Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_58jVm97_iHpTLD6G-x_MenyZ7E.roa
File: _58jVm97_iHpTLD6G-x_MenyZ7E.roa (raw, json)
Hash identifier: I1zPp42bJLMYO6n+zfxjE5AJ0bPhD+RTNnzvFuMMscw=
Subject key identifier: FF:9F:23:56:6F:7B:FE:21:E9:4C:B0:FA:1B:EC:7F:31:E9:F2:67:B1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 90C62607
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_58jVm97_iHpTLD6G-x_MenyZ7E.roa
Signing time: Wed 29 Jun 2022 03:11:02 +0000
ROA not before: Wed 29 Jun 2022 03:11:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2428904967 (0x90c62607)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 29 03:11:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ff9f23566f7bfe21e94cb0fa1bec7f31e9f267b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4a:ae:f8:fa:c1:d6:8b:8e:44:c5:69:dd:c2:
e9:a1:bd:b1:6f:3b:b7:12:19:6c:3b:ee:4d:87:3f:
f8:3d:ba:17:59:ac:bc:4f:bc:62:06:c9:15:58:ef:
2b:91:0a:65:5d:2f:e4:3c:12:45:73:c4:e1:b5:be:
14:f5:6b:38:02:f9:ee:fd:da:e5:cc:a7:b3:c6:cb:
4a:4f:08:d7:21:44:91:1d:76:38:b2:8f:c1:d3:fc:
9a:3f:c2:0e:9c:29:37:08:0e:4c:80:0a:3d:ff:62:
0e:c5:ba:55:94:81:5c:46:3a:95:09:ee:a1:eb:c5:
83:49:34:65:d4:30:21:67:93:bb:07:c3:30:4c:83:
1c:95:46:dc:d7:09:01:e8:52:00:a7:d5:c8:cb:1d:
42:b1:78:1e:c5:e2:30:c4:bf:90:9c:49:98:ea:ac:
18:03:f6:9f:4e:f5:5e:1c:b0:1c:5d:44:70:07:5f:
9d:c9:8f:af:8e:7d:56:e0:35:e3:8b:8e:4b:2e:64:
23:5e:08:8d:d0:7f:6f:ea:20:6b:ad:02:1d:bb:8c:
9f:74:bf:a4:6b:44:9a:8b:0d:44:66:e5:9e:21:86:
97:ba:40:c4:9e:e1:cf:34:04:a7:6a:4c:60:86:af:
06:3d:a0:c1:fc:00:15:b6:b1:30:c7:f1:94:ea:da:
db:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:9F:23:56:6F:7B:FE:21:E9:4C:B0:FA:1B:EC:7F:31:E9:F2:67:B1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_58jVm97_iHpTLD6G-x_MenyZ7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
10:57:39:38:1c:1d:4e:28:02:4e:c5:de:2d:66:f6:b3:b7:f4:
cf:22:53:9d:8a:c6:e7:02:67:c6:78:51:e0:6f:1c:91:9b:6e:
db:26:41:8a:fc:4f:8c:f7:d0:57:2b:d4:5e:d2:66:72:81:cb:
15:8b:ff:1e:33:5c:ca:d0:16:8e:04:1d:ad:61:45:1a:24:92:
be:19:91:6b:a5:b6:61:ae:ed:5b:f7:2f:fe:b6:92:db:6b:b1:
74:df:1b:5e:ce:45:3f:9b:fd:67:ae:09:5c:09:5c:2d:45:f6:
b1:55:a2:c8:4a:a6:91:bc:6c:e9:e4:4d:c0:17:5c:fb:9e:90:
71:df:eb:99:5a:9e:51:2e:1c:fd:33:77:82:4e:19:8f:58:c8:
82:83:7b:fd:bd:13:93:bc:45:98:1d:6a:5a:4a:67:be:c7:df:
97:31:79:66:2e:45:2d:fa:7c:23:f8:77:09:d1:40:51:a9:f3:
74:c4:01:8a:64:9e:cf:d8:61:71:eb:cf:1f:b0:0a:c2:92:4d:
56:36:3c:06:57:2e:1e:76:7d:60:6f:ac:dd:1f:3c:c2:7f:cc:
85:ae:75:2b:41:b5:02:74:27:48:58:76:59:3f:2c:02:f5:71:
35:3e:3a:0c:60:1a:8f:c8:b0:1e:b8:76:50:2e:b3:ca:3e:fc:
3c:c5:ea:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:37:13 2025 by rpki-client