Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cD_EBSbIfQUgItX8ONJRRgVgaZI.roa
File: cD_EBSbIfQUgItX8ONJRRgVgaZI.roa (raw, json)
Hash identifier: T7j1fWbGo33AWOS7VOrtVLFeSMLK3aYxV+BrO7CMsv4=
Subject key identifier: 70:3F:C4:05:26:C8:7D:05:20:22:D5:FC:38:D2:51:46:05:60:69:92
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6C0523B0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cD_EBSbIfQUgItX8ONJRRgVgaZI.roa
Signing time: Sat 19 Feb 2022 18:22:31 +0000
ROA not before: Sat 19 Feb 2022 18:22:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1812276144 (0x6c0523b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 19 18:22:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=703fc40526c87d052022d5fc38d2514605606992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:34:0b:9e:c7:4e:8c:78:bf:76:ee:3e:fd:e8:
38:0b:e2:c9:3d:01:f1:d5:ca:c3:03:7e:51:e1:22:
1c:92:1e:11:15:75:c2:a5:9b:c5:81:45:8e:a6:73:
c8:6c:6f:d7:ce:b9:fa:b1:a1:1e:c4:23:85:fe:cf:
92:38:54:6c:1f:f5:dc:3b:dc:1e:90:eb:cd:0a:aa:
0a:d9:38:1a:77:0f:c3:74:19:70:8b:99:3a:38:86:
c0:cd:da:8d:e5:82:7c:13:15:a2:37:42:b5:5a:31:
cc:f2:13:bc:4d:cf:a2:63:bb:1e:e9:63:f6:56:c9:
35:6c:d5:d3:54:a0:a7:1e:6f:ca:80:dc:19:c9:0b:
e0:1f:60:ca:13:5e:6f:3f:c8:34:7c:d3:a3:2f:68:
d4:99:df:9f:ce:95:3f:7e:4e:bf:51:21:95:c1:56:
18:82:5c:7d:c7:1d:9d:36:70:90:58:44:00:e0:41:
24:1c:a6:87:30:88:c6:5b:8f:47:90:56:9d:a6:0f:
2f:0d:f3:ee:48:4a:5b:cf:94:fd:b1:2b:60:f3:a9:
d8:25:cb:fc:bb:92:a1:30:c1:39:38:b5:ce:7d:bc:
7b:04:a8:50:3f:13:18:4c:ec:bb:25:12:ff:54:96:
e2:55:0e:b8:1d:25:b0:32:18:62:68:e1:64:ba:3f:
f8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:3F:C4:05:26:C8:7D:05:20:22:D5:FC:38:D2:51:46:05:60:69:92
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cD_EBSbIfQUgItX8ONJRRgVgaZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6b:f6:b2:3c:c9:77:4c:2d:7b:44:f1:67:d2:9d:ff:91:c0:94:
dd:7f:bc:2b:a7:61:f3:1d:be:ad:03:a1:69:ce:da:ee:95:4a:
86:aa:84:2a:23:5d:81:df:cb:55:52:b0:6a:6e:c5:c6:dc:f3:
aa:9d:35:18:59:75:5d:9a:0e:6d:69:6e:91:ea:32:f1:9d:42:
0b:f9:04:e7:7a:d8:97:ea:e5:d3:00:74:fb:ae:62:7f:a3:8d:
0b:d4:0e:21:63:7b:7f:ef:02:d1:f2:8c:75:95:d2:17:5e:e3:
82:57:3d:3b:8c:f0:f7:c4:06:67:72:60:45:a4:7d:02:fd:a4:
c4:ff:8d:49:c2:b1:55:74:4f:19:15:03:6c:0f:72:a6:ee:1d:
70:be:8d:79:d2:fb:cb:5e:21:ae:5d:66:a3:cc:39:d9:ac:b1:
c0:9d:c0:67:a3:1e:1a:64:0d:ea:2c:e6:b2:b1:20:19:b9:5b:
e2:8a:97:57:99:bd:0d:7f:8e:fe:d1:b2:7c:ab:fd:c8:bb:d8:
7b:9d:4e:7d:21:73:4c:8c:e9:ab:5c:6b:6f:af:5a:79:45:8f:
b1:04:51:a4:5d:01:b6:29:2a:7b:9a:9e:c7:2b:00:6f:24:fb:
03:ab:b2:e2:d1:db:51:b0:4e:44:fa:f4:5c:ae:96:4b:14:0e:
21:c2:87:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:21:13 2025 by rpki-client