Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/is1hsMeq7ZBK3j_3pf1zfcI7wOU.roa
File: is1hsMeq7ZBK3j_3pf1zfcI7wOU.roa (raw, json)
Hash identifier: 2+6VWEJpHMHkksMupRG/i5RZks8GFGA3+hkX+mZt5DE=
Subject key identifier: 8A:CD:61:B0:C7:AA:ED:90:4A:DE:3F:F7:A5:FD:73:7D:C2:3B:C0:E5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01854551B9C6B072F6A8B97BD1B820796196
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/is1hsMeq7ZBK3j_3pf1zfcI7wOU.roa
Signing time: Sat 24 Dec 2022 18:07:41 +0000
ROA not before: Sat 24 Dec 2022 18:07:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:45:51:b9:c6:b0:72:f6:a8:b9:7b:d1:b8:20:79:61:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 24 18:07:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8acd61b0c7aaed904ade3ff7a5fd737dc23bc0e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:bf:93:42:8e:66:e7:f6:c6:f2:98:9c:67:b3:
7a:25:4c:e3:64:5b:7a:69:9b:16:79:85:eb:a3:68:
e1:cf:16:db:4e:b5:36:56:8c:f3:f6:69:4b:8a:b3:
9e:20:51:33:43:85:f1:e6:51:2a:49:6b:a9:d7:86:
ae:26:e1:ef:9e:42:54:89:59:da:a5:ed:60:6f:14:
10:cb:a3:60:ae:80:b5:af:de:2c:23:40:94:1f:71:
ae:d6:c7:ad:26:b2:2c:25:2e:98:8d:d5:ab:12:ca:
3d:58:41:3d:64:f1:dd:42:52:d3:50:0b:60:24:ce:
ae:5f:83:af:19:e0:29:ed:80:b8:69:df:e0:4f:b5:
51:05:d9:b3:16:e6:59:b0:75:6e:34:68:a5:0a:af:
c0:7b:2b:73:14:7f:3b:f5:ad:7e:3f:9d:71:fe:3e:
ff:7f:df:cd:7a:09:0f:f2:10:ac:16:a8:4c:de:65:
20:d0:10:b9:34:1f:1a:a7:37:01:bf:a3:00:a2:26:
69:e7:2f:6b:23:3e:62:81:1a:89:d2:0e:9a:50:dc:
10:fc:34:c8:70:8e:54:d3:e7:68:02:35:fb:ed:59:
dc:73:86:c2:5f:a5:d1:74:1a:17:07:d6:9f:d5:24:
08:94:01:8e:34:e8:8b:01:1e:6d:4a:2c:16:8e:c9:
5c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:CD:61:B0:C7:AA:ED:90:4A:DE:3F:F7:A5:FD:73:7D:C2:3B:C0:E5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/is1hsMeq7ZBK3j_3pf1zfcI7wOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a8:5f:aa:3e:59:c5:39:b6:a4:5a:3f:62:e8:5f:9c:30:ad:9f:
a1:54:c8:37:4a:16:73:d0:51:c3:77:58:84:07:43:a3:93:b1:
e8:67:2b:bb:b8:98:bb:b4:a5:19:25:33:5b:50:6d:3a:91:d1:
f3:5b:87:50:a0:fa:b2:3c:6c:fe:9b:14:30:70:43:85:17:84:
b7:cc:a5:a0:fb:27:64:a8:02:d9:76:8a:7c:1a:25:85:33:91:
2d:89:6b:a8:ef:5b:e0:33:5d:fa:37:98:4f:84:ea:5a:39:9f:
12:0c:f0:97:14:06:78:62:af:2b:ce:5f:16:0b:ef:98:d9:ce:
c2:75:16:a3:12:98:fa:cd:72:b0:d6:9a:d4:25:0b:a5:60:81:
eb:65:4a:e8:53:47:b1:44:90:c0:a6:44:52:13:f8:f9:0f:86:
a2:ff:b1:0e:bc:16:6c:ba:e7:1f:8d:46:91:c7:bf:68:51:60:
e5:2f:8d:4e:cd:ca:49:b8:b3:98:56:22:c7:90:ff:88:81:10:
4f:1c:31:8e:78:16:a6:c2:c4:bd:6f:87:ff:81:b8:61:d5:a1:
8b:e9:15:50:86:f3:a0:e9:22:5d:93:a7:e3:d6:8a:98:30:83:
88:66:1f:b6:2b:a4:30:ad:9e:13:e5:d4:bc:46:48:e7:72:9e:
d6:60:03:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:40:58 2025 by rpki-client