Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/e0U1KKc-kx565VVm0WZCahk2YeQ.roa
File: e0U1KKc-kx565VVm0WZCahk2YeQ.roa (raw, json)
Hash identifier: SMFGbaKaQlgs0OpL9IDd2E5WSo28r8wCu7gYzZ6/PG8=
Subject key identifier: 7B:45:35:28:A7:3E:93:1E:7A:E5:55:66:D1:66:42:6A:19:36:61:E4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184308D8983CC4B434A74FDCE16ED5E535C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/e0U1KKc-kx565VVm0WZCahk2YeQ.roa
Signing time: Tue 01 Nov 2022 00:18:12 +0000
ROA not before: Tue 01 Nov 2022 00:18:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:30:8d:89:83:cc:4b:43:4a:74:fd:ce:16:ed:5e:53:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 1 00:18:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7b453528a73e931e7ae55566d166426a193661e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b9:41:ec:34:3b:2e:2a:db:d8:58:dd:06:79:
5e:5b:42:51:4c:7e:4a:47:5c:08:7f:8a:8c:29:0c:
29:8e:40:69:63:2e:f1:cb:f7:b0:f6:e4:2a:5e:e7:
27:ae:b6:b1:3e:32:73:13:18:d8:12:a1:b6:35:56:
64:db:6d:37:60:f7:10:f7:39:5a:cd:45:c4:a4:de:
f2:7e:16:33:a6:6c:28:0a:23:fa:28:ff:fe:c5:62:
0f:99:02:d8:1f:a7:3a:7f:af:11:dd:c4:3f:82:89:
5f:87:44:cc:49:e3:0f:bf:3d:1d:e1:e2:82:9e:74:
22:f2:12:e7:cd:16:a4:34:18:34:06:d6:ad:28:85:
ee:23:f6:15:bb:a7:ca:b3:8d:70:85:03:a3:4b:67:
26:86:b4:bc:50:00:c1:50:9e:3b:6d:12:88:da:cf:
8b:81:b9:f7:04:c8:7b:61:5f:49:3c:49:57:cb:d6:
8c:f5:54:cb:89:74:38:b8:21:95:dc:ed:8d:de:f2:
67:f4:e5:e8:b8:f1:22:27:4a:31:a7:b1:55:d6:f8:
4a:1d:47:1f:29:42:18:16:c3:64:3c:b4:3e:1d:b7:
8e:86:d3:e1:42:47:73:28:10:38:f0:a1:50:d0:9b:
65:f6:c0:df:f9:ee:e8:37:69:79:4a:2c:5f:cb:5f:
cf:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:45:35:28:A7:3E:93:1E:7A:E5:55:66:D1:66:42:6A:19:36:61:E4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/e0U1KKc-kx565VVm0WZCahk2YeQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9f:c2:b9:ee:06:18:d9:3b:b4:d2:30:fd:00:fc:9f:8c:9a:6e:
5a:39:39:7a:3f:2d:0a:21:24:20:26:ff:87:c6:43:bb:5d:bd:
fd:11:96:bd:13:07:9b:70:e8:15:71:65:bf:59:85:ad:f5:67:
c2:c1:ae:e1:1c:66:f9:db:1a:5b:f4:7b:24:c5:34:77:bb:63:
81:98:67:50:53:4e:ee:ff:07:f2:9c:6a:75:20:c1:f0:90:6e:
fb:a4:b6:d0:20:91:c1:1c:66:57:3f:59:64:24:d8:93:13:ef:
df:1a:21:44:d1:2a:4b:ea:9a:d2:33:b9:03:b7:b6:48:26:32:
c2:85:f4:bd:4b:a6:0d:2b:a8:b6:71:e9:14:26:36:41:b3:09:
6c:47:01:77:0f:03:5c:b4:e4:9e:bc:25:36:29:0e:27:b5:c0:
87:38:78:1c:30:39:b9:2f:d2:0e:16:a8:ad:0e:f2:f7:bf:05:
6d:f9:30:1f:c0:04:00:f6:99:9f:8b:02:d1:2e:47:cb:06:fb:
b6:dd:03:d9:1a:68:7a:e7:7e:10:ce:07:9a:65:1f:0e:b7:be:
5d:e0:e3:e2:a0:d6:a2:4d:3a:b6:3b:c1:75:3e:9b:04:15:03:
10:c1:82:5d:23:0f:39:a2:75:19:a5:57:61:cd:eb:f0:4b:b0:
6c:68:fb:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 16:29:30 2025 by rpki-client