Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/X7vGVyjUY3Lj7wMOWnfTX--MMuw.roa
File: X7vGVyjUY3Lj7wMOWnfTX--MMuw.roa (raw, json)
Hash identifier: mgNVTWVl/psNt6tZzqvBnD9KbJkX0uQ6fpgXMiFJBKU=
Subject key identifier: 5F:BB:C6:57:28:D4:63:72:E3:EF:03:0E:5A:77:D3:5F:EF:8C:32:EC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184CEAD159683D0C38EC1F50064D5E88933
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/X7vGVyjUY3Lj7wMOWnfTX--MMuw.roa
Signing time: Thu 01 Dec 2022 17:12:40 +0000
ROA not before: Thu 01 Dec 2022 17:12:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ce:ad:15:96:83:d0:c3:8e:c1:f5:00:64:d5:e8:89:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 1 17:12:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5fbbc65728d46372e3ef030e5a77d35fef8c32ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:78:f0:20:63:ca:a4:98:0b:dd:d0:11:53:d8:
6e:ce:68:c2:ec:a4:00:57:d1:e8:2f:e3:6b:be:66:
41:0f:00:42:ed:df:44:93:2a:e7:ca:14:f7:d5:65:
ec:af:93:2f:1b:18:c0:eb:36:8f:22:65:d3:90:75:
a9:69:6d:5c:17:d0:3b:17:9d:a9:c4:be:13:88:02:
52:e7:c3:fb:0d:09:35:b8:0a:36:00:04:33:e3:3b:
28:6f:d4:04:a7:cf:f2:9e:11:cd:3b:bb:bb:a7:c6:
8d:e8:ed:f8:0c:bd:bb:49:15:c3:95:c5:dd:bc:3e:
f6:a9:21:be:20:f7:6e:d2:9b:6b:05:a1:ab:93:52:
4a:62:0e:02:b1:4d:af:7b:4c:b4:71:a5:51:58:78:
4e:9f:9b:08:39:25:b9:af:2a:0f:fc:7a:65:2d:c3:
ea:50:bc:c7:8d:56:8f:ae:04:2d:9e:75:ee:19:75:
34:05:66:f4:16:92:2e:b8:e7:26:1a:45:74:42:13:
dc:f1:b4:c6:5d:9d:c2:64:5d:c8:5d:0f:68:48:dd:
8b:01:2d:71:ec:26:c5:2b:c6:68:c0:d5:c2:84:77:
d0:21:f3:ef:a3:3f:5e:99:7e:61:58:90:34:70:26:
ae:9c:d9:fe:97:a6:cb:c5:49:d8:e3:a9:90:8a:4a:
b7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:BB:C6:57:28:D4:63:72:E3:EF:03:0E:5A:77:D3:5F:EF:8C:32:EC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/X7vGVyjUY3Lj7wMOWnfTX--MMuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2c:95:04:29:7c:68:52:aa:0f:7e:da:4d:40:b2:4e:d4:17:d5:
fc:c6:2c:34:61:90:56:76:d4:06:77:03:a7:50:b4:95:47:23:
41:6b:7f:15:ad:2a:a7:43:cf:bd:62:a7:55:53:10:23:e0:68:
5e:ad:b8:73:8d:28:b7:e6:49:45:c1:b0:7f:20:12:3c:3a:4b:
34:10:74:b8:ce:d9:76:9f:a4:3f:6d:1c:c2:49:a7:38:75:34:
11:63:7d:59:db:81:8b:5f:51:03:72:51:2a:4d:29:20:e3:2e:
1e:43:e0:10:0f:10:1d:e5:cb:98:a0:8e:70:06:db:f9:6e:9e:
49:1c:2a:7b:c2:2f:93:7a:a0:51:0c:b4:dd:91:74:3c:83:de:
f5:60:b6:92:1b:7d:12:21:7a:6a:70:04:69:6e:ac:b4:f8:c3:
a9:2b:03:be:20:9e:d5:07:21:20:4e:44:80:40:2c:5b:7f:c6:
81:51:94:3a:59:26:c5:20:45:29:a8:e0:5b:20:51:87:39:39:
78:ff:2d:fd:6b:74:33:a5:36:f6:7b:6e:af:72:77:b2:56:9b:
81:6d:04:13:12:7f:85:fd:89:71:9f:28:f2:cf:bb:23:27:89:
b1:25:9f:b3:15:c9:6b:1f:e8:79:0d:a5:0a:b3:d6:7d:47:a1:
f7:f2:81:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 21:12:07 2025 by rpki-client