Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/i4U1NOaWXN6yhAauFKUU0RGWUNg.roa
File: i4U1NOaWXN6yhAauFKUU0RGWUNg.roa (raw, json)
Hash identifier: Gi9r+feAD36NsAqugVOKEfRS8mjxcA0HdSbNQ36GtrE=
Subject key identifier: 8B:85:35:34:E6:96:5C:DE:B2:84:06:AE:14:A5:14:D1:11:96:50:D8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0181F8F9CFAACD96645EF630F8FB7ADE3D55
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/i4U1NOaWXN6yhAauFKUU0RGWUNg.roa
Signing time: Wed 13 Jul 2022 19:12:10 +0000
ROA not before: Wed 13 Jul 2022 19:12:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f8:f9:cf:aa:cd:96:64:5e:f6:30:f8:fb:7a:de:3d:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 13 19:12:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8b853534e6965cdeb28406ae14a514d1119650d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:7b:04:47:c4:d7:a6:9a:bc:e7:58:a3:64:e1:
c9:a2:65:45:61:a7:5c:3a:2e:d7:d0:a3:9a:4c:85:
7e:6d:61:3d:39:92:64:84:4f:41:a1:c0:6d:42:e6:
54:11:71:b4:56:7f:79:bd:5b:80:ee:17:82:16:60:
95:32:53:b1:cb:eb:d2:ab:fc:f4:bb:9b:ca:47:91:
b3:fd:ef:0c:e4:d7:37:a9:4e:b8:82:61:c0:1b:09:
8b:62:c8:bf:6e:6b:97:0f:1a:77:a6:57:33:66:b5:
ed:92:ed:16:86:84:c9:cd:5f:64:48:f9:4b:e2:79:
55:ea:c2:99:84:e0:08:21:56:ae:ac:c7:c9:6c:dd:
c8:ad:94:e4:13:48:2f:83:73:51:63:92:6d:99:02:
b9:db:eb:89:09:c4:b6:6e:e2:17:92:09:31:84:5c:
f9:d0:62:05:49:e6:af:04:a6:67:87:fb:ca:aa:7b:
d4:b9:ec:f6:39:28:a7:38:13:c2:d6:0e:85:8b:d2:
1b:e0:4b:e7:6c:94:ea:fa:9e:27:f7:41:cb:42:ee:
c9:25:4d:1e:05:e0:a7:7b:bb:85:1b:6e:db:18:16:
1a:e4:2d:d6:9b:a9:c7:87:c0:39:75:0c:94:c9:3d:
af:38:b9:d8:01:d4:5b:eb:69:8f:40:1c:15:0f:4e:
9a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:85:35:34:E6:96:5C:DE:B2:84:06:AE:14:A5:14:D1:11:96:50:D8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/i4U1NOaWXN6yhAauFKUU0RGWUNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
af:f8:0f:d3:29:8f:36:fc:62:a4:49:06:4b:a2:ac:c4:51:c3:
50:16:64:0a:88:be:21:2e:65:d7:7b:2e:f0:df:42:90:72:e0:
77:c8:dd:d6:a4:23:e4:c4:f1:2c:c7:fa:96:ca:8d:54:31:1e:
e7:1b:87:95:ff:40:92:b7:34:49:e8:db:4b:e2:28:c8:cb:eb:
02:5d:a9:ff:9b:8e:87:b2:5d:3a:91:80:41:af:90:b1:4e:08:
11:30:74:db:3d:f5:72:89:24:4c:25:a6:70:d2:24:ba:81:cd:
3e:86:47:0a:31:3f:36:0a:d8:a0:03:8c:84:96:d4:91:dc:52:
59:5c:27:5b:82:2f:4f:5b:5f:de:1d:9c:10:94:db:b0:df:80:
90:d2:24:08:ef:2e:ac:03:c4:4a:f7:87:ed:43:c5:22:76:bf:
fe:4a:9f:2e:c8:43:2f:7b:b9:ac:28:0b:4f:5f:40:e6:56:e2:
7f:a3:86:a7:de:b8:79:7d:e4:6b:42:db:37:45:00:fd:51:9d:
73:39:7c:11:84:9c:d3:c9:f3:a4:02:c9:04:b9:db:3b:60:0c:
cc:18:cd:d2:e2:4c:8b:4c:20:9c:d2:67:f1:a6:fb:89:b6:c8:
80:de:69:2f:f6:20:9a:de:07:ab:c1:6a:e2:a1:3b:22:d3:f3:
8f:94:7f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:43:27 2025 by rpki-client