Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/V442FlzVQ7QmYH8B30chhnC_51w.roa
File: V442FlzVQ7QmYH8B30chhnC_51w.roa (raw, json)
Hash identifier: CQ1QpVycVp3pzFmTFOUk8R5P2/Ar/izhI2yyJz98T94=
Subject key identifier: 57:8E:36:16:5C:D5:43:B4:26:60:7F:01:DF:47:21:86:70:BF:E7:5C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183DF72A7FAE7FC452CF0AB8640B3E87C62
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/V442FlzVQ7QmYH8B30chhnC_51w.roa
Signing time: Sun 16 Oct 2022 06:19:36 +0000
ROA not before: Sun 16 Oct 2022 06:19:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:df:72:a7:fa:e7:fc:45:2c:f0:ab:86:40:b3:e8:7c:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 16 06:19:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=578e36165cd543b426607f01df47218670bfe75c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:7e:9d:d5:ae:30:eb:83:86:c6:22:89:c1:14:
b5:28:f6:5c:f2:e5:82:b2:0f:2c:e5:02:1f:3c:cd:
cb:93:e2:01:9b:8e:4c:50:86:87:b8:8a:ff:82:dc:
99:13:5b:4a:c6:c6:2b:85:fd:6c:c4:96:e6:2d:a9:
33:3b:71:f4:f7:79:22:79:06:50:61:39:c4:6a:dc:
79:f6:28:f5:49:e8:ae:68:95:1b:65:a8:c3:a7:5e:
1e:50:10:e3:d8:81:ea:cc:30:63:ae:69:b6:88:17:
17:84:ac:cd:99:ce:b9:3a:5a:9b:56:2c:08:69:cb:
5d:00:69:f4:68:e2:08:7f:55:d9:4a:ea:82:93:c6:
28:f1:40:90:85:63:91:4b:0c:62:34:42:82:17:49:
7d:bc:6b:2d:19:59:e0:b5:61:59:ff:f7:66:d2:93:
dd:ec:d0:33:94:24:1e:f3:07:38:03:6e:45:d5:63:
99:d4:98:a8:56:b8:14:46:12:88:c8:6f:43:57:a1:
b3:ce:c6:07:19:ba:c9:0f:4e:19:1a:d8:d3:4b:77:
01:62:be:44:d4:97:ba:de:44:c8:11:06:2e:9d:9c:
7d:a5:be:a5:fe:68:02:91:e9:40:bf:0b:d5:91:df:
0e:63:76:5a:2c:de:0e:71:e8:56:47:1f:30:f6:2d:
e1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:8E:36:16:5C:D5:43:B4:26:60:7F:01:DF:47:21:86:70:BF:E7:5C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/V442FlzVQ7QmYH8B30chhnC_51w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
72:63:6f:66:61:51:79:01:f3:04:df:8d:ec:96:6d:01:e7:3e:
8f:5d:5e:5f:9e:05:60:11:13:c4:16:17:f5:a0:b6:83:aa:64:
a3:3b:f0:ad:be:96:f2:b0:98:72:82:ee:7b:44:5f:a1:00:83:
10:d9:a3:a7:7c:3f:cb:b5:ff:47:c3:d9:73:a1:d1:59:32:12:
2f:e4:f2:c3:70:54:b3:23:a2:eb:bb:12:ed:41:00:ca:e4:bc:
03:f6:83:06:95:09:e8:c8:50:9e:a0:a8:7c:9d:63:ab:19:53:
d4:f3:10:3d:b4:b0:ad:c7:28:d7:1c:b3:dd:af:d4:97:8a:40:
1d:8b:65:94:01:7d:c7:67:59:25:99:18:0d:0d:ea:9f:c4:4f:
37:e8:62:66:3b:06:82:a2:6f:5d:cf:a7:d6:2e:a7:6c:6b:7b:
9c:06:46:38:67:f1:0f:32:ff:3d:35:3d:12:cf:eb:19:c4:e4:
d8:98:cc:5f:ec:8a:c7:76:0c:f2:a2:37:a4:5e:b6:00:5d:63:
5c:d3:db:39:24:03:c2:ed:d8:6b:7b:b3:9e:3b:aa:cb:f0:83:
7b:0b:a6:25:81:63:cd:d7:28:94:14:6c:0c:f9:66:fc:74:d9:
0c:62:f2:ea:83:62:b8:79:03:ec:26:67:bb:e2:77:11:9f:cf:
f0:06:5b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 23:04:01 2025 by rpki-client