Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/inouGyP3WVZ2xyzyJijw5DQdwQ0.roa
File: inouGyP3WVZ2xyzyJijw5DQdwQ0.roa (raw, json)
Hash identifier: 6A0HiOK+Wn8uDS3H3hdUrGS23nMxx0tkXxnNypIS6oQ=
Subject key identifier: 8A:7A:2E:1B:23:F7:59:56:76:C7:2C:F2:26:28:F0:E4:34:1D:C1:0D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01854661A30F10740DF9B26646DFF355883F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/inouGyP3WVZ2xyzyJijw5DQdwQ0.roa
Signing time: Sat 24 Dec 2022 23:04:41 +0000
ROA not before: Sat 24 Dec 2022 23:04:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:4661:2c0e/128 maxlen: 128
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:46:61:a3:0f:10:74:0d:f9:b2:66:46:df:f3:55:88:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 24 23:04:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8a7a2e1b23f7595676c72cf22628f0e4341dc10d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a6:d8:70:ec:f1:3a:db:8e:fb:89:79:ce:71:
81:89:97:04:8a:bf:e2:1e:ef:1f:ee:97:40:5b:33:
79:37:af:88:cc:0f:cf:5f:ad:3b:5c:37:63:36:2c:
f8:00:46:53:b0:2f:5a:03:39:9c:1d:62:b7:00:02:
5c:20:72:3e:91:0a:d5:29:b1:84:50:e0:58:4d:a5:
aa:45:0f:bd:89:80:64:ea:ec:75:55:d7:eb:b6:26:
14:fe:08:bb:45:4b:8d:00:c2:d3:3e:be:ca:b0:9a:
f9:22:ce:c4:a6:7f:2b:28:54:24:07:34:12:32:4d:
5c:1e:3f:3c:4f:49:45:a4:6e:1d:3e:a8:08:fb:e2:
6b:06:30:72:8c:77:3f:bc:f2:18:fa:0f:e1:99:e1:
ee:15:ff:4e:a7:dd:62:34:18:b3:3e:78:74:45:92:
7b:bd:a5:a4:72:5e:f5:80:42:a7:15:db:f4:89:76:
68:c1:e8:ec:a5:68:fa:e6:8d:e5:70:28:41:42:50:
c3:f9:b5:69:73:3f:c7:33:14:2c:06:e0:52:65:f6:
5a:ca:57:b5:ed:e3:9c:3c:35:a7:04:d7:33:8f:c7:
10:80:a8:73:56:36:16:a6:20:86:82:65:d7:e6:1d:
11:42:25:1c:9b:15:2e:68:4b:1c:bc:63:38:e3:26:
99:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:7A:2E:1B:23:F7:59:56:76:C7:2C:F2:26:28:F0:E4:34:1D:C1:0D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/inouGyP3WVZ2xyzyJijw5DQdwQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
03:c5:55:b9:b9:95:eb:f0:47:36:58:02:dc:36:57:cf:98:14:
0a:08:68:57:ad:af:e4:09:fd:18:ce:7d:e1:9e:40:55:cd:00:
a6:1d:45:51:c2:39:1a:46:91:de:ec:07:df:78:00:46:ae:48:
be:05:1b:2e:84:08:b4:c4:70:28:b6:11:c4:e4:e6:82:07:b0:
f7:9b:cb:91:ed:d7:86:b2:14:15:0c:ca:db:60:39:b3:35:64:
13:b7:dc:f9:76:ed:ef:cd:55:1f:fa:3c:e1:01:0d:0c:82:4d:
e2:2e:25:72:36:7b:c0:4f:f3:61:52:f8:91:00:6e:ea:2a:cf:
1f:0b:2d:4c:a2:ee:fb:ca:b2:1f:14:c4:cc:a7:19:eb:a7:79:
04:e7:10:04:0f:38:c0:ad:20:39:b4:6f:79:62:de:a8:49:d9:
b8:5f:60:e4:8f:59:8e:65:15:bf:91:26:cc:1d:8c:a7:f1:86:
5e:f9:f0:34:0d:ca:d3:af:2d:15:ea:f4:73:ac:e3:bd:ba:ff:
5b:d6:e4:cd:5d:15:c9:10:93:ce:db:b0:21:8b:13:eb:63:a2:
4e:2f:b3:b7:c9:eb:ed:1f:1b:a2:4f:69:55:1e:59:09:92:71:
bc:df:29:0b:9e:ec:06:45:b5:c1:0e:16:04:59:7d:fe:1e:0c:
a2:6a:1f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:20:32 2025 by rpki-client