Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_78mlwRO1by1fUVz5f2eh-Q1HBA.roa
File: _78mlwRO1by1fUVz5f2eh-Q1HBA.roa (raw, json)
Hash identifier: wMth61WlLsQgTcSAwx96JrXPVgJOhUf1luUPFCSqSm8=
Subject key identifier: FF:BF:26:97:04:4E:D5:BC:B5:7D:45:73:E5:FD:9E:87:E4:35:1C:10
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01826031F62A5B9D69F92AD3111D89EC8111
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_78mlwRO1by1fUVz5f2eh-Q1HBA.roa
Signing time: Tue 02 Aug 2022 20:14:23 +0000
ROA not before: Tue 02 Aug 2022 20:14:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:60:31:f6:2a:5b:9d:69:f9:2a:d3:11:1d:89:ec:81:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 2 20:14:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ffbf2697044ed5bcb57d4573e5fd9e87e4351c10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:21:53:d6:e3:38:c1:e1:7f:87:50:00:05:b7:
ae:c9:e2:99:7b:09:49:6f:92:fe:c2:a7:eb:55:cd:
3b:f2:63:85:4a:2e:3a:8a:fd:43:e7:97:a8:bd:9d:
ff:5e:2a:82:aa:07:96:71:7b:3e:fd:ec:fe:f7:74:
77:72:ec:ca:44:31:7d:05:4a:a1:a3:2f:ac:48:85:
e6:94:85:e5:d2:66:54:87:2a:95:e3:cb:23:4e:f6:
7f:66:50:10:b2:4d:af:44:a6:80:51:a3:6e:6e:3c:
18:7c:25:74:d4:c1:f1:c3:e9:64:9e:76:63:a7:31:
0a:83:54:19:ff:56:3a:fb:92:f3:b4:dc:12:c0:c6:
af:37:f8:2e:97:43:55:4f:df:64:90:f6:27:7b:47:
71:df:16:11:50:49:bd:2e:fb:cf:47:ba:35:8f:da:
37:b3:7b:f5:b3:27:51:fc:a7:1f:bf:4b:57:19:f7:
55:46:dd:e8:e3:02:00:fe:3b:9d:e6:90:35:31:96:
dc:c7:3f:74:b0:fd:31:26:a0:54:e4:d6:c2:a4:cd:
5b:ea:9d:d1:5f:1f:97:20:0d:d1:f0:9c:d3:e9:9f:
5d:da:c8:ac:65:e5:72:d0:c9:75:62:59:b9:c5:c9:
43:5b:4e:7d:60:83:94:de:7b:04:b3:56:e8:07:c5:
eb:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:BF:26:97:04:4E:D5:BC:B5:7D:45:73:E5:FD:9E:87:E4:35:1C:10
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_78mlwRO1by1fUVz5f2eh-Q1HBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
85:42:07:ed:39:0b:21:4a:f3:f9:77:ed:dd:78:27:d6:96:bd:
a4:40:c6:24:b4:4d:29:0a:b7:83:87:60:00:95:d5:11:81:f5:
c6:93:09:21:f0:3b:71:71:47:d9:5d:dc:99:fa:8f:b0:43:46:
bd:32:cb:5a:c3:ac:c3:64:e7:47:d1:4d:d6:28:4f:58:03:b8:
c4:17:61:bc:35:88:be:7e:bf:8c:7c:2b:cd:60:52:d5:b6:bd:
90:df:89:ea:30:e2:5e:6f:b7:4d:87:2e:e7:58:5a:f9:1c:c3:
a9:54:db:6e:d0:71:f6:85:7a:3d:ab:30:0e:80:0d:87:da:f0:
f3:ad:50:a4:6d:fb:42:ef:85:41:fe:aa:34:3b:21:99:d9:91:
49:6b:35:58:09:1a:b3:2b:4c:8a:b1:dc:b9:23:7b:9e:d4:83:
ac:c7:c0:d5:90:cc:30:d3:ae:79:7f:ed:7e:ac:12:e0:cd:81:
2f:1e:4b:72:5d:5e:29:9a:f1:da:86:b5:b0:b0:74:6d:25:bd:
72:a1:d8:52:1b:21:04:4e:0f:20:ae:0a:8d:9c:25:1a:e5:8b:
6b:bc:6f:a3:6b:28:32:30:5a:11:8f:9a:30:85:99:ba:62:a7:
f5:2b:3a:76:f7:43:b3:91:96:d9:d1:4f:d5:0a:a7:da:40:2f:
9a:67:57:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 17:30:47 2025 by rpki-client