Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fDfaT1vOPYkxwbqw9Um7I1dDN5A.roa
File: fDfaT1vOPYkxwbqw9Um7I1dDN5A.roa (raw, json)
Hash identifier: kTfVbadNq70PDUHRpF6kz1BIoDQOcyaMAjPevbkiiQ4=
Subject key identifier: 7C:37:DA:4F:5B:CE:3D:89:31:C1:BA:B0:F5:49:BB:23:57:43:37:90
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018416922042DF334A0034F2C155CB27311D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fDfaT1vOPYkxwbqw9Um7I1dDN5A.roa
Signing time: Wed 26 Oct 2022 23:13:05 +0000
ROA not before: Wed 26 Oct 2022 23:13:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:16:92:20:42:df:33:4a:00:34:f2:c1:55:cb:27:31:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 26 23:13:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7c37da4f5bce3d8931c1bab0f549bb2357433790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:04:3c:b0:de:47:74:ec:8d:65:cb:a8:a9:fd:
cb:40:be:28:f7:3f:1d:7b:f0:cc:77:71:61:bf:53:
28:e9:11:3e:1f:66:ae:fd:41:ca:44:04:21:a0:ac:
68:60:9b:74:e2:45:ad:9f:71:61:8d:cc:5b:c9:b1:
5b:de:0b:1d:e0:f5:24:49:9c:05:98:3f:3c:5f:72:
87:21:d7:be:f1:53:ae:0d:e3:6b:ae:15:4f:a6:02:
ff:fc:79:74:6a:e6:34:12:25:0f:85:38:80:b0:03:
4b:aa:f8:92:4f:ba:90:07:2c:8b:a3:2a:ac:0a:92:
b1:1f:4d:3f:09:fe:e7:a5:e3:68:47:b5:67:8d:30:
65:51:9c:84:81:95:96:1b:53:40:b7:bd:47:b4:9f:
5b:95:3d:86:55:e6:eb:b9:6a:ab:60:9d:d9:c5:32:
d0:d3:2b:9f:99:c4:d8:20:ca:fb:63:d3:a2:92:a3:
86:f7:7f:ee:c7:49:b5:ed:4f:43:9b:3e:4a:b4:45:
06:20:4f:e6:d5:f9:07:f6:ad:4e:fe:8b:50:17:c8:
00:3a:62:7a:92:a3:4f:e8:99:1a:ac:a0:7e:5d:43:
56:fb:78:31:a0:7c:d9:2b:cb:ac:e7:49:b3:0b:24:
71:22:23:cf:2e:c4:1d:45:09:e4:07:66:d4:36:db:
fc:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:37:DA:4F:5B:CE:3D:89:31:C1:BA:B0:F5:49:BB:23:57:43:37:90
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fDfaT1vOPYkxwbqw9Um7I1dDN5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
26:6c:8e:bb:70:97:66:f3:14:5e:6f:a5:bc:8a:23:1d:50:fb:
a6:2f:01:14:32:bf:19:ba:e6:2e:24:e4:42:f4:b3:7a:56:46:
8f:cf:fc:c5:4d:74:1e:0d:d2:82:22:94:87:54:d7:f1:49:1a:
08:03:fa:44:07:a0:9f:9e:8a:2d:f9:fc:21:b7:03:a9:13:eb:
13:00:1f:b5:66:8c:b6:f5:59:0b:fe:7c:d7:47:cf:8d:8c:e7:
a0:38:88:d7:fd:fa:d0:4f:20:36:aa:48:43:c7:b3:85:57:f8:
51:a3:8d:d9:1a:12:db:a5:d2:df:5c:a3:98:10:fb:9c:81:db:
47:a2:58:ad:cc:9e:7f:33:03:57:87:32:b0:4e:f4:02:b9:ec:
42:1e:d9:3b:7f:21:52:17:00:9c:ef:4d:6f:30:fc:2f:fe:b9:
26:76:e8:a7:27:a8:2f:1c:15:0f:55:6d:c7:51:b9:fe:32:58:
82:06:44:94:c1:9e:ae:a3:bd:6f:ab:c5:7a:8b:39:56:89:36:
25:f2:9b:27:d9:db:05:29:c6:3b:9a:a1:10:bf:66:2e:78:3f:
23:e3:d5:da:44:46:a4:a3:b2:ac:57:48:6b:bf:9f:f9:36:0c:
3e:29:8a:08:80:c3:16:22:da:2a:02:ba:4c:75:ab:10:1f:66:
01:70:d2:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:00:07 2025 by rpki-client