:74:38:55:f2:8a:8d:c0:
9c:35:31:ed:c8:d5:3d:7c:68:3b:3e:ea:03:3b:2e:04:65:c5:
9d:be:0e:fb:44:aa:7e:28:09:da:ad:ab:1a:94:84:0a:94:e4:
7c:15:c4:ab:91:38:93:79:02:8e:10:c7:c7:2b:4f:c4:7a:e2:
c4:32:30:33:98:57:e8:12:88:31:51:e7:c6:90:e8:c7:0d:ce:
bd:89:b9:fd:7e:da:cc:49:c3:92:cb:dc:21:3e:7c:31:dd:d0:
88:55:72:50:e7:40:1c:f7:51:cb:40:f0:a7:16:82:02:be:0d:
2a:7e:34:f5:0c:ee:bd:03:d5:4d:ad:d3:ea:ff:9f:42:ec:c0:
cd:50:9b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:39:38 2025 by rpki-client