Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cH3p39SeVzo1UHpe8uPkNZIEYLA.roa
File: cH3p39SeVzo1UHpe8uPkNZIEYLA.roa (raw, json)
Hash identifier: MiObYtH447zViB8YZKhENTmRNr7KFBvu4c1lVPzH20M=
Subject key identifier: 70:7D:E9:DF:D4:9E:57:3A:35:50:7A:5E:F2:E3:E4:35:92:04:60:B0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7B3C5193
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cH3p39SeVzo1UHpe8uPkNZIEYLA.roa
Signing time: Thu 14 Apr 2022 14:10:10 +0000
ROA not before: Thu 14 Apr 2022 14:10:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2067550611 (0x7b3c5193)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 14 14:10:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=707de9dfd49e573a35507a5ef2e3e435920460b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8e:48:d5:58:c3:b0:14:fc:1e:48:e6:70:ca:
4b:8f:6d:85:f4:7d:dc:f8:b0:d4:00:80:b0:e8:cd:
b5:9b:cb:a1:1b:29:08:ca:0e:4a:66:49:a7:0b:4c:
df:76:ae:59:ca:89:98:84:4b:d5:34:16:6c:fb:5a:
7f:19:fb:2c:b7:4f:83:93:bc:81:08:aa:de:de:8e:
5a:cf:20:56:71:93:01:79:8a:dc:8d:c4:8d:ac:97:
0f:29:bc:b6:94:4e:33:ad:40:26:2d:ca:82:75:08:
51:f5:06:49:14:ab:f7:c5:99:cd:cd:85:86:c6:e3:
c4:8e:32:3d:40:54:89:6d:27:13:d4:b2:2c:60:e8:
6f:79:78:7d:f4:5a:83:cd:36:d1:0b:8c:88:9c:4b:
ca:8d:db:fe:e8:6d:e4:26:d0:89:bd:b3:d6:87:18:
c0:d3:6c:7b:9a:3b:14:4b:c7:c0:29:3d:e5:1c:a3:
ec:99:d4:c8:5d:6b:2c:9b:5d:56:24:2d:9c:c1:22:
a8:c4:b6:ae:ae:4e:ba:b9:66:07:7f:63:49:3c:8d:
1a:2c:26:ae:67:aa:09:e1:9f:27:54:e3:44:68:4e:
c3:56:4c:99:6d:ef:5c:16:ff:41:d2:a1:d5:60:d5:
4b:5b:da:34:2e:cc:83:dc:a5:58:0d:2d:08:07:fb:
f3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:7D:E9:DF:D4:9E:57:3A:35:50:7A:5E:F2:E3:E4:35:92:04:60:B0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cH3p39SeVzo1UHpe8uPkNZIEYLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2b:13:e2:4e:97:6a:8b:b2:4f:21:08:f8:f8:b9:b8:bb:66:e1:
38:93:4b:0d:70:49:93:7d:65:0d:c8:13:78:c1:18:a6:44:13:
9f:92:d2:bc:64:b4:b3:83:5c:d8:87:aa:18:b5:37:11:97:a9:
2b:4b:0d:e2:04:77:78:bc:e1:8c:c5:4b:10:c6:a4:85:a4:ed:
ca:dd:08:97:a2:3f:54:c1:46:bb:07:5b:32:da:12:f7:7b:a9:
c1:b9:15:61:37:83:ef:3a:ef:d1:85:01:8c:f1:c8:47:63:91:
2e:39:96:3e:dd:4e:11:d7:ee:bd:61:11:8c:47:a8:bd:b9:1f:
47:d0:b6:13:29:35:98:46:b6:0c:2c:9f:ac:09:87:bd:2f:48:
f7:4a:58:0d:a2:b7:7e:58:e5:0e:04:43:a2:58:08:ae:f0:3d:
90:65:2b:3f:3c:54:77:1c:38:a7:08:a5:62:52:db:09:53:e0:
fc:01:cb:68:31:01:c0:41:29:7f:5e:12:ae:fe:6d:b2:11:7f:
a8:46:46:66:70:2e:45:18:7e:28:8d:b0:25:d5:48:23:46:1e:
a6:fc:51:94:fd:e3:d8:9b:ab:4e:6d:a8:55:52:31:14:2f:da:
43:14:24:9b:ff:eb:a7:0c:e4:38:fe:7d:25:af:f2:cc:50:ad:
76:39:5d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 03:55:51 2025 by rpki-client