Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_0XxZRpwKDIWa_-tIUc3pVMRzFM.roa
File: _0XxZRpwKDIWa_-tIUc3pVMRzFM.roa (raw, json)
Hash identifier: YFX4QKwiW1ZPCSDnDCddfdcV21JD7p6WMpYuwScaY+g=
Subject key identifier: FF:45:F1:65:1A:70:28:32:16:6B:FF:AD:21:47:37:A5:53:11:CC:53
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7B5B65E0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_0XxZRpwKDIWa_-tIUc3pVMRzFM.roa
Signing time: Fri 15 Apr 2022 00:11:22 +0000
ROA not before: Fri 15 Apr 2022 00:11:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2069587424 (0x7b5b65e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 15 00:11:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ff45f1651a702832166bffad214737a55311cc53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0e:98:51:f9:ad:28:c3:47:9b:74:9d:d8:27:
e1:cd:0f:51:be:ab:19:a1:8a:8a:e4:43:73:84:a6:
18:00:90:b1:73:04:35:88:b2:39:f7:5b:64:73:96:
7c:02:a0:b6:9c:48:0a:2d:38:49:9f:1d:22:02:05:
67:a9:38:d0:61:3a:40:ec:59:5f:b2:87:47:b7:4b:
ca:af:85:97:aa:af:3e:8c:a2:54:8c:ef:75:ce:49:
fe:ba:fa:58:6a:a4:1c:4d:42:18:2b:db:86:95:d8:
0e:82:d8:31:72:0b:92:26:ef:e1:36:5a:27:70:0b:
c5:68:23:3d:55:59:ed:86:3a:b6:d0:86:0d:bb:23:
f0:ac:15:8e:84:f7:32:df:9a:c5:14:ad:39:1c:ae:
7e:73:8b:ff:84:90:e0:3e:b4:8c:fa:48:37:04:a0:
ae:81:27:44:0e:5d:ee:0d:59:05:9f:f3:24:9d:9e:
74:00:37:cf:32:e8:48:95:f4:97:4b:0d:22:ff:84:
0a:81:46:ca:6e:15:f2:51:79:87:b5:f2:8a:77:d0:
70:41:15:29:67:3f:e0:98:ce:c5:da:b3:db:78:e2:
57:7f:61:df:cd:f5:1a:db:2a:91:d8:60:4e:98:28:
d1:10:bc:30:48:72:b9:53:7b:97:f0:d0:ea:58:b1:
04:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:45:F1:65:1A:70:28:32:16:6B:FF:AD:21:47:37:A5:53:11:CC:53
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_0XxZRpwKDIWa_-tIUc3pVMRzFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
87:6c:4f:ce:12:05:0d:69:1a:94:39:6f:02:54:0c:15:d3:57:
39:4f:96:21:d5:3b:8d:ac:50:aa:07:58:ea:8d:c8:43:9b:5e:
f4:17:2d:47:2c:a7:86:fd:e0:70:ce:16:d8:64:1b:61:23:e3:
1f:19:8a:1e:5c:3b:2f:0a:86:45:4c:b3:88:2e:8a:de:ed:a7:
b2:1d:3d:b9:19:54:95:ae:b6:9b:68:bf:ff:47:38:24:bc:87:
9d:dc:5c:3c:18:ec:37:ff:e7:9f:05:74:1b:b7:0d:e0:91:d5:
9d:3b:12:f7:87:48:7d:65:40:ca:ad:31:2a:b9:ed:4c:97:8d:
a3:bd:90:07:f8:ec:60:be:59:63:e9:d7:b8:53:77:30:f2:1b:
a5:c1:29:95:bc:6b:24:dc:22:25:59:e6:4d:3b:b7:96:d3:e0:
46:30:37:d8:05:cb:e3:5a:7e:56:f4:14:a0:17:af:f4:70:d3:
2b:51:5a:40:4c:17:67:b8:da:1e:72:d0:2f:39:3b:cb:43:75:
4f:f5:d0:a0:fc:38:6a:b5:e3:f5:85:76:0b:3f:6c:7d:ae:05:
09:11:9e:f5:f8:5e:4a:57:01:d6:7e:8f:26:71:8c:c5:98:9b:
ea:53:91:9a:0e:81:7c:c4:5a:d5:c5:e6:b5:e7:f8:91:03:d8:
a3:a1:f9:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:55:40 2025 by rpki-client