Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_kgoMmiHIuJDpgZu4D5hMm5I9oo.roa
File: _kgoMmiHIuJDpgZu4D5hMm5I9oo.roa (raw, json)
Hash identifier: XwPoIxf7X9bMC32HVS3LPH3v+fZ/m60pzdPtvtDjS0U=
Subject key identifier: FE:48:28:32:68:87:22:E2:43:A6:06:6E:E0:3E:61:32:6E:48:F6:8A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018522908732A038BFD60EDAC9DE0755B515
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_kgoMmiHIuJDpgZu4D5hMm5I9oo.roa
Signing time: Sun 18 Dec 2022 00:09:35 +0000
ROA not before: Sun 18 Dec 2022 00:09:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:22:90:87:32:a0:38:bf:d6:0e:da:c9:de:07:55:b5:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 18 00:09:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fe482832688722e243a6066ee03e61326e48f68a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:22:bd:4e:cb:c7:6e:09:1f:79:9f:ef:e7:d4:
1d:42:02:11:70:0d:b3:a3:38:74:83:ca:4a:1f:ef:
cc:e9:83:51:81:af:31:7d:4d:2c:e6:2c:2f:20:f6:
d0:cf:00:d2:ab:0a:ba:41:fb:d5:42:e5:b4:bd:fb:
f0:69:d8:e8:f0:f3:bb:b7:13:5f:17:ea:fc:08:18:
c6:01:56:e4:19:ac:62:b7:b4:17:1c:9d:74:be:33:
36:6c:7d:5b:31:52:5d:87:d9:a0:0c:33:11:e7:d4:
92:31:b3:ae:5c:60:6d:2c:ab:98:b9:64:51:5d:40:
3d:2e:37:48:cc:25:aa:3d:d4:ce:02:e6:fc:72:1e:
00:db:2e:cd:3b:77:be:0c:db:bb:7d:79:09:c6:36:
bf:48:d5:4a:6d:cc:b4:90:2d:68:fe:12:8a:74:4f:
47:b3:4d:36:3d:b8:60:3d:9d:de:f2:d1:aa:6d:ca:
c9:a5:9e:7f:fc:cd:e4:62:82:c6:f3:ee:97:4e:aa:
79:4d:f3:0c:9d:3b:54:38:a7:d6:9f:26:5e:24:e0:
f1:b0:61:ed:ee:b5:e8:35:c0:16:46:7f:b6:97:b9:
f0:6e:3a:96:41:8c:2a:6e:94:83:43:e0:6d:38:04:
65:aa:60:d4:c3:88:b8:3e:94:31:2b:2d:0a:2b:68:
76:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:48:28:32:68:87:22:E2:43:A6:06:6E:E0:3E:61:32:6E:48:F6:8A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_kgoMmiHIuJDpgZu4D5hMm5I9oo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
72:3a:2c:5e:d0:e8:a2:bf:db:8d:6c:df:9b:76:fb:67:66:73:
42:ed:3c:4b:1c:5d:25:b8:03:d0:99:59:9e:98:c9:af:04:51:
4e:ef:5e:3e:17:3b:cf:03:2c:81:36:3a:95:ac:c1:62:c1:3e:
79:92:3a:f5:04:7c:c6:50:26:be:8f:f8:a3:59:c3:b1:d0:51:
24:ee:05:c6:b7:6f:bd:9e:95:2c:a6:18:14:a5:98:e3:10:94:
ea:f9:9a:84:94:df:4e:ad:d0:7b:2a:eb:98:3e:7e:85:e8:9d:
3e:32:7c:95:76:e3:02:83:01:9a:83:23:dc:b2:5f:89:ed:be:
c6:fa:6a:7d:f9:05:a6:60:e4:be:d2:24:5c:17:a0:40:a7:fa:
02:3a:6e:5e:9d:3d:d3:db:06:81:ee:c6:9e:05:85:bf:f2:f9:
9a:45:18:73:53:09:2f:13:d1:26:1c:49:5b:66:2a:28:ef:ac:
19:c7:83:b6:4e:f5:da:0d:59:88:42:a1:7d:87:f8:5b:bc:47:
08:f5:97:48:d8:bf:b6:ed:93:15:85:b6:0f:58:00:30:e6:f5:
9a:50:76:12:56:59:5e:f6:a4:c8:b5:8e:b9:76:0f:82:b1:b2:
af:34:ed:b7:f9:22:e8:6b:1f:7c:4d:3b:ba:48:a4:6d:6b:46:
a8:0e:5f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:42:20 2025 by rpki-client