Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_DDjjwalLl2q8r8IQLojgEu3hxk.roa
File: _DDjjwalLl2q8r8IQLojgEu3hxk.roa (raw, json)
Hash identifier: 5eeDbWvSj32voV9nqDCCeuPGnAtCeh/OwRqTR5HdeOA=
Subject key identifier: FC:30:E3:8F:06:A5:2E:5D:AA:F2:BF:08:40:BA:23:80:4B:B7:87:19
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0181FF30FF0B0B15D82BF3BCC11BC46FFF29
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_DDjjwalLl2q8r8IQLojgEu3hxk.roa
Signing time: Fri 15 Jul 2022 00:10:09 +0000
ROA not before: Fri 15 Jul 2022 00:10:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:ff:30:ff:0b:0b:15:d8:2b:f3:bc:c1:1b:c4:6f:ff:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 15 00:10:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fc30e38f06a52e5daaf2bf0840ba23804bb78719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:38:94:0d:04:b9:25:26:1a:28:e3:ff:f4:6a:
41:32:83:76:b6:db:dd:7f:9f:1e:37:7c:9c:22:51:
41:40:f7:dc:5d:2d:fd:61:9a:8a:c7:84:59:81:4f:
a5:13:25:9b:1c:7d:47:b9:8d:fe:80:4e:4b:9c:e1:
1a:98:bb:78:10:c9:15:61:ff:b9:c7:25:a8:eb:0a:
10:67:cd:b1:7d:35:a3:f9:ae:42:64:36:07:b9:32:
26:d8:0f:82:f7:fc:41:86:52:fa:f3:3e:5f:48:bc:
eb:9f:d3:24:94:4d:6e:d5:50:06:73:a3:07:6e:2e:
26:a2:ff:28:00:1b:cf:b6:06:87:a9:98:1e:a0:53:
96:79:20:78:d6:31:e0:3f:fc:a6:8e:2d:a0:f8:03:
8a:25:48:fa:40:fb:48:76:d2:e7:f3:43:5a:c5:99:
c0:e5:d7:02:66:ef:c6:ff:c5:59:b4:e4:70:ad:43:
d3:1a:40:9f:97:22:79:2f:82:1b:74:a1:67:5c:45:
72:51:5a:86:ef:d2:47:2e:a9:2c:25:2a:a1:b3:73:
7b:1a:ba:c1:2a:e3:5b:35:78:78:01:fb:0c:98:62:
f1:b4:d4:9c:00:5d:fe:15:47:63:84:ad:64:42:62:
be:c6:1f:b5:8a:9d:f6:56:99:cc:e6:b9:26:a4:04:
7b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:30:E3:8F:06:A5:2E:5D:AA:F2:BF:08:40:BA:23:80:4B:B7:87:19
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_DDjjwalLl2q8r8IQLojgEu3hxk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
74:51:e6:b0:c1:7b:03:9e:89:a2:47:81:2d:cb:39:d0:d1:9c:
af:7a:2a:6c:2f:85:3d:46:b4:31:73:2a:e8:a3:0c:8d:1b:f6:
34:c2:d1:44:28:4b:ec:6a:94:49:f8:00:07:02:08:48:23:6e:
dd:20:81:eb:37:f6:a4:f1:fb:0a:8b:81:1b:4d:b8:fc:98:1d:
e2:3a:17:21:c4:f5:03:b7:3e:35:e1:2e:e4:1f:5d:38:4d:55:
c8:2f:47:98:47:70:be:bd:7a:88:93:3e:73:5a:3e:b6:97:83:
b2:bc:47:77:41:24:26:20:7a:f5:50:e6:24:24:f9:cd:3f:d9:
c1:92:ef:f9:f6:bc:5f:8f:e3:b3:2c:52:1f:68:f1:5b:51:dc:
57:0c:c9:b8:92:83:e4:1b:ed:ff:65:99:0f:56:02:d9:c9:3d:
79:e4:e5:a2:3f:b9:09:97:5e:2a:57:09:ab:38:c1:26:89:15:
5a:e4:58:a9:57:a1:d4:12:b8:a3:67:e5:1c:2e:ce:49:86:c6:
4a:74:a7:0d:a0:48:93:a5:4b:f2:50:aa:66:b8:48:46:0f:18:
5a:4f:95:ba:35:ec:44:b6:b1:58:cb:55:08:39:48:dc:95:b2:
57:83:b8:c2:a8:a5:ba:79:60:7b:76:a1:81:fc:34:6a:c8:99:
9e:87:f7:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:47:28 2025 by rpki-client