Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hE6dU6aqDedKbb9C4sTqQAuzyc4.roa
File: hE6dU6aqDedKbb9C4sTqQAuzyc4.roa (raw, json)
Hash identifier: YvwlrONocLp6gCQ+W2u22UBVAeq+PNOZmIgRyVxPFJU=
Subject key identifier: 84:4E:9D:53:A6:AA:0D:E7:4A:6D:BF:42:E2:C4:EA:40:0B:B3:C9:CE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 67FBE04D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hE6dU6aqDedKbb9C4sTqQAuzyc4.roa
Signing time: Sat 05 Feb 2022 02:14:20 +0000
ROA not before: Sat 05 Feb 2022 02:14:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1744560205 (0x67fbe04d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 5 02:14:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=844e9d53a6aa0de74a6dbf42e2c4ea400bb3c9ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ce:84:f5:19:47:7e:ad:68:eb:7e:c5:ba:ed:
92:bb:41:24:a0:d8:4b:5e:a1:ab:94:c8:2e:5e:36:
96:9a:b4:33:4b:38:d3:7c:6c:56:9f:71:00:39:f5:
e5:84:82:03:1d:50:88:43:33:b8:6a:2c:46:2c:1b:
8b:49:75:b7:71:f5:c0:0f:63:91:5b:80:18:07:e1:
02:a4:e6:25:57:76:e5:cf:f8:d3:37:6c:4e:ca:c8:
4e:15:ce:76:1e:67:35:09:e7:a1:8b:b0:2b:44:38:
e8:76:b7:65:1b:3e:e4:8f:4d:da:34:6e:89:81:23:
63:de:2b:bf:f7:a3:93:1b:a9:7c:d0:37:be:b5:05:
19:53:75:26:3a:9a:c1:9a:52:33:ff:5b:d6:bb:23:
40:2f:c9:19:67:92:e4:4f:19:c2:38:a6:9a:11:30:
f7:42:1e:13:ff:01:cd:f4:3a:91:20:d2:0c:53:bd:
7a:32:c9:7a:f9:60:71:d8:44:5e:c4:22:25:39:12:
a3:89:fa:cb:9f:c1:b1:59:94:7e:a1:14:6e:83:56:
d1:04:37:1a:41:c8:9d:dc:78:51:ef:77:f1:e1:9f:
ea:ae:f6:7d:c4:6f:2c:1b:60:22:f9:4e:31:3b:8e:
b0:af:3f:c7:3c:6d:96:c9:2e:aa:a2:54:ec:41:de:
e5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:4E:9D:53:A6:AA:0D:E7:4A:6D:BF:42:E2:C4:EA:40:0B:B3:C9:CE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hE6dU6aqDedKbb9C4sTqQAuzyc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3d:19:73:68:79:5f:ff:e9:84:e2:ad:d0:10:c6:f8:48:66:13:
17:79:01:30:bd:b5:7d:d1:f1:bf:15:77:42:e8:5b:06:6f:a5:
90:b7:f2:56:14:f7:18:27:c5:28:e7:11:0f:d2:8e:6e:8a:94:
20:d3:70:c7:8a:63:c5:28:9a:97:a6:94:d2:cc:4b:6f:49:fa:
f8:2b:92:d1:86:02:a1:46:53:48:00:13:12:40:b4:8e:b9:51:
e1:72:1c:7f:6f:07:30:b4:98:55:19:e0:d6:d7:44:77:24:b6:
0e:ee:a2:16:26:9e:fb:ba:14:59:1d:d7:80:16:01:84:8f:27:
01:61:84:3b:6f:c1:cf:60:e8:be:a2:b1:69:4b:1b:89:06:26:
fa:b9:8e:58:91:c2:b4:ff:c6:fa:61:56:06:85:8a:90:7b:e5:
68:af:ba:e8:10:ba:a5:02:77:5d:d4:ed:af:5a:25:6d:d1:65:
a5:79:bd:81:46:3c:5c:77:8f:4b:ae:5e:be:0c:75:6f:45:61:
31:c9:d8:18:03:85:c4:a7:af:fb:b1:17:a4:a0:2f:9b:95:db:
eb:50:75:71:4b:fa:54:03:21:0c:58:5e:53:0e:00:b6:73:0b:
81:3d:cc:21:91:c7:6f:ae:e6:18:d9:15:53:67:74:09:e7:1e:
6e:e4:12:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:50:48 2025 by rpki-client