Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/edcYwHRSFTZSCoheSmdo09tc2Iw.roa
File: edcYwHRSFTZSCoheSmdo09tc2Iw.roa (raw, json)
Hash identifier: i6BC2KsC3kkB8lFAB99YQrFr7+n7FmIqc9vWdsGi0II=
Subject key identifier: 79:D7:18:C0:74:52:15:36:52:0A:88:5E:4A:67:68:D3:DB:5C:D8:8C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 9015C54B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/edcYwHRSFTZSCoheSmdo09tc2Iw.roa
Signing time: Sun 26 Jun 2022 20:11:42 +0000
ROA not before: Sun 26 Jun 2022 20:11:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2417345867 (0x9015c54b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 26 20:11:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=79d718c074521536520a885e4a6768d3db5cd88c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:49:cb:c8:48:c2:e0:b9:71:b7:aa:af:52:3b:
6a:a6:3e:a8:b2:a8:f8:be:8c:2a:39:da:85:95:40:
f3:7e:1d:13:7c:7a:28:79:41:12:bf:28:45:8e:38:
e1:0d:3d:f4:1c:26:21:70:f1:73:71:c1:ca:59:45:
29:23:51:db:f5:2f:ee:35:07:80:17:c9:1d:c4:fb:
99:a0:25:53:73:5b:b8:b3:c6:fe:23:05:13:7d:97:
4d:67:4d:ff:5e:9e:82:a4:34:c2:f1:57:f2:a8:43:
95:58:3b:3f:37:0d:90:70:9e:d1:7c:cd:3c:92:67:
52:b3:92:a2:78:42:2c:31:eb:39:b6:4f:0b:65:6d:
23:89:1f:a5:7b:8c:c2:fa:0e:a9:e4:22:f7:fd:c1:
09:e5:6f:9d:44:5f:97:a9:52:bf:be:0f:0e:f5:3a:
33:2a:46:70:bc:18:ce:d3:91:74:62:b5:d9:ad:c1:
d4:59:e3:38:be:da:ea:bd:bd:33:32:be:fc:ac:3a:
46:1d:8e:ab:60:4a:3a:72:72:74:86:42:a1:f3:c3:
11:23:67:87:77:43:e0:96:b1:78:60:a6:71:ca:b0:
1d:f5:e6:b8:46:6a:11:24:05:20:76:6c:2b:c4:c4:
fe:70:ab:bc:8c:37:9c:8b:8e:80:aa:cf:50:df:5c:
c1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:D7:18:C0:74:52:15:36:52:0A:88:5E:4A:67:68:D3:DB:5C:D8:8C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/edcYwHRSFTZSCoheSmdo09tc2Iw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b5:9c:f0:cd:ea:f1:44:6d:39:89:30:8a:af:a5:96:c8:b3:7b:
80:f5:f1:74:c5:39:11:65:de:f5:af:d9:4f:2e:17:48:69:c7:
39:8a:35:40:88:2a:3a:a5:d4:70:d8:31:3d:cf:59:be:8c:b4:
2a:66:9f:4b:ac:7b:11:28:ab:ad:8a:dc:cd:e6:9b:04:71:23:
80:59:4b:3a:d5:19:14:c6:e9:2e:ca:a2:ab:5d:2f:c5:dd:6f:
b9:82:61:80:56:9f:78:44:53:8c:03:b0:dc:75:6e:05:45:0f:
49:b2:a3:52:0c:61:43:82:a6:3d:79:b3:a9:74:a4:b4:2e:f2:
7b:6f:73:a2:9b:f9:c0:a4:12:20:30:19:0e:db:1e:a1:e1:16:
5a:a7:48:6e:78:53:ba:66:11:82:0b:e2:29:2a:a7:e5:39:40:
60:95:e6:ad:bb:c8:a7:83:30:ba:0a:a0:b9:fa:bf:b9:ec:20:
b4:cf:0a:03:7e:b2:94:30:0b:1d:71:01:b8:c7:b8:04:94:32:
29:39:f8:0e:2f:c0:bb:e5:51:73:18:ad:a1:7e:53:16:c3:9c:
08:6d:a2:2f:fe:1b:71:f3:da:9d:4d:28:d3:e5:1d:d6:93:5b:
2b:1b:99:bc:c4:89:da:7d:7e:7b:78:2f:7c:12:0e:4c:81:06:
c2:e7:fd:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:06:02 2025 by rpki-client