Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dAw_I6nxUqoiHCt5OPwyPIqrLWc.roa
File: dAw_I6nxUqoiHCt5OPwyPIqrLWc.roa (raw, json)
Hash identifier: 4fKHQyLGfwHF8ItqHFSd7cmZlMfMjpRuc6gnPfHqLao=
Subject key identifier: 74:0C:3F:23:A9:F1:52:AA:22:1C:2B:79:38:FC:32:3C:8A:AB:2D:67
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01846814C82A417087A64F8B72F120BCE94D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dAw_I6nxUqoiHCt5OPwyPIqrLWc.roa
Signing time: Fri 11 Nov 2022 19:05:03 +0000
ROA not before: Fri 11 Nov 2022 19:05:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:51c3:ad7c/128 maxlen: 128
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
2001:67c:64:ffff:0:184:6814:6741/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:68:14:c8:2a:41:70:87:a6:4f:8b:72:f1:20:bc:e9:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 11 19:05:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=740c3f23a9f152aa221c2b7938fc323c8aab2d67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:8e:02:7c:2c:09:d4:5b:96:e5:db:7c:4f:2b:
9a:e8:c7:33:6b:c2:ab:72:f4:93:b3:f8:1c:18:ab:
28:0c:b9:5f:c6:de:de:fb:fe:23:59:db:fc:21:e3:
23:7b:85:21:76:3f:ff:e4:a9:a0:15:3a:f8:c6:3d:
e8:37:0c:7f:55:55:2d:4c:af:30:ef:56:a6:05:3a:
20:21:59:28:ac:61:be:e2:eb:81:a9:d4:d7:c9:62:
07:55:7e:79:2b:0f:c8:aa:bc:f0:72:18:f6:fa:b6:
25:99:03:9b:d7:d6:c2:9e:86:5b:84:7f:85:cf:4f:
2c:21:4f:2b:f2:5d:80:6c:6f:15:ba:9f:b6:21:de:
17:2c:bd:6e:4c:d7:15:09:b9:19:6d:53:de:1c:46:
85:c0:8c:8d:2b:4a:df:ad:cb:6e:85:0c:1f:01:aa:
39:a7:d9:44:1f:6a:df:29:60:eb:dd:dc:34:e7:e6:
8b:76:99:71:8a:17:ab:ae:3e:c1:51:a4:93:a3:89:
c1:a1:da:29:a2:98:5d:d1:99:23:d8:fe:2e:15:51:
e8:b4:4b:e9:5d:17:9e:e7:7e:29:d6:7b:c9:e5:b0:
28:a2:60:a3:45:3d:b8:7c:b7:69:d3:88:75:71:3f:
7b:92:cd:ee:94:73:4e:db:97:b4:15:99:69:22:b3:
1a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:0C:3F:23:A9:F1:52:AA:22:1C:2B:79:38:FC:32:3C:8A:AB:2D:67
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dAw_I6nxUqoiHCt5OPwyPIqrLWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
27:b8:56:0f:5e:67:9e:c1:2a:95:65:4f:a8:00:39:e4:b7:cb:
05:25:cf:0d:df:9f:56:fa:14:63:a7:e7:48:9d:ae:df:d8:6c:
bb:7a:a7:87:b1:23:83:41:6a:b5:09:24:64:1e:1b:ff:b4:bb:
5e:05:53:3a:fb:32:63:91:b7:b4:be:34:67:40:19:c3:9c:fc:
a0:92:20:b7:de:ce:92:92:ec:55:2c:97:8c:6e:0c:e8:7f:7f:
69:25:49:17:18:0c:2d:95:1d:dc:cf:04:70:83:09:77:03:8b:
f0:38:02:81:de:5e:3f:52:34:4e:12:9c:f2:08:19:bd:a8:d0:
80:28:30:68:10:02:46:14:70:3d:38:0f:3f:55:99:f9:ad:de:
b4:b4:af:a9:b6:fa:c9:31:dd:71:23:4c:fc:86:a4:a5:3c:09:
b9:32:7d:2c:2c:d2:93:a0:1f:c6:ec:30:0c:79:14:73:05:05:
a9:42:51:6c:67:04:8d:2b:c2:d4:00:01:f8:95:2c:0a:78:1f:
d0:ab:82:04:cc:18:09:0e:5f:f4:7e:8a:fa:a4:ce:bc:91:63:
e3:72:6a:bc:07:d8:a7:45:c4:b7:20:b4:d3:d0:59:94:10:6b:
50:43:06:ee:7e:18:7e:6e:7f:40:1a:1f:a1:ab:57:8e:80:62:
a6:4d:f7:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:25:42 2025 by rpki-client