Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/c3fTSvNlKXo2hYcUr3gnkLmr1IM.roa
File: c3fTSvNlKXo2hYcUr3gnkLmr1IM.roa (raw, json)
Hash identifier: CJW3gT9MwzlpBp3xWtT94thhHnOog9yo7H0yfGK4oYY=
Subject key identifier: 73:77:D3:4A:F3:65:29:7A:36:85:87:14:AF:78:27:90:B9:AB:D4:83
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6ACA7FEC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/c3fTSvNlKXo2hYcUr3gnkLmr1IM.roa
Signing time: Tue 15 Feb 2022 10:24:25 +0000
ROA not before: Tue 15 Feb 2022 10:24:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1791655916 (0x6aca7fec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 15 10:24:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7377d34af365297a36858714af782790b9abd483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a2:98:35:e5:f3:6c:a1:7f:db:8a:cd:9c:98:
aa:ea:88:b2:80:4c:be:fb:63:fb:77:a9:1f:0c:aa:
d6:cf:be:39:80:9c:64:c6:dc:16:c8:00:47:a5:2b:
d5:59:0d:c1:98:1b:1e:42:66:86:8b:17:e3:ee:2c:
33:c4:98:5a:90:aa:7f:16:39:ea:27:c5:ae:18:3a:
5d:01:77:5c:45:d2:8a:62:5e:5a:ee:a6:1a:08:28:
fa:ab:c3:ad:ab:af:aa:ea:3a:23:a6:72:d4:2a:99:
6c:93:2a:6e:58:f9:4f:06:b8:be:75:27:35:9b:ea:
81:10:66:a0:0a:a9:cd:75:dc:27:f8:17:66:cf:ab:
a1:11:1a:46:49:df:29:4c:63:c1:01:cb:4a:70:00:
a8:8c:38:6d:bd:58:e4:d0:55:24:7d:23:09:95:45:
3a:da:92:78:e5:4b:d0:cd:bd:e3:f7:e4:ef:40:cd:
43:a5:1b:a3:e0:40:ca:1c:b3:a8:e9:ef:c7:25:39:
8f:9d:09:2e:f3:c2:0c:a3:5f:97:b0:54:9f:c8:12:
5f:3c:35:05:eb:aa:eb:59:32:b3:69:f4:0a:45:39:
cf:c3:96:4d:33:2d:cb:a9:5d:4a:51:fa:cb:d3:16:
a3:16:ee:97:97:1e:dd:c8:88:7d:b6:50:3d:08:c9:
7a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:77:D3:4A:F3:65:29:7A:36:85:87:14:AF:78:27:90:B9:AB:D4:83
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/c3fTSvNlKXo2hYcUr3gnkLmr1IM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
86:e8:df:89:d4:3c:24:f0:ba:29:9b:8c:78:07:14:7c:d2:eb:
38:84:9d:22:9b:00:e3:b1:52:42:f2:8b:96:99:49:66:3a:74:
fb:eb:b0:2d:a4:55:96:35:76:d1:dd:98:a3:90:3b:67:7c:a4:
b9:34:0c:f7:1f:e6:c2:a2:fe:87:9a:87:d8:be:f0:b4:58:7a:
5a:25:ab:0a:42:50:52:a4:aa:80:08:ab:c9:7d:2a:15:0f:38:
ad:d3:30:77:d5:b1:11:13:76:ce:93:df:53:ca:e0:a7:f0:e3:
6d:65:66:b6:8d:2b:d5:26:1a:b2:b6:f9:e0:86:7e:4c:a2:bb:
49:c0:0a:5e:22:f6:54:69:e2:41:7b:4e:a1:80:e6:db:15:e1:
be:ff:d9:08:fd:9d:87:85:3f:ce:a3:3d:27:61:f2:2d:41:dc:
c8:c1:f4:c8:9d:6a:99:6e:cd:79:f3:83:8d:8b:c3:cd:3c:d7:
5b:f7:16:49:0f:0f:ef:8d:b2:ec:a7:03:63:be:f3:01:6f:96:
6c:54:d2:6a:ab:90:48:26:ad:97:af:79:3b:92:33:e4:42:7b:
46:81:25:3a:a9:31:d7:da:b2:82:d9:a3:58:ed:85:ce:a3:6d:
dc:20:6b:c4:79:97:38:74:f0:9f:38:b7:16:f6:33:97:8d:e2:
e8:54:1e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:44:01 2025 by rpki-client