Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cF3_329mavc0bigDVpjShGa-_WI.roa
File: cF3_329mavc0bigDVpjShGa-_WI.roa (raw, json)
Hash identifier: MrbYQ54kfPcs56PZldujhikWBuERaugXonHdH4HlT1w=
Subject key identifier: 70:5D:FF:DF:6F:66:6A:F7:34:6E:28:03:56:98:D2:84:66:BE:FD:62
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184ED5C9FEB42B492C2129E991E93060B07
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cF3_329mavc0bigDVpjShGa-_WI.roa
Signing time: Wed 07 Dec 2022 16:13:01 +0000
ROA not before: Wed 07 Dec 2022 16:13:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ed:5c:9f:eb:42:b4:92:c2:12:9e:99:1e:93:06:0b:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 7 16:13:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=705dffdf6f666af7346e28035698d28466befd62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d8:32:c7:b1:5e:9a:13:77:11:b2:3f:9c:5f:
d5:07:5b:b1:a1:ff:42:dc:84:b4:26:e7:3f:74:f2:
a8:fd:73:0b:9d:d6:6a:e5:3c:84:10:6a:7c:55:28:
f9:a6:d0:0e:e0:17:10:c2:03:0b:e2:07:b0:34:8f:
06:bf:8c:f7:90:4d:b5:fc:38:c3:62:88:08:c5:53:
0f:6a:1b:e3:8a:45:c3:49:77:84:c7:8c:4d:70:78:
1b:1a:27:62:7a:c4:36:8a:a1:91:95:59:fc:cd:6d:
fa:c7:b7:58:b2:fb:59:15:93:41:f2:cd:b7:a3:6b:
61:85:b7:92:db:70:d6:2c:eb:b5:35:fb:ea:0c:fb:
96:f1:f6:5a:c6:9f:93:5a:4d:c1:8e:fb:cc:b1:2b:
e7:ef:fa:36:75:86:c2:2c:37:36:e5:3d:ea:f6:68:
3d:e1:25:dd:36:42:eb:aa:9c:10:ce:8f:ec:fc:91:
8d:8b:cd:fb:60:0c:14:68:43:be:39:d5:19:c8:44:
15:a4:58:6f:73:35:0b:b3:8a:64:5d:f7:f4:58:56:
58:79:f7:2f:90:ef:97:01:ed:23:8b:71:6d:02:3d:
7d:59:be:4b:f0:fa:39:ed:9c:4f:1c:b5:5c:c8:a1:
dd:39:34:f6:03:81:0b:a2:f6:d5:bd:2e:c7:8f:1e:
ea:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:5D:FF:DF:6F:66:6A:F7:34:6E:28:03:56:98:D2:84:66:BE:FD:62
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cF3_329mavc0bigDVpjShGa-_WI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
72:c4:77:1b:42:2d:40:f4:76:1e:be:23:65:38:d0:e0:f6:05:
46:e5:0f:80:f5:b6:c7:b6:6b:0f:56:33:09:34:bd:aa:f7:92:
a5:dd:71:40:49:00:69:f0:62:dd:49:ae:e4:09:53:c8:a4:00:
2c:38:25:c6:b3:ef:f0:a5:20:37:f0:64:51:d9:b6:aa:ba:46:
cd:f7:41:88:9e:02:cb:28:5e:d9:5b:16:95:ed:df:e1:a3:45:
35:5d:8a:1b:c6:b8:20:6c:ec:6b:11:b0:f6:49:d8:7e:e8:fe:
81:fb:ff:2f:ac:48:3c:f2:f7:94:9f:ec:25:06:91:06:6a:b2:
49:e6:c9:30:c6:c7:55:51:70:28:ff:49:99:fe:d0:21:de:25:
4c:02:f2:d0:42:36:bb:29:30:ae:b6:f1:f4:23:63:ea:ae:11:
b9:0c:85:a7:30:c8:e8:c3:96:97:18:da:a8:78:06:ca:cd:71:
d1:06:65:d9:a7:5c:19:aa:ac:c2:6e:2c:2f:5f:3a:72:ec:83:
7b:3d:51:52:11:9b:96:e0:66:68:74:28:ae:f6:83:22:7d:de:
35:6c:a7:ce:6d:a0:c0:b8:75:60:9c:68:5f:54:10:8c:9e:fd:
c1:8d:8c:b3:a5:ec:7d:28:3a:bb:a2:b6:d2:4f:78:5e:e2:4b:
53:f8:15:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:39:16 2025 by rpki-client