Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/d7arE4vHVDhfAYyIV-mxAMOCZN4.roa
File: d7arE4vHVDhfAYyIV-mxAMOCZN4.roa (raw, json)
Hash identifier: xHWDTugHIiZm3V5QEsJ9t/hjP9cs9MeiVlummnEEWC8=
Subject key identifier: 77:B6:AB:13:8B:C7:54:38:5F:01:8C:88:57:E9:B1:00:C3:82:64:DE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01850CAD78867E551EA415881740A7C86F26
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/d7arE4vHVDhfAYyIV-mxAMOCZN4.roa
Signing time: Tue 13 Dec 2022 18:09:33 +0000
ROA not before: Tue 13 Dec 2022 18:09:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0c:ad:78:86:7e:55:1e:a4:15:88:17:40:a7:c8:6f:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 13 18:09:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=77b6ab138bc754385f018c8857e9b100c38264de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c7:fa:c8:b5:7b:63:ff:84:5f:6f:d2:0d:bf:
9d:b9:4e:83:0e:08:f5:0d:31:ce:2b:25:85:ef:62:
82:e7:96:e6:d9:fd:63:96:7e:34:8a:4c:b5:a7:ae:
88:37:a2:2a:31:c8:ed:07:bb:70:2b:d9:05:d1:10:
2b:7e:c1:09:d8:51:b0:9e:18:b5:bb:4c:66:db:f2:
08:52:cb:86:d3:61:7b:f0:88:57:79:07:60:12:33:
c9:ba:93:70:9a:3c:c7:8c:76:55:d1:a6:60:4d:ac:
ff:42:88:67:d1:68:fe:c2:49:e8:29:34:17:66:f6:
14:1f:05:a1:39:cf:57:a6:4c:b2:79:50:46:ed:80:
3d:15:a2:fc:b4:14:f8:d7:f5:24:7f:2c:21:e8:cb:
77:c2:6e:36:6f:77:83:54:ca:5a:53:29:76:03:61:
b0:67:66:37:c4:45:fc:30:ab:32:62:6f:a3:22:ec:
30:9e:b6:75:8c:07:0c:c6:cf:19:8f:fc:a7:5a:1b:
70:f8:29:57:e9:19:7f:b2:f8:fa:04:b3:59:ed:24:
9b:e8:eb:f3:29:23:8c:8a:c4:61:21:e2:48:fa:10:
1a:a2:52:05:12:07:55:67:d2:17:cf:96:db:7b:3c:
8c:25:e8:4d:62:04:b3:13:99:ea:a3:07:4f:d2:ea:
00:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:B6:AB:13:8B:C7:54:38:5F:01:8C:88:57:E9:B1:00:C3:82:64:DE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/d7arE4vHVDhfAYyIV-mxAMOCZN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
34:48:ab:e4:1d:08:a3:4c:4e:cf:b3:fa:f8:27:d1:b5:2d:42:
02:b0:c4:28:c2:df:42:e9:c6:2b:1f:72:2e:bf:87:68:ed:11:
26:d7:80:49:e8:e1:4f:d6:6b:7d:4c:3e:d0:e5:87:59:ac:f3:
7d:ef:67:76:c5:06:30:c6:a8:5d:c2:ab:7d:41:69:4d:3e:b1:
a0:5c:c3:3e:ad:e0:7f:89:a9:72:5f:42:ff:9e:a2:1b:46:de:
06:7b:76:ec:49:3a:6a:61:8b:e5:e8:03:89:8e:88:9d:85:44:
ff:db:7f:2e:e3:a0:84:37:53:f3:3e:a3:b4:28:a2:5f:65:6e:
11:1c:aa:71:d0:e4:67:83:31:a2:5b:5b:be:91:7b:fc:84:d7:
90:f5:72:dd:39:ca:f5:6b:53:fa:5f:35:a1:72:02:62:06:a9:
bd:cd:86:48:58:6c:c2:d9:d0:fd:f0:87:12:07:fb:a3:2b:93:
db:3a:14:17:d3:2a:78:64:d0:42:86:98:9a:07:67:bc:f8:af:
5b:72:eb:82:73:78:19:bc:51:31:e9:b3:97:7a:22:b4:01:c2:
ce:97:8e:73:39:f4:49:de:98:27:62:8e:fc:2b:31:d3:19:7c:
3e:9c:11:6e:f5:7d:11:68:23:e3:34:d3:57:fc:14:e9:de:3c:
d6:36:55:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:12:36 2025 by rpki-client