Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bL1VkcDSF3F18QqzXRE8Q87MvQM.roa
File: bL1VkcDSF3F18QqzXRE8Q87MvQM.roa (raw, json)
Hash identifier: tqCjJIkxCzkC9KR/sVoEw+MYg8Rr9rRcr0COj5qNd4I=
Subject key identifier: 6C:BD:55:91:C0:D2:17:71:75:F1:0A:B3:5D:11:3C:43:CE:CC:BD:03
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018507BD2244E1980E09B039487CA38BB470
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bL1VkcDSF3F18QqzXRE8Q87MvQM.roa
Signing time: Mon 12 Dec 2022 19:08:33 +0000
ROA not before: Mon 12 Dec 2022 19:08:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:07:bd:22:44:e1:98:0e:09:b0:39:48:7c:a3:8b:b4:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 12 19:08:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6cbd5591c0d2177175f10ab35d113c43ceccbd03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2f:1a:c9:8a:56:6a:5c:0f:f1:68:42:07:af:
a8:7f:8a:7f:28:c8:80:ac:3c:3c:60:ce:1a:1f:1f:
fa:e4:e5:ec:91:06:7b:ef:a6:0b:eb:fb:e7:d0:03:
ae:32:32:aa:74:89:ac:29:48:a2:fa:ff:5f:8a:57:
13:be:32:ce:8c:b6:89:47:bc:64:d6:e9:35:e2:b0:
ec:20:19:b9:72:53:c4:12:00:15:22:19:b8:69:26:
0e:36:fb:35:40:e6:b4:6c:85:4f:9b:83:43:ee:2b:
c0:31:f0:7b:a8:7a:21:94:e1:c4:34:2a:eb:ff:39:
ca:ae:51:24:81:8f:0d:aa:9a:12:48:61:84:5a:04:
45:08:40:88:df:0c:7a:ee:26:58:31:0e:be:29:8a:
c8:0a:5e:9d:45:8b:bb:f0:30:c3:40:2b:94:d5:24:
c5:ce:cc:7f:a2:83:e7:64:fb:84:94:7c:33:3b:29:
53:07:bd:06:a2:a5:e6:27:85:96:c9:c3:5e:3a:72:
b6:8f:e0:b0:00:45:f5:49:1e:24:46:62:7d:51:3e:
37:64:59:af:ce:73:23:4f:d8:e4:59:ac:9a:0b:7e:
0a:ef:8c:ef:7f:4c:e9:a9:32:99:ce:bd:6f:a7:8f:
44:77:80:f2:12:43:9b:5a:b6:1a:a0:7b:93:b9:19:
04:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:BD:55:91:C0:D2:17:71:75:F1:0A:B3:5D:11:3C:43:CE:CC:BD:03
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bL1VkcDSF3F18QqzXRE8Q87MvQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
13:75:12:63:34:ea:27:b7:6b:cd:e8:2d:1b:5a:31:15:1b:e1:
93:7b:8b:05:eb:ec:1a:78:f9:f8:57:00:09:ab:c9:fd:40:ec:
a0:09:db:f9:b8:aa:f9:a8:90:47:16:53:d4:ab:6f:5f:41:4c:
03:d9:a6:08:83:89:e5:e0:28:58:34:61:df:f5:05:d7:03:62:
b1:ad:be:d3:77:b0:42:f6:2e:ac:22:a7:95:19:41:33:85:56:
42:39:65:62:5d:6b:2a:78:ce:ad:86:56:b6:71:ed:78:17:4f:
bb:dc:70:02:b4:c7:00:19:65:19:b1:71:0a:05:c3:b9:06:bd:
30:74:67:26:fd:ce:b1:22:c3:75:49:02:2c:4d:2d:55:14:58:
70:5a:8d:7c:3b:ef:07:a4:4d:54:92:71:eb:15:0f:dc:70:46:
5d:a7:15:2c:dd:69:a0:89:f6:30:97:cf:e9:1c:25:2c:e5:28:
82:2e:a8:92:97:45:00:ef:ee:21:db:5b:64:37:ea:b1:da:d3:
50:e4:70:97:f4:9b:e8:d6:a3:c0:d0:21:15:b7:cc:ed:12:46:
0b:46:55:4f:08:63:d5:78:f0:22:6c:36:20:40:ba:5c:5b:6a:
f5:d0:5f:fa:bc:d5:35:d2:19:e6:29:0f:29:7b:1c:57:a7:20:
dc:94:83:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 19:49:21 2025 by rpki-client