Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/X9O_cjJ_OTmt4F0x8KQ4zYNjN3Q.roa
File: X9O_cjJ_OTmt4F0x8KQ4zYNjN3Q.roa (raw, json)
Hash identifier: pehFq7ES7bQ0mvlbNTWmFaXKGbe/wVfNCB9SLhr8sgs=
Subject key identifier: 5F:D3:BF:72:32:7F:39:39:AD:E0:5D:31:F0:A4:38:CD:83:63:37:74
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01820E02F0D0A39C9A52103D0A959B5E162A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/X9O_cjJ_OTmt4F0x8KQ4zYNjN3Q.roa
Signing time: Sun 17 Jul 2022 21:14:09 +0000
ROA not before: Sun 17 Jul 2022 21:14:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:0e:02:f0:d0:a3:9c:9a:52:10:3d:0a:95:9b:5e:16:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 17 21:14:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5fd3bf72327f3939ade05d31f0a438cd83633774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a7:18:6b:71:40:74:2c:49:11:79:7e:b8:e8:
a3:0a:59:a5:e3:a3:ea:c8:c8:10:d1:8b:87:36:24:
58:52:1c:75:12:9f:a2:83:68:62:09:58:fc:46:f3:
00:68:70:de:d5:fa:ec:23:8a:4e:34:d1:47:5f:e6:
6a:ef:1e:dc:fc:a5:c6:75:d2:fa:14:61:6c:d0:82:
5e:1f:59:ce:9d:3e:87:ff:07:a1:25:80:0b:ef:80:
66:da:b3:91:86:a6:9c:57:5b:38:4d:79:0e:85:9c:
a6:a0:ef:2d:d2:41:96:3e:94:19:e4:a8:99:3d:03:
6b:ad:8e:be:90:47:cf:3f:3f:16:c1:6e:57:4a:37:
2e:97:74:f5:fa:f8:6d:68:c4:79:e0:0b:8f:a2:51:
a9:07:49:1b:e4:20:db:e4:8b:24:ba:02:c3:98:ff:
7e:82:8f:94:d0:a5:94:64:45:95:45:7e:ef:ee:b3:
3e:a0:cb:c0:0f:ec:88:7c:bc:a2:6a:a2:2e:e5:95:
73:a8:ae:48:db:a1:5b:15:a8:92:ef:02:f6:88:60:
53:cd:d9:97:e9:62:f7:00:10:f3:3c:1e:79:3e:c1:
e3:cd:c4:bb:f9:08:a1:5c:89:d9:da:ae:7c:96:5e:
a4:13:a0:2b:98:38:01:06:03:eb:d8:f9:dc:e1:56:
19:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D3:BF:72:32:7F:39:39:AD:E0:5D:31:F0:A4:38:CD:83:63:37:74
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/X9O_cjJ_OTmt4F0x8KQ4zYNjN3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3a:ad:da:ab:e8:6b:23:ab:50:f8:80:1f:8f:1d:d9:6f:39:35:
78:29:0e:7d:ca:52:e6:d0:bd:f8:9a:f8:4d:24:ba:9d:94:43:
56:ad:c1:c1:86:f1:7f:11:a3:e9:93:6a:56:83:a5:24:3e:82:
dd:45:0a:05:66:4a:55:7a:58:4d:36:2c:2a:8f:86:96:61:a1:
44:69:87:92:c4:6f:0f:aa:c7:7a:0b:5e:f6:a3:d0:1c:9f:9a:
92:88:34:46:3a:c6:f4:3a:fa:13:96:e7:19:7c:aa:81:08:6d:
fc:a0:1c:2a:92:02:33:96:c7:2c:23:71:fe:fb:94:b6:bc:6e:
2c:22:69:26:8c:0d:48:8d:94:09:c5:09:4d:b4:56:bc:3f:e6:
df:5b:de:17:0d:4e:6e:bb:84:72:64:58:46:d3:12:bd:bf:08:
8f:da:67:94:ad:5e:63:0c:69:73:81:a0:2c:69:9a:7a:06:34:
96:ea:db:69:06:1d:56:57:6f:36:d0:6e:35:27:5d:82:e2:9f:
16:1f:09:85:9e:41:df:c9:4e:2f:40:d1:8f:21:96:71:71:45:
c1:c4:da:ec:bc:7f:1e:74:4e:ff:99:3e:c0:99:8c:4a:ea:16:
8c:fe:33:25:04:65:f8:16:31:ca:d4:39:29:6c:96:20:23:6e:
e3:ae:75:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:48:20 2025 by rpki-client