Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_X06rcVlMVQ5RY2IuALpGT-GhQ0.roa
File: _X06rcVlMVQ5RY2IuALpGT-GhQ0.roa (raw, json)
Hash identifier: GykGcRLV9SKhUr2vBIplr52xcmtlxZDJp1xL4E8qqgQ=
Subject key identifier: FD:7D:3A:AD:C5:65:31:54:39:45:8D:88:B8:02:E9:19:3F:86:85:0D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7512F95A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_X06rcVlMVQ5RY2IuALpGT-GhQ0.roa
Signing time: Wed 23 Mar 2022 16:09:30 +0000
ROA not before: Wed 23 Mar 2022 16:09:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1964177754 (0x7512f95a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 23 16:09:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fd7d3aadc565315439458d88b802e9193f86850d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d6:1a:86:13:e5:c1:c6:d8:88:7e:30:50:9f:
9c:99:90:ef:8a:d5:6a:16:a2:40:e8:bb:e2:eb:a1:
f0:68:36:69:bf:4c:cc:a6:b2:0f:b4:93:0e:c5:8e:
35:e6:f3:63:40:10:60:88:f4:72:97:7b:b6:fc:d1:
6c:d0:b2:e0:80:29:7d:5a:e9:07:52:96:45:b4:34:
29:b6:ee:44:6a:de:69:9c:05:c9:62:ca:04:38:62:
82:5e:07:2b:2c:d7:2b:0c:23:22:13:64:b8:49:81:
6a:34:96:d7:80:7d:ba:28:91:cf:37:08:ea:41:74:
35:43:68:ea:ae:ab:02:ab:1e:bf:b9:4c:22:58:aa:
1c:90:cc:3a:af:f4:77:09:79:50:95:7f:5f:14:09:
7a:0a:72:a0:6d:cc:0c:4a:2b:c2:3c:31:57:bd:b9:
df:cc:ba:36:a9:b5:80:cf:92:7d:33:ca:52:d7:48:
a0:34:6c:15:2e:83:a2:12:32:b4:94:a5:47:4f:ac:
8f:b9:59:cd:0e:0e:08:56:b3:30:31:27:f6:9d:3a:
79:63:a7:5a:df:13:44:ea:34:99:ba:25:97:9d:2f:
ff:85:ae:fb:c9:9a:69:a3:cf:46:3d:28:e7:aa:5d:
77:ca:39:76:f3:a0:da:64:d3:eb:83:de:fb:2a:97:
fa:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:7D:3A:AD:C5:65:31:54:39:45:8D:88:B8:02:E9:19:3F:86:85:0D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_X06rcVlMVQ5RY2IuALpGT-GhQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
70:16:70:dd:90:b0:86:90:c3:4d:fb:3d:d4:d0:ed:59:8f:dc:
d0:8c:3e:8b:12:29:46:62:09:33:aa:a9:0e:6b:1f:98:cb:5f:
70:a3:2d:09:97:2c:d5:4f:03:b2:86:9e:dc:e9:a0:38:af:f1:
c8:13:97:83:78:7a:3b:7d:75:2e:63:87:5f:85:91:3c:94:cd:
c1:cc:64:08:71:3b:7b:01:dd:05:dc:14:63:40:0c:79:99:cb:
53:60:55:61:06:2e:e5:2e:a6:34:ec:ad:19:0d:23:b2:92:aa:
20:a5:24:bc:26:2d:7b:b6:c7:97:9b:65:8b:8d:55:29:04:a2:
58:11:2a:1b:3b:27:3f:13:c3:3e:be:20:cd:36:7a:d8:4a:7d:
28:aa:a9:b2:65:48:58:f6:56:82:ad:88:9d:38:d3:68:4a:37:
78:70:13:28:30:6d:70:2e:5f:27:68:2a:d6:4a:e3:ec:25:1a:
06:5f:5a:1f:ce:99:c4:56:9f:6e:95:56:44:62:81:3d:f9:5a:
0b:c6:0f:0e:2b:f3:05:56:c2:5b:21:42:61:f3:b9:9e:c5:8e:
6a:89:33:4a:63:05:d3:3f:c8:e7:54:3d:9f:f5:3d:e2:5c:d7:
7f:49:b1:ee:f9:14:f9:49:c1:f4:fa:a7:34:ad:e6:f0:3b:da:
d5:9e:a6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 15:56:47 2025 by rpki-client