Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/d2VWB63nTficHJ3_nZ_5guObt4Y.roa
File: d2VWB63nTficHJ3_nZ_5guObt4Y.roa (raw, json)
Hash identifier: 3+UPdPGcevpRIQJ17WLEdbtO2z8iGjWjSMoIysZg3wg=
Subject key identifier: 77:65:56:07:AD:E7:4D:F8:9C:1C:9D:FF:9D:9F:F9:82:E3:9B:B7:86
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01860297324B44DFE598280A1BE3D7DFEBE0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/d2VWB63nTficHJ3_nZ_5guObt4Y.roa
Signing time: Mon 30 Jan 2023 12:11:48 +0000
ROA not before: Mon 30 Jan 2023 12:11:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:02:97:32:4b:44:df:e5:98:28:0a:1b:e3:d7:df:eb:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 30 12:11:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=77655607ade74df89c1c9dff9d9ff982e39bb786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:b7:2f:85:eb:b5:9b:e4:91:c7:0e:de:72:2e:
e9:4a:33:b8:a0:cf:de:d8:dd:7a:9c:37:f7:a5:47:
98:7e:da:ca:4b:66:eb:2e:b3:dc:e4:b9:b1:8b:10:
ba:14:b4:e0:80:ea:30:a5:2b:ed:60:ae:2c:9f:b4:
0e:1d:7c:c5:09:f1:26:bb:01:1e:91:84:61:e9:61:
a2:18:f0:95:2a:96:b9:fa:80:9b:06:b8:19:4b:84:
01:6e:31:4d:cb:e9:39:d8:56:b3:84:de:c0:bf:37:
a6:3f:17:1d:79:2e:31:94:25:51:d5:b3:7d:ee:0b:
d4:99:6c:b6:27:d3:f8:17:20:07:02:4d:a5:ba:25:
a0:84:da:d8:d2:4b:b8:92:13:db:83:78:91:b8:35:
78:23:1d:77:92:ba:84:34:21:80:d9:c8:ba:f0:6c:
d8:84:ee:05:23:35:26:d3:d5:ef:61:5d:d6:a4:d9:
df:de:61:0e:50:58:95:97:d7:0a:f3:a1:06:15:16:
2f:25:6b:7f:1f:0e:c0:c3:63:dd:42:d0:dd:1a:30:
f1:b7:b2:79:82:cd:b3:6f:d4:32:79:fb:a0:c2:c1:
c5:02:b1:08:5d:06:93:3c:38:24:ae:df:7e:3e:3c:
69:63:40:01:bf:0a:4d:f4:86:ea:10:33:ea:82:0d:
8f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:65:56:07:AD:E7:4D:F8:9C:1C:9D:FF:9D:9F:F9:82:E3:9B:B7:86
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/d2VWB63nTficHJ3_nZ_5guObt4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
72:3f:56:93:78:a9:61:c4:c0:46:83:62:52:6e:fc:47:ed:6f:
67:a4:2b:b8:d8:f3:24:28:ef:45:8c:8a:6b:1d:18:83:dd:ea:
40:37:e9:99:d5:0c:3c:0b:57:aa:f8:38:53:bc:d1:76:45:de:
02:8d:ba:c3:d5:ae:b8:79:9a:f0:12:ea:6b:3b:66:c4:11:58:
94:e4:2a:8a:25:0b:b3:5d:35:e6:24:f1:a8:67:25:d6:2e:50:
5d:86:e0:5d:24:a3:51:e6:66:3c:5d:98:51:d7:b1:fc:bc:e6:
ac:72:6f:80:8b:0e:a8:f5:a6:4e:5c:09:f1:93:92:f9:bc:c1:
2c:24:76:aa:3d:62:ff:71:6a:e1:d7:b5:70:9e:23:65:e9:af:
bc:82:fe:01:96:e8:0c:12:d9:7f:f5:b1:9b:9b:ee:f6:b5:43:
bf:b2:2f:be:6d:9d:45:f5:1b:e6:a7:2e:50:19:a0:91:10:ca:
ec:58:60:4c:6f:5d:fa:7c:c4:e0:74:5b:73:3a:fc:9d:37:c3:
82:d9:1a:6b:09:79:d5:9a:37:61:51:34:f2:9c:5c:2a:e2:93:
49:fd:9e:dc:6a:cc:08:bd:01:de:3a:52:85:cb:35:04:d3:34:
9b:d0:f7:25:f3:da:3a:f9:78:37:65:e1:a3:b9:af:79:b7:46:
36:55:1d:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:37:42 2025 by rpki-client