Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dIwM-noUIPTi0vTwZ4gzYNHnABg.roa
File: dIwM-noUIPTi0vTwZ4gzYNHnABg.roa (raw, json)
Hash identifier: 3yhBic1BL4VhqYLBnCw/sMhI5aF+1HJwPXoFa7nb3D0=
Subject key identifier: 74:8C:0C:FA:7A:14:20:F4:E2:D2:F4:F0:67:88:33:60:D1:E7:00:18
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01855F7CA3E47FE110C14B50539F3DFCBA21
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dIwM-noUIPTi0vTwZ4gzYNHnABg.roa
Signing time: Thu 29 Dec 2022 20:04:42 +0000
ROA not before: Thu 29 Dec 2022 20:04:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:5f7c:5226/128 maxlen: 128
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:5f:7c:a3:e4:7f:e1:10:c1:4b:50:53:9f:3d:fc:ba:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 29 20:04:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=748c0cfa7a1420f4e2d2f4f067883360d1e70018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:be:60:7a:5e:fb:b5:77:19:cc:d6:a6:45:89:
b8:18:5e:0b:b1:83:99:7a:34:e5:86:25:99:0e:27:
bd:59:ad:a6:78:65:76:aa:71:da:37:cc:ae:e9:e0:
a1:2c:3c:ef:18:88:fd:ac:92:97:a3:a3:4f:ed:7f:
f7:cf:3d:a5:bc:af:21:23:0b:29:72:d3:46:99:11:
8f:29:64:ab:f3:4b:8f:91:d1:25:09:37:9b:9b:55:
d0:0d:de:27:d6:af:68:3d:19:75:26:b5:fc:55:75:
a5:1e:cf:d7:c8:b9:06:6e:dd:3e:e4:2a:1c:60:1f:
56:04:5b:e5:75:ad:e5:46:30:09:09:29:36:71:19:
12:ec:5b:93:68:e3:ea:a9:9b:7f:15:77:f5:45:7a:
99:b7:da:86:05:2c:22:bf:f1:57:1a:7e:cb:52:42:
89:1a:c8:cf:65:02:62:62:86:69:6c:c2:cb:03:e6:
84:83:b6:01:93:fc:b2:44:88:1a:c1:5e:b0:a6:7d:
28:9f:ac:86:97:79:e9:47:58:17:9c:1e:9b:8d:97:
3c:f3:51:ad:47:8d:4b:4b:85:e0:e2:31:2e:84:a2:
91:52:1f:6e:b8:3a:55:32:35:c5:90:a6:76:ca:dd:
f7:07:00:a8:47:ec:de:da:41:44:fd:5b:f9:d6:63:
72:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:8C:0C:FA:7A:14:20:F4:E2:D2:F4:F0:67:88:33:60:D1:E7:00:18
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dIwM-noUIPTi0vTwZ4gzYNHnABg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
51:af:d3:34:b8:6a:05:95:eb:67:42:48:2c:22:11:06:e8:3a:
33:e3:d9:1e:f6:7a:8a:67:11:01:4c:d0:64:ae:a6:b8:3d:1f:
0e:56:d8:d0:7b:2b:a9:84:57:11:62:f1:ac:00:08:b6:85:8d:
2f:e4:a2:df:1f:5b:6c:43:e8:8b:3c:1e:b4:15:79:cb:8b:13:
31:72:96:1d:25:dc:08:d9:2b:9a:ab:16:ce:2c:04:f4:c0:f3:
8a:7e:4c:18:2b:e5:1d:0b:8e:e8:55:f2:d4:b3:23:09:f5:08:
86:6c:c6:58:1e:8a:fc:fd:9b:8c:3a:db:0f:1b:0d:4b:6c:96:
77:ed:9e:df:19:6d:63:de:90:92:2d:0c:09:f2:da:d5:a3:d6:
5f:77:23:ee:47:fd:67:e4:fc:60:98:66:a9:0f:9b:69:68:83:
a0:47:56:39:b3:90:4f:33:24:e3:67:08:0f:41:fd:fd:4d:d6:
96:1f:1c:74:81:53:ae:66:bb:4a:a2:da:8e:97:07:e3:82:88:
94:8c:6a:c9:5d:0e:ce:f5:82:cd:e5:60:cf:ab:ca:2a:5a:a2:
84:a0:cd:14:57:58:9d:fd:b6:d1:f1:c8:2b:0a:84:3e:e1:6d:
d9:e7:8d:15:40:c3:4c:8c:c5:ff:eb:74:81:0a:f7:cf:c2:be:
91:a9:4c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 05:02:38 2025 by rpki-client