Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/d1lDvj3EGk-019VL3kDX7USJ0J0.roa
File: d1lDvj3EGk-019VL3kDX7USJ0J0.roa (raw, json)
Hash identifier: jpfYhRcC0D3DttjJV+r1dK8O8m5J4Kqxj/41Zl3T9D0=
Subject key identifier: 77:59:43:BE:3D:C4:1A:4F:B4:D7:D5:4B:DE:40:D7:ED:44:89:D0:9D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184E4FDCB3B79B5B04D95A5714D0BAD7B97
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/d1lDvj3EGk-019VL3kDX7USJ0J0.roa
Signing time: Tue 06 Dec 2022 01:12:28 +0000
ROA not before: Tue 06 Dec 2022 01:12:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e4:fd:cb:3b:79:b5:b0:4d:95:a5:71:4d:0b:ad:7b:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 6 01:12:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=775943be3dc41a4fb4d7d54bde40d7ed4489d09d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:cc:cf:64:53:cc:24:aa:43:a6:1c:bb:fb:e8:
bf:9a:d1:5e:d7:28:07:84:7b:00:53:53:40:90:d1:
64:6f:84:ae:32:18:64:5b:4e:2c:5d:4b:d5:89:e4:
f9:87:e0:c9:47:6d:71:4c:72:ce:20:3d:41:e7:f2:
a5:ed:77:fb:76:5e:7d:2e:60:1d:cb:cf:c6:f7:19:
d6:7b:2d:b8:fa:75:26:6d:8e:2c:b1:bc:c7:c1:7c:
9e:f4:78:bc:fe:c8:23:1e:f9:e5:d9:84:cd:ce:c4:
7f:50:5e:4a:3d:10:39:3f:8b:32:6f:ec:fb:01:38:
cd:15:46:dd:67:ce:8e:bf:db:c8:a2:66:90:a1:9d:
2e:b0:32:e7:39:2c:d3:5c:20:16:0b:45:9a:1c:c4:
f0:75:79:65:f0:41:2a:a1:71:5e:6e:d9:06:7d:82:
fd:26:02:71:3f:80:e8:bd:37:e3:f8:88:dd:00:63:
04:c0:38:f0:20:51:41:db:83:b1:ba:43:bd:36:b2:
72:dc:2e:5c:c1:31:d9:42:47:d4:b4:20:f1:8b:5f:
07:cd:1c:49:01:bc:f7:71:3a:04:e7:da:44:65:a1:
92:d7:27:da:81:a1:88:c4:11:a4:bf:c5:8e:0b:25:
93:eb:70:ab:01:22:cb:f7:c7:33:e4:83:ab:3c:60:
f7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:59:43:BE:3D:C4:1A:4F:B4:D7:D5:4B:DE:40:D7:ED:44:89:D0:9D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/d1lDvj3EGk-019VL3kDX7USJ0J0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
06:9f:73:6b:e2:ad:00:1c:8b:92:eb:6d:4b:3e:52:60:af:01:
0d:a5:27:46:1d:d5:5e:77:c0:8b:b4:3f:8e:cc:72:4e:a2:4e:
a5:c8:be:56:a5:39:57:c5:4f:47:85:0b:65:5b:aa:e6:84:88:
1c:05:09:8f:16:3d:76:a5:f4:ab:18:2e:ab:ff:1f:93:a5:0a:
a4:a7:67:f9:09:68:72:2b:74:56:8d:a8:79:b9:f3:91:07:68:
c9:a4:49:c7:61:c4:ef:6f:dc:ed:2f:9f:e2:ac:7b:dd:ac:ae:
dd:d7:79:d5:80:6d:4b:36:0b:5c:3c:15:d0:b1:b3:58:ec:26:
ac:93:41:9d:e3:86:bd:53:de:2a:3f:89:f5:16:35:73:2f:08:
6f:98:ad:53:f2:79:3a:d5:9d:d9:8a:72:68:dc:58:b5:19:9f:
32:a7:a3:f1:86:91:a5:b6:0a:a7:32:ca:bf:30:17:68:26:2b:
99:37:ae:50:cd:5b:fc:8e:f0:18:1b:8b:99:55:37:a8:db:f3:
ba:88:5d:b5:58:c4:a8:a5:6b:a3:76:cc:01:fd:9f:58:c7:40:
bd:3f:1f:dc:34:cf:ee:8e:6e:f1:5c:cf:06:7a:e6:35:2d:e3:
5e:65:43:07:2c:78:12:67:7c:de:bc:46:a4:69:3c:59:c1:57:
72:4f:13:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:14:05 2025 by rpki-client