Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aNtyznf99VouJP-CSwj9KkGeVcQ.roa
File: aNtyznf99VouJP-CSwj9KkGeVcQ.roa (raw, json)
Hash identifier: FWjGoc4AYH7V6OAegq+bx228uKgCX31VDFSLIzIHQX0=
Subject key identifier: 68:DB:72:CE:77:FD:F5:5A:2E:24:FF:82:4B:08:FD:2A:41:9E:55:C4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01844C3B7A22EAD93F923D43F8AEAB42351C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aNtyznf99VouJP-CSwj9KkGeVcQ.roa
Signing time: Sun 06 Nov 2022 09:17:57 +0000
ROA not before: Sun 06 Nov 2022 09:17:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:4c:3b:7a:22:ea:d9:3f:92:3d:43:f8:ae:ab:42:35:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 6 09:17:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=68db72ce77fdf55a2e24ff824b08fd2a419e55c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:28:37:07:0d:ac:88:bb:a5:25:fb:34:31:6f:
4b:bc:1a:c0:e0:84:21:55:71:e3:d5:51:fb:eb:90:
29:53:0a:d8:fb:b1:65:90:f3:29:30:bb:6c:98:58:
a7:49:f2:3a:ee:6c:e0:3d:d3:f0:24:e1:dc:12:d6:
ea:f6:cc:fb:ca:64:7f:17:49:a4:59:2b:8a:3c:bb:
84:70:ee:04:5b:fa:ff:5d:4c:36:b0:17:06:71:a1:
5b:5a:b5:94:23:b8:cc:e4:41:89:df:10:95:8e:52:
24:4b:f5:cd:01:f8:38:1e:ea:d6:bb:87:84:f6:25:
fb:3e:b5:c7:78:b5:91:10:53:f7:5f:92:62:69:96:
7c:64:04:10:fa:0e:1f:88:58:f5:a1:89:51:72:28:
a4:07:de:0c:be:db:d1:fe:98:9e:7c:de:bd:62:ef:
29:07:1e:1c:5e:0b:d4:9d:21:a9:b6:c5:dd:62:a2:
64:bd:93:82:8f:16:a0:bb:de:d3:14:54:5d:2b:eb:
6b:06:5e:6a:df:03:a0:da:8d:d8:5c:97:8b:8e:49:
65:29:7f:22:c4:8a:d2:b3:6e:43:3d:c8:53:02:cf:
b1:f9:a1:f7:72:31:4c:0e:62:c2:57:dc:d7:5a:4a:
d9:54:07:08:a5:04:f3:9f:f6:46:03:4d:a5:15:0c:
8a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:DB:72:CE:77:FD:F5:5A:2E:24:FF:82:4B:08:FD:2A:41:9E:55:C4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aNtyznf99VouJP-CSwj9KkGeVcQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
21:13:2a:95:26:87:0b:05:eb:e5:98:cd:ea:2b:bb:77:2b:f9:
cc:be:d2:99:e7:ff:9c:96:3d:de:cb:d3:2d:bf:c4:75:e8:7f:
40:91:d7:ce:33:81:9e:c3:72:a0:57:c5:1d:35:76:7b:b4:53:
fd:68:9c:3b:99:f8:7a:6d:97:43:e3:70:97:21:7e:9c:b7:aa:
f1:cf:af:55:c9:c9:c5:f0:1b:bc:14:95:9f:63:be:e2:2c:72:
e5:4a:76:65:5f:ce:fd:4c:f6:0e:c0:ff:b9:98:99:c3:25:e0:
86:b9:5a:43:92:1e:0b:41:18:47:12:c8:89:ea:61:cb:62:2e:
60:4c:67:9c:8e:87:fa:3c:99:5d:de:07:40:4d:21:e8:a3:04:
cc:62:14:e2:af:62:03:1b:cf:08:0c:ad:dc:4c:98:db:9d:ae:
8b:94:8d:d1:a3:29:19:36:bd:18:d5:02:0f:8c:99:04:ac:b8:
14:36:fd:8f:6e:b3:8e:b4:b7:13:af:a6:a6:7d:0a:77:05:a8:
f0:2f:d5:05:5c:6c:14:19:17:16:e5:f3:d1:af:3b:3b:b9:1e:
13:59:94:e3:9f:48:80:9d:94:9d:fd:0c:7a:84:b2:bb:38:9f:
95:9c:f5:02:ea:44:d4:dc:21:d4:38:5b:0d:1a:1d:dc:73:30:
20:e9:bd:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:39:15 2025 by rpki-client