Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aNJ40xfXGforQCGnYBM9rvYOOJg.roa
File: aNJ40xfXGforQCGnYBM9rvYOOJg.roa (raw, json)
Hash identifier: Dwkggls7yJMoaDIJAjwBRiYmKQMztTHOzxpwcdCrThY=
Subject key identifier: 68:D2:78:D3:17:D7:19:FA:2B:40:21:A7:60:13:3D:AE:F6:0E:38:98
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01822006DD64C96A136B50FA5F03B9588840
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aNJ40xfXGforQCGnYBM9rvYOOJg.roa
Signing time: Thu 21 Jul 2022 09:11:36 +0000
ROA not before: Thu 21 Jul 2022 09:11:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:20:06:dd:64:c9:6a:13:6b:50:fa:5f:03:b9:58:88:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 21 09:11:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=68d278d317d719fa2b4021a760133daef60e3898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:36:1c:58:a0:70:a0:b3:f1:17:a6:59:17:b5:
e7:53:6d:7b:ae:f9:14:ed:08:2b:28:f3:30:80:b9:
9b:5f:05:e1:50:f3:55:0e:1b:be:36:1d:a0:f3:76:
57:97:ff:26:0e:9e:08:ef:33:66:93:8d:69:11:05:
2c:17:ed:6b:3b:27:6c:3e:f7:15:a1:3b:2e:07:94:
dc:8d:13:ee:ed:cd:4b:0b:44:29:86:90:a6:3e:f8:
f6:e9:b4:2e:52:24:20:40:8f:c9:28:f9:04:41:e3:
7b:5a:c8:a0:84:45:6f:c2:46:a6:03:91:ac:e9:78:
7f:d7:d4:b6:4f:85:ac:9c:5c:7c:3e:1b:82:ef:3d:
53:ad:2c:e0:75:0c:7e:92:b6:cc:37:4d:9d:61:05:
02:c2:4f:51:52:6c:a2:a7:d2:ea:eb:93:fd:1d:15:
85:e2:5c:cc:0c:65:8b:ee:9a:0e:02:f1:36:57:78:
c0:67:cd:95:61:22:32:55:5d:c6:79:2b:9c:e4:34:
d6:a3:18:85:8d:73:a1:d0:7c:40:4f:8a:61:c7:09:
d1:a8:03:ab:eb:b3:bc:28:cc:15:00:16:bc:ff:05:
f8:2e:50:bc:24:00:9b:e7:d2:60:21:47:79:a2:b7:
0d:82:20:c1:ec:7c:fe:12:d0:6d:08:4a:a4:f7:b9:
3c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:D2:78:D3:17:D7:19:FA:2B:40:21:A7:60:13:3D:AE:F6:0E:38:98
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aNJ40xfXGforQCGnYBM9rvYOOJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
25:3b:2d:02:53:98:f7:29:48:dc:90:d6:eb:5c:92:4b:15:05:
65:c3:8c:63:f2:d6:eb:be:2f:a5:59:4e:f2:f8:40:b6:68:3c:
fb:3c:2a:a0:a7:b4:2c:0e:1b:1b:b9:e2:de:58:2e:4a:5f:fc:
16:b9:92:ba:c8:f6:6e:80:12:2f:7d:2a:45:c6:5c:3c:f4:95:
1c:ec:6f:f1:ce:6c:1d:91:de:12:f7:d4:12:5a:da:25:78:81:
43:ad:5d:d3:ea:0e:4b:f2:de:73:2f:da:e0:cc:88:b4:80:fb:
7c:65:47:ed:64:84:44:b3:6b:00:db:69:7d:e3:13:b2:be:24:
95:fd:de:50:00:1c:90:e8:11:aa:4c:82:06:ff:14:1c:ca:a1:
8e:2a:b6:e3:b5:fd:53:c3:cc:84:2a:13:bd:ea:b8:5e:40:03:
36:f0:1b:1e:0c:a3:c4:ff:39:72:fd:4e:d1:9a:10:ae:d0:87:
6c:19:76:8d:79:48:7d:49:c6:c2:6a:73:6d:92:8f:0b:b1:c7:
4e:90:58:60:02:11:b1:87:bd:ee:44:59:12:bb:4e:b9:58:a4:
c7:13:58:29:b1:40:77:20:06:f6:8b:fa:ed:1d:4f:56:e4:6a:
70:b7:3e:f9:d7:1e:25:03:ea:03:27:0f:fe:69:75:88:01:e2:
66:bb:8b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:20:42 2025 by rpki-client