Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cPTvhdAesoXyisZMADH1pZzxGfE.roa
File: cPTvhdAesoXyisZMADH1pZzxGfE.roa (raw, json)
Hash identifier: x63UHHbqHzur4JLNEcoZyEqQVcG2U3YBkbum0YLB6pw=
Subject key identifier: 70:F4:EF:85:D0:1E:B2:85:F2:8A:C6:4C:00:31:F5:A5:9C:F1:19:F1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184E0E8439290629EA2AC745AF19052AA25
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cPTvhdAesoXyisZMADH1pZzxGfE.roa
Signing time: Mon 05 Dec 2022 06:10:28 +0000
ROA not before: Mon 05 Dec 2022 06:10:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e0:e8:43:92:90:62:9e:a2:ac:74:5a:f1:90:52:aa:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 5 06:10:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=70f4ef85d01eb285f28ac64c0031f5a59cf119f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:23:1e:74:aa:99:cd:df:54:1d:c9:b4:a4:16:
c6:b1:2d:35:45:26:08:ab:10:b1:47:4c:3a:33:4a:
c1:80:85:18:9b:4c:be:5a:39:a9:f2:5c:82:ad:d4:
b7:be:01:bd:6e:99:2e:9d:70:3a:11:4e:0f:a0:03:
f9:d4:d6:e8:65:9a:86:0f:18:e9:0e:40:ce:25:a9:
8b:e1:76:da:b8:93:f8:16:05:d2:db:42:6d:a4:b9:
76:39:4b:df:94:a0:54:a3:e5:bc:e4:c7:35:04:00:
13:09:6f:a3:49:e9:1e:30:df:80:f4:ed:29:d7:62:
6b:1a:e8:b8:80:44:11:80:f0:90:98:9c:6c:b0:1a:
9b:42:ab:a9:04:e3:86:ad:18:a9:a9:90:6e:1a:b8:
59:75:7d:87:33:73:04:e7:74:33:6f:c4:11:5e:fb:
54:f3:3f:d6:39:7f:03:52:38:52:36:4e:a9:f3:2d:
ec:69:9c:dc:c3:b2:92:8d:2b:a3:8a:80:51:0e:ac:
3b:16:f9:36:9e:d4:68:8a:66:e9:11:50:2a:e7:d9:
5f:00:1b:47:fc:b8:d3:5a:0e:9d:b3:6e:a7:7c:63:
63:6c:d2:d9:98:60:9d:3d:22:a2:f8:2a:57:87:78:
35:48:56:a3:18:31:52:6b:d3:2f:79:3e:0f:6e:4d:
69:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:F4:EF:85:D0:1E:B2:85:F2:8A:C6:4C:00:31:F5:A5:9C:F1:19:F1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cPTvhdAesoXyisZMADH1pZzxGfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
37:3e:7d:a2:6c:ce:72:4d:c4:b7:9b:da:5f:b7:18:28:04:e5:
94:67:0d:bc:0a:c9:31:d9:b6:b8:83:66:ff:2b:ba:0e:a5:c9:
03:b9:55:7b:8f:a7:5c:3a:46:19:b9:86:b7:c5:77:80:fa:07:
7c:3e:41:0c:90:d5:48:f7:97:3b:2f:97:4d:4e:19:00:3f:79:
e3:a7:33:c8:e9:bd:e8:e5:f8:69:30:f4:1c:a6:93:a6:73:76:
6a:75:3e:e6:d5:1b:9c:fd:07:25:f6:6e:5f:70:bc:df:6f:52:
84:52:88:e3:8f:8c:45:93:2c:9c:8c:3c:7b:45:70:1a:c8:3b:
46:21:d4:fc:1a:5a:d4:96:be:47:55:a3:f2:41:30:d4:76:a9:
7f:b5:a9:1e:19:07:3f:72:f0:9e:be:65:65:64:3e:32:4f:05:
28:cd:f7:2b:1a:9a:b4:6c:34:63:3a:6a:71:4d:6f:d7:67:25:
e4:22:15:af:31:b0:42:c5:ff:c6:35:d0:e9:91:b8:d3:70:50:
f5:6d:b3:13:d7:93:67:c9:e5:9f:73:3d:cb:62:3c:d2:3a:2f:
5f:1a:41:4c:89:9a:9f:c3:16:86:0b:fb:3b:18:d1:b6:f7:d4:
e3:d3:65:1d:e4:3a:2c:51:2a:b7:25:8a:8d:80:41:85:0c:e9:
2c:e2:cc:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 19:11:43 2025 by rpki-client