Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aUJsWq9J1OPqiCcPeFwFK88OjSA.roa
File: aUJsWq9J1OPqiCcPeFwFK88OjSA.roa (raw, json)
Hash identifier: fY/M1zBNlPb3cUxH84i6VlHlM+oMqULTa5j0RSplJmQ=
Subject key identifier: 69:42:6C:5A:AF:49:D4:E3:EA:88:27:0F:78:5C:05:2B:CF:0E:8D:20
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01851CFD382BDF667A78CB85E28CD4C8C4EF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aUJsWq9J1OPqiCcPeFwFK88OjSA.roa
Signing time: Fri 16 Dec 2022 22:10:35 +0000
ROA not before: Fri 16 Dec 2022 22:10:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:1c:fd:38:2b:df:66:7a:78:cb:85:e2:8c:d4:c8:c4:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 16 22:10:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=69426c5aaf49d4e3ea88270f785c052bcf0e8d20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6d:92:d3:c8:69:c8:ab:c3:6a:19:d9:e2:b4:
8c:12:ea:cd:c9:d0:00:fe:0b:8c:80:45:0d:ef:d7:
77:11:c5:c2:1f:f2:fa:7e:a8:26:9b:35:00:44:2a:
55:ae:c8:ad:be:3b:fd:08:d5:79:43:d2:77:50:d8:
90:27:ca:c5:6b:5a:37:18:de:bf:1c:db:67:e9:18:
14:f1:89:3a:8e:76:4f:d2:90:2a:d1:d6:45:69:a5:
56:54:dc:64:2b:d5:d5:02:28:ee:e5:3a:ec:ac:31:
e7:e3:f5:14:8e:0d:8a:b1:29:ff:7d:8f:2d:f0:d3:
df:49:bb:dc:bb:30:27:6b:32:4c:bc:f4:83:5c:f6:
02:9a:9d:d2:ad:4f:b2:a4:fd:3f:60:56:70:71:06:
cd:84:9e:94:55:fe:50:7e:0f:db:bc:d6:83:c8:7a:
f3:e2:f4:7e:e5:f3:d2:7b:ab:b2:5b:5c:ac:fe:9b:
71:50:83:6e:ee:7c:21:06:7d:2d:09:00:74:3b:17:
95:32:59:93:89:35:1d:2f:89:7c:87:ac:5c:25:70:
ba:c3:01:32:66:4a:fd:42:01:0c:ff:b0:ce:92:b2:
c6:21:db:03:79:b2:ee:72:6b:53:5d:d1:e3:d2:76:
2e:aa:dc:0c:34:b8:60:08:d1:08:63:e4:0e:ab:b1:
8c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:42:6C:5A:AF:49:D4:E3:EA:88:27:0F:78:5C:05:2B:CF:0E:8D:20
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aUJsWq9J1OPqiCcPeFwFK88OjSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
26:68:28:69:11:f3:61:ff:b3:2a:01:1d:6a:03:ae:5e:67:a4:
f1:5e:39:c2:26:dc:90:89:4d:a9:64:7e:b3:07:27:4d:ce:d3:
df:7b:2a:8e:22:f1:42:f8:a6:b7:70:28:bf:cd:d6:4d:f7:c5:
3e:09:1d:6c:af:55:57:cd:9b:18:7e:f1:e3:cc:65:b4:4d:fd:
5c:e8:a9:0e:04:de:2c:54:cc:08:93:6b:64:13:19:16:35:4f:
bb:30:53:f5:15:ee:c7:58:cb:27:5e:5b:60:7e:07:43:95:3c:
e9:00:0d:f4:5a:aa:cb:b6:7f:29:a0:77:2a:a3:06:b1:2d:e8:
e9:d5:c0:07:9c:f3:47:e0:a3:92:7c:1b:2c:58:fb:73:f3:3d:
cf:d0:aa:31:d6:38:78:0c:25:92:c5:48:c6:fe:18:7d:f2:e1:
5a:6f:6a:ac:b8:6f:2b:17:c3:cb:b5:8f:1c:5c:e5:28:49:18:
b4:b9:22:80:0c:4a:1d:40:a2:6b:1e:f0:a6:83:41:f5:08:e1:
f2:22:38:d5:23:04:1c:f1:db:e8:b8:ec:4b:22:7f:f2:8d:be:
7d:3e:ee:57:3b:26:8c:6c:fa:31:2d:f0:78:a8:0b:06:71:df:
c3:81:14:36:ca:fb:d2:bd:e0:ab:09:4c:20:90:3b:94:c0:f4:
9d:a4:2b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:35:49 2025 by rpki-client