Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/X0H4Fr64s0LE62z2iiBP6pcv44w.roa
File: X0H4Fr64s0LE62z2iiBP6pcv44w.roa (raw, json)
Hash identifier: Ku5RcgSt6QYIc3dtyx0430e16t4a6JAD3klYAIHV/KA=
Subject key identifier: 5F:41:F8:16:BE:B8:B3:42:C4:EB:6C:F6:8A:20:4F:EA:97:2F:E3:8C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018247BCACA82B06623329BAA9996CBB1F3F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/X0H4Fr64s0LE62z2iiBP6pcv44w.roa
Signing time: Fri 29 Jul 2022 02:15:23 +0000
ROA not before: Fri 29 Jul 2022 02:15:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:47:bc:ac:a8:2b:06:62:33:29:ba:a9:99:6c:bb:1f:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 29 02:15:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5f41f816beb8b342c4eb6cf68a204fea972fe38c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6f:2f:61:e4:d9:9b:83:f1:09:fa:37:74:90:
d9:54:21:29:ab:c4:2b:74:47:b6:cc:d9:59:f0:ec:
ba:1b:dc:30:91:67:c0:e9:be:3d:e8:1e:f8:41:58:
73:08:1c:37:07:1b:25:7b:34:6c:81:19:26:1f:d5:
3e:6c:69:ee:c5:e2:92:2e:e2:fd:c9:8e:cd:3b:33:
20:c0:f1:af:24:64:2a:69:ca:2c:0d:c4:ff:7a:ff:
a6:73:8c:d9:d8:64:a1:c6:fc:e8:e2:c0:f8:50:e5:
66:66:07:7d:0e:45:03:87:37:53:57:20:c3:f8:6d:
83:0b:2e:bd:fb:6c:06:51:b5:c1:5d:57:0c:af:bb:
fe:97:74:5a:f9:08:43:71:74:eb:80:d0:08:6a:33:
c4:a3:15:50:cd:83:fd:89:44:83:dc:b0:10:59:4f:
d5:61:27:ac:5b:0d:bc:ec:29:62:dd:8e:78:f2:52:
25:f7:66:18:d4:50:f2:aa:81:08:3d:d3:b8:8f:cd:
56:5b:71:33:44:23:25:7b:1c:f9:08:c0:dd:04:38:
90:c5:05:72:9a:f3:cc:39:f8:b6:48:39:a8:23:61:
1b:db:d8:08:52:08:7a:4b:85:3b:58:9b:47:83:8f:
05:ff:98:86:af:fb:ed:3b:38:0f:d7:53:4e:dd:13:
bf:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:41:F8:16:BE:B8:B3:42:C4:EB:6C:F6:8A:20:4F:EA:97:2F:E3:8C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/X0H4Fr64s0LE62z2iiBP6pcv44w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
39:ae:9d:4e:38:7f:11:d1:f4:f6:24:29:e9:a1:b3:7a:df:4d:
20:67:a0:77:2d:c0:5d:30:98:34:a0:3a:0a:15:1b:25:ba:ef:
f6:15:34:01:ce:f5:cb:bb:43:38:c7:aa:3e:73:2f:8f:1d:1a:
45:4a:11:43:83:f8:a3:5f:66:10:a7:87:5a:9b:9b:93:d1:69:
a2:3d:ee:16:c1:dd:0e:28:4e:98:2e:30:9c:7f:27:2e:45:75:
31:2a:4e:ab:5a:32:4e:44:9b:a2:0d:55:e1:17:37:2c:db:2e:
e3:9b:dc:7f:7e:c6:01:5f:7b:79:b1:e3:41:41:9d:fe:ca:a8:
ca:7e:aa:b4:11:4b:4d:66:93:ef:53:de:e6:7c:74:b4:36:81:
d0:0b:2c:48:c3:da:ce:04:d7:0d:d4:6a:be:34:18:36:98:5b:
72:cb:41:5a:4c:d8:16:f2:9d:d6:2e:ad:91:78:26:d1:f5:b7:
0f:a8:ae:42:75:07:5e:ab:74:67:1e:2c:6b:24:ab:45:4f:01:
48:3a:ba:f3:0f:f6:19:8b:d4:0c:8e:9f:27:16:e6:52:04:d9:
87:2c:4b:54:36:9f:5a:13:f7:ed:6d:08:a4:83:ed:65:97:25:
12:fa:3d:ff:c0:49:b2:4f:87:e4:08:53:78:60:93:7f:9c:d5:
3f:04:eb:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:00:14 2025 by rpki-client