Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_eDkfOIftXiYPgPSUZoWehiyPDI.roa
File: _eDkfOIftXiYPgPSUZoWehiyPDI.roa (raw, json)
Hash identifier: 6Wev+izTFNBbF0ygKQ5d+g57H6F79pLvMNoeWIGh+WI=
Subject key identifier: FD:E0:E4:7C:E2:1F:B5:78:98:3E:03:D2:51:9A:16:7A:18:B2:3C:32
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01845206BCBA8E7C4A784233AD53E602B4F7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_eDkfOIftXiYPgPSUZoWehiyPDI.roa
Signing time: Mon 07 Nov 2022 12:18:03 +0000
ROA not before: Mon 07 Nov 2022 12:18:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:51c3:ad7c/128 maxlen: 128
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:52:06:bc:ba:8e:7c:4a:78:42:33:ad:53:e6:02:b4:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 7 12:18:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fde0e47ce21fb578983e03d2519a167a18b23c32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:e4:39:96:a8:13:33:b5:72:e7:c9:06:fa:a2:
9e:a6:31:4b:8c:bc:f1:57:f4:d1:33:e8:c9:d7:ef:
eb:ec:26:e3:11:1d:fa:a5:4a:d4:6e:5f:c7:1c:6d:
06:61:8f:b3:e5:a6:4f:43:04:37:79:4f:6b:ad:a3:
54:ef:1f:b5:64:f2:a5:6d:44:d0:ff:b6:54:1d:cd:
4e:2f:54:ae:2f:d2:04:f4:c0:7e:5d:61:f1:d7:b7:
51:af:21:75:46:a7:a4:8a:a1:23:28:37:36:c3:9d:
3b:c3:64:52:c0:78:e5:b8:72:e6:50:f3:2d:3f:29:
0c:8e:4f:bb:74:0a:6b:2b:3f:49:a0:a3:49:7e:ee:
7c:53:12:c1:2b:0a:a7:54:fa:a5:b8:56:2a:46:bd:
f6:72:97:fd:f9:2d:03:9d:fb:98:dc:88:cc:04:b9:
b5:0c:3a:72:ff:85:8d:de:69:98:ba:e3:73:fd:b0:
a9:ef:5c:7f:be:ae:e5:86:2a:86:b3:0a:56:a6:98:
78:cd:5a:1f:17:22:0c:15:86:68:f5:da:f7:08:43:
14:3c:d3:18:c7:4d:ef:4d:8f:b6:79:8a:94:55:c7:
f5:2e:72:b7:d1:bf:4d:4c:05:58:07:aa:8e:49:23:
fd:4c:07:ca:fc:d0:42:37:78:e8:05:c8:f7:e1:ab:
36:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:E0:E4:7C:E2:1F:B5:78:98:3E:03:D2:51:9A:16:7A:18:B2:3C:32
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_eDkfOIftXiYPgPSUZoWehiyPDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a9:d6:01:fd:7d:02:33:96:76:63:63:cd:9a:ce:fe:dd:ce:7f:
21:b2:6b:94:e0:7c:63:3a:e1:6f:c7:8b:d2:50:cd:9e:0e:7a:
22:e5:ad:e7:23:7e:64:d1:5c:e2:85:47:9a:f4:4a:8c:b4:10:
3c:d8:44:10:7e:59:a7:70:1c:36:47:86:c3:ad:34:3f:e1:a0:
fb:9d:a9:fb:41:87:63:48:d2:72:a1:fe:17:cb:fb:e3:58:49:
6b:62:8b:a4:e6:66:1f:94:c3:da:4c:14:14:04:0b:08:d8:72:
4c:fd:a8:52:c0:18:17:f5:89:1a:a4:ec:57:9b:ce:5a:6f:e6:
58:d6:ba:4b:a4:47:c5:b5:67:79:52:1d:f8:ed:3f:c4:c0:6f:
55:69:26:97:dc:1b:54:41:af:74:c9:23:83:29:bd:a3:c9:48:
45:c6:81:79:54:19:79:b3:91:69:ae:fc:fc:18:3a:11:75:43:
8c:5a:d7:f1:12:6c:d0:bc:09:c5:62:58:dc:d6:08:9d:c4:c4:
30:05:45:45:a0:e7:05:a0:b1:39:9c:d7:9d:2c:64:25:5b:54:
fc:f7:fc:83:f1:1c:77:64:88:e8:f6:c1:43:4b:9c:fa:2e:da:
94:66:69:c4:73:ed:97:95:3f:fa:b7:3b:5e:95:15:9c:a5:4c:
90:49:0e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:46:40 2025 by rpki-client