Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/V3UvwQ2xUT5RYEWoQGK7CVod3Lg.roa
File: V3UvwQ2xUT5RYEWoQGK7CVod3Lg.roa (raw, json)
Hash identifier: Yi24sVxK4yfLfnrwG8KGKVKkMfUrbNGC9Lk6p8SWPps=
Subject key identifier: 57:75:2F:C1:0D:B1:51:3E:51:60:45:A8:40:62:BB:09:5A:1D:DC:B8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182FFCDF00B5B141C7B98EB21D65534BAD3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/V3UvwQ2xUT5RYEWoQGK7CVod3Lg.roa
Signing time: Fri 02 Sep 2022 20:04:22 +0000
ROA not before: Fri 02 Sep 2022 20:04:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64:ffff:0:182:ffcd:b02f/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ff:cd:f0:0b:5b:14:1c:7b:98:eb:21:d6:55:34:ba:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 2 20:04:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=57752fc10db1513e516045a84062bb095a1ddcb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d2:12:09:54:6d:7f:9c:3a:2c:0b:08:30:f9:
4b:d7:2a:7a:68:05:cb:d9:4e:3e:14:f9:dd:78:fc:
55:d1:71:e8:5b:7b:7f:6c:1e:08:ff:d1:d3:e1:6b:
9e:1c:b3:74:11:c0:fa:23:6c:51:79:96:25:91:71:
6a:d1:10:ba:f9:b7:76:15:5b:ab:4b:83:1a:d5:6e:
26:8b:05:64:95:b9:ab:ae:99:e7:9f:ff:21:e7:2a:
54:85:8d:45:e8:77:fd:79:7d:38:80:29:e0:4f:3e:
ce:f3:b2:6d:bc:3d:9f:fa:95:77:dc:26:42:c6:31:
23:79:56:c4:1e:91:a8:bc:fe:79:f8:5a:3a:83:8b:
f1:99:8b:0e:fe:83:92:8b:21:8f:81:16:ee:4b:4c:
0d:76:5e:54:64:33:81:7f:55:c1:47:1d:ac:a6:d2:
6f:35:16:65:c5:a8:3a:23:1f:03:8f:4a:64:dc:d4:
1d:d1:29:ec:f4:8e:fe:71:46:ce:58:11:5b:59:5e:
83:09:5b:a3:9e:dd:c2:ca:0a:f1:b4:9a:02:a8:36:
90:aa:64:78:53:8f:cc:97:c4:be:4e:9d:b4:71:e5:
d4:27:39:08:f9:d1:5b:6b:75:08:08:22:a4:7d:5e:
75:23:5b:70:c7:d1:6a:e9:5a:ae:8d:d8:d1:35:b7:
44:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:75:2F:C1:0D:B1:51:3E:51:60:45:A8:40:62:BB:09:5A:1D:DC:B8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/V3UvwQ2xUT5RYEWoQGK7CVod3Lg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
54:9b:af:e0:1f:8a:50:65:02:68:68:e0:e1:b7:24:91:d0:7b:
c1:19:08:2c:60:34:59:2d:16:a9:8c:80:76:8b:7a:3a:e8:f9:
08:6e:ec:31:d3:40:44:fd:89:a3:c4:87:d1:3e:64:95:4c:07:
68:e0:cc:44:ab:d5:df:91:05:1b:ee:c5:d5:3f:e7:30:86:a2:
df:47:d1:fa:f1:50:24:b2:4a:7c:dd:d7:46:5b:ba:13:8c:ab:
eb:24:e1:91:e7:bf:f0:85:ea:bc:5e:77:10:61:2d:50:d6:c7:
68:4a:c7:03:3b:9a:d1:39:18:db:bc:a3:b0:7b:30:fb:1e:d2:
0a:bd:a0:43:70:f9:50:98:96:8b:3b:d0:36:04:2a:a8:7e:0a:
6d:42:c9:80:ac:21:2f:dd:ad:18:89:57:ae:25:0f:cc:24:60:
73:c3:b9:b2:51:d2:0b:89:5e:02:0a:a9:e2:a1:bb:cd:22:e1:
2a:6a:ef:32:f7:07:f9:6d:45:9e:6c:d5:6f:1c:06:37:23:14:
dd:67:37:da:b7:d5:34:7a:de:97:e4:2b:4e:6f:24:6d:00:05:
21:07:35:e7:7c:1c:bf:d3:cc:e9:7e:06:35:67:2e:67:d1:96:
8a:f6:bf:10:64:c5:60:ac:2d:83:61:05:f0:92:35:1e:6d:96:
da:8c:17:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:02 2025 by rpki-client