Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dXyxwvgBhlB4G7aNX3aSGSJuc8E.roa
File: dXyxwvgBhlB4G7aNX3aSGSJuc8E.roa (raw, json)
Hash identifier: rFIHfcPKaQ4gB3CCKsOmD9GHsAr1Es2VpxT6+pn1xaQ=
Subject key identifier: 75:7C:B1:C2:F8:01:86:50:78:1B:B6:8D:5F:76:92:19:22:6E:73:C1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01833432D6E33DA4EF062EB0F3FC1D4E4083
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dXyxwvgBhlB4G7aNX3aSGSJuc8E.roa
Signing time: Tue 13 Sep 2022 00:14:50 +0000
ROA not before: Tue 13 Sep 2022 00:14:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:34:32:d6:e3:3d:a4:ef:06:2e:b0:f3:fc:1d:4e:40:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 13 00:14:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=757cb1c2f8018650781bb68d5f769219226e73c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:34:f2:6e:e3:05:9a:4e:8b:72:6f:75:41:d1:
93:d3:33:8f:23:8d:0c:71:f7:10:3e:a2:3c:6d:36:
17:3a:51:67:9c:c3:68:a7:ef:78:8e:a7:b6:8a:23:
60:8c:9b:2a:e1:eb:74:c3:f1:22:ad:61:56:60:83:
2a:db:ae:32:4f:c8:02:6e:04:ef:35:5f:92:5e:d9:
a8:bf:37:eb:a5:8d:77:e0:51:90:d3:21:cf:26:aa:
ed:f5:c9:c4:5c:e0:65:e5:89:2b:8f:27:5f:25:fd:
5c:90:22:9e:65:b7:5e:b4:a1:5d:28:f8:9c:64:9a:
fc:43:76:af:77:5a:07:f3:23:f1:04:5b:20:7e:e9:
0c:c2:b2:49:41:10:f3:eb:e5:e5:9c:62:00:47:32:
e5:26:3a:e7:29:61:af:99:3b:9c:0d:15:95:7e:0a:
a4:f3:e8:0d:49:60:c6:08:1e:de:5e:45:8a:8d:44:
89:ba:64:4c:d6:cc:76:bc:1e:48:21:4c:81:f0:74:
38:4c:ab:b9:c6:e2:c2:23:59:b2:7f:bd:cd:43:f6:
8e:03:37:fa:7f:42:ea:40:f7:69:b1:d3:86:bf:3f:
96:8c:a9:27:1c:43:e5:3c:31:59:7b:98:dd:3d:82:
5a:dd:e8:d4:2d:03:c9:5e:99:8f:1a:b7:c5:42:db:
67:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:7C:B1:C2:F8:01:86:50:78:1B:B6:8D:5F:76:92:19:22:6E:73:C1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dXyxwvgBhlB4G7aNX3aSGSJuc8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
15:04:16:46:11:99:26:43:bd:3f:2c:c1:8c:81:09:9f:54:b1:
95:0f:81:58:88:a1:83:bd:7b:08:6d:36:cd:92:f6:30:7e:a6:
4c:1c:3b:bf:ac:3a:ca:a1:f0:c2:27:78:46:aa:04:7f:1f:29:
4e:65:74:99:91:ad:7b:d8:59:09:b1:20:7c:c3:32:6a:9a:61:
dd:20:ec:7a:06:f9:2f:e1:da:11:bb:28:49:f2:82:34:16:61:
bc:b6:fc:73:79:df:25:37:aa:18:57:01:bb:15:86:f0:e9:67:
10:40:90:b6:2b:29:6f:fa:81:b0:3c:76:22:cb:84:97:4c:6b:
5f:3c:39:85:ff:ba:e3:c9:c7:e7:39:08:45:27:5f:d6:bc:a2:
22:87:e7:f9:69:67:da:cb:c8:05:70:fe:1a:32:f1:a6:db:ac:
bb:40:71:97:54:46:31:ee:dc:65:ea:3c:ca:9a:b3:b0:a3:23:
76:a0:5d:bf:dd:83:a9:64:1c:40:54:e5:3c:75:55:f3:3e:8c:
ba:c9:81:60:8d:be:bc:33:0b:5e:0f:de:b8:70:1c:b5:ba:b5:
49:83:29:d9:d3:6f:7d:da:f4:4e:8f:1e:c0:40:da:1a:0d:5e:
19:7a:63:70:3b:f2:a0:76:e2:0f:2b:7c:07:ff:d5:0b:9a:78:
ad:04:04:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 01:58:06 2025 by rpki-client