Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/g3jjlhs3G4jndK2VRRrMYnKzcko.roa
File: g3jjlhs3G4jndK2VRRrMYnKzcko.roa (raw, json)
Hash identifier: HPSZcrCzrRf30th4WiQ2yTKEI+WE7Ks8eB20291TBrA=
Subject key identifier: 83:78:E3:96:1B:37:1B:88:E7:74:AD:95:45:1A:CC:62:72:B3:72:4A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 91D3BD4B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/g3jjlhs3G4jndK2VRRrMYnKzcko.roa
Signing time: Sat 02 Jul 2022 18:12:25 +0000
ROA not before: Sat 02 Jul 2022 18:12:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2446572875 (0x91d3bd4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 2 18:12:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8378e3961b371b88e774ad95451acc6272b3724a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7a:81:d9:25:ab:b9:95:35:d0:99:17:fa:ef:
b8:6f:f7:e7:1b:13:38:11:f6:3e:a9:ec:dd:bf:7f:
7d:f7:e0:5d:a8:94:66:ac:49:92:92:1d:6c:c0:d8:
68:0c:2c:de:9f:16:28:0a:6a:54:2d:90:d9:dd:23:
5a:21:20:b7:4c:0c:da:7c:d3:93:3a:83:c7:f5:72:
21:68:28:86:81:e8:aa:db:d2:72:3e:b7:a9:4e:65:
a1:7c:35:62:4d:cc:09:19:28:dd:97:cb:df:24:db:
3d:6a:c9:11:5d:02:25:9a:fa:ac:a8:66:f4:e2:c7:
dd:bd:da:ba:3f:39:e6:36:da:c3:18:f7:d3:d4:e8:
1a:9c:ea:c5:de:d6:a7:da:7a:71:5f:78:0a:ee:13:
8c:6c:25:e1:b3:33:78:99:fe:a4:78:94:65:18:6c:
cd:37:93:79:e7:33:98:94:fd:f8:37:97:50:9e:59:
13:a0:57:5a:f1:a5:ec:49:cc:c1:c2:b7:06:0d:2d:
fb:d3:3d:ac:ae:d1:6c:e3:64:63:41:c3:25:77:65:
83:1c:bb:da:d9:cf:fd:94:f6:b6:e4:bd:88:0a:35:
22:ff:55:7f:d7:37:11:c5:29:f1:89:d5:8d:a4:76:
2b:40:77:17:2e:f4:7e:d9:5b:c6:da:9b:df:df:e2:
30:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:78:E3:96:1B:37:1B:88:E7:74:AD:95:45:1A:CC:62:72:B3:72:4A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/g3jjlhs3G4jndK2VRRrMYnKzcko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6a:b8:46:63:ae:d6:32:64:cf:c0:ec:e3:a7:72:69:56:fa:c5:
cc:71:b1:53:c0:f7:94:14:23:64:ac:4a:a2:2e:d0:0b:7d:aa:
08:35:cb:0c:e6:12:17:3a:12:67:79:b5:84:15:70:5b:09:c8:
fb:0d:33:7f:af:b4:76:ef:01:6f:57:01:9f:2f:77:7d:2b:b8:
12:eb:da:3c:ae:d5:6e:dc:19:47:9e:cf:ed:9c:7e:ab:f1:39:
63:4e:c4:6b:d9:b3:fa:61:2c:b0:21:ff:07:fd:cd:d8:03:92:
a9:4c:46:18:1c:66:b2:29:d7:94:96:e0:19:86:67:08:3c:a2:
b9:ee:1b:a3:9f:12:fe:56:86:c6:ae:a8:bd:45:50:f0:51:a4:
cd:c5:e5:d0:3a:05:93:c8:b0:cb:50:d5:91:17:09:49:b7:44:
fa:3d:41:00:d8:76:cc:06:8d:86:15:6f:a9:22:0f:df:67:65:
68:cb:ad:1f:07:2f:97:e7:25:fb:27:37:ae:77:aa:7f:38:5e:
82:51:5f:53:23:00:0a:01:5c:de:8c:7e:72:54:91:0d:a6:23:
98:78:38:ba:f2:fb:31:8e:a4:dc:e5:66:9e:23:a0:86:db:e4:
13:58:45:66:b2:69:27:83:d8:1f:e8:d7:41:cf:c2:0c:71:f6:
20:4e:c1:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:08:36 2025 by rpki-client