Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cPjcd54Oc6oz3olnQ1cAuYMYZc8.roa
File: cPjcd54Oc6oz3olnQ1cAuYMYZc8.roa (raw, json)
Hash identifier: aZYirRJJBnQ76WltuWBXwe9rC+lKWrFUoaCzqsd93/w=
Subject key identifier: 70:F8:DC:77:9E:0E:73:AA:33:DE:89:67:43:57:00:B9:83:18:65:CF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018406405D0F5737633ACF8BEDEC9E63F46E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cPjcd54Oc6oz3olnQ1cAuYMYZc8.roa
Signing time: Sun 23 Oct 2022 19:09:52 +0000
ROA not before: Sun 23 Oct 2022 19:09:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:06:40:5d:0f:57:37:63:3a:cf:8b:ed:ec:9e:63:f4:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 23 19:09:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=70f8dc779e0e73aa33de8967435700b9831865cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:24:bf:54:55:34:5f:21:0b:ab:c0:21:86:57:
df:3b:05:2f:2c:92:68:64:25:ba:ad:d2:e7:db:70:
a4:31:b9:d8:64:96:81:96:85:14:bb:15:38:fa:ae:
0d:c4:fd:d9:a8:67:ed:a2:ab:c0:30:21:54:d2:25:
8a:b6:bd:d5:d6:57:40:6d:61:63:04:29:63:5b:43:
a7:ad:9e:74:e4:45:37:96:a4:32:41:d0:eb:bc:87:
11:ff:a7:1b:3f:33:1e:db:9d:a2:3d:ef:41:a5:0b:
46:0b:83:19:be:ed:df:94:d8:20:74:47:88:de:3a:
3e:cb:f7:3e:f3:59:e2:6e:9c:c4:6a:52:1e:93:08:
e8:69:91:a4:be:6e:8b:89:9d:41:ab:a8:cc:9a:74:
8d:eb:49:51:9e:21:c8:5d:07:e1:9c:6e:5c:04:da:
23:07:bc:36:d4:41:37:a0:d5:79:c6:4f:0b:f9:b8:
98:9a:56:ee:ad:0f:55:b0:62:8a:60:d3:10:78:04:
bc:ca:85:18:94:96:23:02:8f:86:ea:3f:cb:9b:88:
10:ea:b0:37:1b:b0:fb:36:40:c3:14:9a:3c:82:2d:
e2:71:c1:09:26:dd:02:f1:c0:3d:a2:3b:36:08:0f:
be:01:52:b6:6c:23:c8:91:c1:e3:c9:39:cc:4b:98:
74:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:F8:DC:77:9E:0E:73:AA:33:DE:89:67:43:57:00:B9:83:18:65:CF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cPjcd54Oc6oz3olnQ1cAuYMYZc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
07:f2:79:82:53:fa:4e:9d:65:90:eb:c7:d1:c9:57:a1:99:1e:
9b:36:a8:37:dc:e3:13:1c:23:19:b6:74:6f:75:9c:61:00:86:
1f:72:5d:38:1f:0e:0a:7e:aa:40:74:88:3b:e1:63:5a:02:17:
f7:96:da:18:9d:0a:83:3a:52:37:b6:16:3d:1a:81:89:5d:f6:
ba:7c:1a:80:58:52:4c:6c:78:32:b4:c3:64:06:59:c2:6b:6c:
63:68:e7:fd:ff:75:73:2a:be:9f:07:d0:9a:a3:93:7d:96:fc:
72:86:ca:f8:5d:fd:68:70:b4:e9:5f:27:ee:4b:05:4d:ca:61:
e7:b6:42:1c:3b:ca:25:ad:6d:bc:6b:0e:27:57:80:c0:a1:ab:
fa:bc:0f:aa:07:80:5a:8e:76:1a:64:72:75:9b:7e:81:2d:3e:
e8:ff:ed:37:be:3d:6b:b3:ca:18:e9:4d:a9:0b:7e:ad:e2:ec:
f1:0b:bf:5d:f1:18:bc:5d:68:2f:09:30:f0:09:e0:c0:70:40:
69:89:97:a1:3d:b7:95:b1:07:1c:64:9d:7d:cc:af:40:ab:00:
c4:6b:35:e8:5f:f3:d2:fc:b5:23:61:6a:b1:1d:35:b9:30:95:
ef:7d:c8:f2:e4:c1:72:9d:1a:43:bf:8b:8f:ef:2d:e2:69:56:
a8:aa:57:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:38:09 2025 by rpki-client