Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/V4Qtola3zNGsftuG2_pVPmkNK-4.roa
File: V4Qtola3zNGsftuG2_pVPmkNK-4.roa (raw, json)
Hash identifier: gegnXlJXCVQKvejBy/Wcdd8K3yjdmvzxV8xcgqsDC/Q=
Subject key identifier: 57:84:2D:A2:56:B7:CC:D1:AC:7E:DB:86:DB:FA:55:3E:69:0D:2B:EE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018440A50D54FC2706F38EC8F2623DA83F14
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/V4Qtola3zNGsftuG2_pVPmkNK-4.roa
Signing time: Fri 04 Nov 2022 03:17:49 +0000
ROA not before: Fri 04 Nov 2022 03:17:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:40:a5:0d:54:fc:27:06:f3:8e:c8:f2:62:3d:a8:3f:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 4 03:17:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=57842da256b7ccd1ac7edb86dbfa553e690d2bee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:45:c2:35:ee:e7:65:86:a5:d8:8b:b3:cd:ae:
f2:bc:d8:b3:cf:4c:13:11:0f:23:dc:b3:e1:cf:35:
d6:d2:f5:0b:3e:93:62:ab:77:4e:aa:7b:93:73:2a:
b8:a6:c4:9e:23:e8:a5:c5:0a:1b:f0:26:14:91:46:
86:b3:6a:77:b9:57:ff:12:70:70:22:69:d8:f8:b4:
02:d3:a6:40:58:e5:12:78:4a:15:5d:a3:86:8b:7b:
2d:8e:43:c8:1d:ce:df:53:bf:3a:64:87:78:6d:3b:
63:41:4d:48:67:c2:7e:5f:cd:e1:fd:43:f8:75:b7:
03:32:8f:5c:fb:4c:7e:8a:bb:09:72:57:67:ad:e9:
00:fe:57:eb:a7:f8:ed:9d:c6:0e:dc:87:f0:6c:31:
fa:38:71:ad:21:33:1e:53:0a:ab:5c:6f:8a:99:36:
66:7d:c2:ed:08:1f:9d:90:f5:87:e3:11:cc:22:19:
d0:1a:c0:51:34:94:79:58:41:5f:e0:98:0f:60:d4:
fd:c2:a0:15:28:07:38:7f:f9:0f:ed:9e:e0:6c:99:
7a:8b:1d:69:87:ad:aa:4e:3d:bf:72:53:13:db:d2:
a9:e1:d3:2e:31:63:fa:19:31:6b:32:7c:09:b5:51:
fc:69:64:8c:ff:3a:f4:29:48:c4:1b:da:59:f3:3f:
10:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:84:2D:A2:56:B7:CC:D1:AC:7E:DB:86:DB:FA:55:3E:69:0D:2B:EE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/V4Qtola3zNGsftuG2_pVPmkNK-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
06:d0:05:1e:0c:7f:8a:0e:f1:04:02:46:18:45:e1:ae:f8:1d:
e1:b8:ab:8b:05:62:4a:97:34:8d:d2:66:1b:48:9b:78:8f:3d:
ca:e8:f1:3a:0d:9a:1a:ac:78:46:c6:55:e5:d9:4d:76:d1:b5:
09:d5:a0:ab:79:34:c5:be:be:72:c1:b0:d3:ee:6a:79:7f:2d:
56:ff:03:ed:ca:6d:55:0e:a9:15:d8:72:17:af:08:54:fa:eb:
be:27:1f:7b:49:92:79:36:7f:e5:8b:95:49:4b:05:6b:53:57:
95:78:ce:a0:1c:78:e8:0a:85:68:77:f1:e6:ce:15:74:60:db:
28:63:95:3b:80:5d:6c:db:a4:dc:5d:2d:a8:ef:30:60:0d:d1:
4a:ee:8a:b7:82:fd:26:e8:56:27:da:18:da:d4:44:bb:00:d9:
2e:46:dd:23:3c:72:e0:c8:ec:de:46:1c:f3:2c:85:27:65:2d:
f4:fb:61:ae:e2:6b:b4:2e:b8:bc:43:fd:5d:61:c5:85:ae:9c:
38:02:67:c3:8c:18:11:44:89:b3:e2:dc:0c:0c:b6:8b:6d:9f:
73:e6:df:b5:2a:b2:bf:f5:bf:00:6a:5b:49:84:0b:ec:0c:f8:
68:cc:a8:72:db:55:68:9d:fa:8d:6b:f7:b5:42:a8:4c:7c:8a:
0a:5e:20:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:05:59 2025 by rpki-client