Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/j3Oq9GLz5hTO-nimc1O4pdN4AW4.roa
File: j3Oq9GLz5hTO-nimc1O4pdN4AW4.roa (raw, json)
Hash identifier: I3S7GAhRq/zJ3iH8zJ1IgO3eUgXeoEdJdfMMf+XN/bk=
Subject key identifier: 8F:73:AA:F4:62:F3:E6:14:CE:FA:78:A6:73:53:B8:A5:D3:78:01:6E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8BCBAE56
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/j3Oq9GLz5hTO-nimc1O4pdN4AW4.roa
Signing time: Sat 11 Jun 2022 09:09:05 +0000
ROA not before: Sat 11 Jun 2022 09:09:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:181:477e:58d8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2345381462 (0x8bcbae56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 11 09:09:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8f73aaf462f3e614cefa78a67353b8a5d378016e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:08:96:9c:51:b5:9d:98:cc:fb:f6:2a:88:42:
7d:8a:e7:38:2e:7a:2a:98:87:64:4e:5f:a3:64:3a:
a7:0f:98:7d:90:c3:db:80:94:9e:c9:d8:d0:10:33:
37:62:cf:88:19:5a:71:31:2a:99:cf:02:c4:3e:3b:
8b:73:6d:af:c8:51:e9:71:b8:db:a5:44:96:ff:10:
8e:05:13:18:c3:cf:2f:ca:b9:a7:9d:83:c8:2b:34:
7a:1d:61:0b:f2:7c:1d:d4:0b:c7:b1:05:c5:e4:3d:
ea:79:a7:48:d7:78:90:73:26:94:6c:bf:5a:ff:be:
2d:d4:95:72:82:15:d2:f7:7a:df:c6:57:85:80:63:
ec:57:48:ef:be:06:f5:9b:c3:1e:a6:18:03:90:bb:
99:bd:27:9f:89:69:62:d8:2c:c4:28:89:eb:73:02:
94:c9:f2:22:d8:87:2d:52:71:33:c7:ba:f4:e1:1e:
ba:fb:d4:cb:e1:9b:0b:6e:39:2b:2a:59:80:a0:c9:
d9:a9:39:fa:48:76:b2:42:0c:a1:7a:dc:53:14:dc:
17:b9:01:e7:62:dc:dd:9f:3f:9c:28:1d:87:ca:ae:
4e:b1:fd:04:ee:6e:08:4b:57:59:b2:7a:23:f9:a3:
d3:7f:1e:96:f4:4d:50:99:14:e9:c5:a2:69:75:ed:
27:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:73:AA:F4:62:F3:E6:14:CE:FA:78:A6:73:53:B8:A5:D3:78:01:6E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/j3Oq9GLz5hTO-nimc1O4pdN4AW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1f:9e:60:b9:bb:ba:42:b9:31:14:de:cb:db:a1:fe:ec:c2:98:
0c:ce:aa:d0:63:d6:ab:99:27:13:c8:58:40:d6:af:cc:4e:37:
41:40:c3:c7:26:25:0a:16:eb:13:34:ea:e0:07:84:f7:18:a9:
4a:f2:7a:df:f9:19:33:cc:df:80:41:33:5b:05:0f:c1:cd:7b:
27:3d:ec:0f:79:05:67:ab:51:53:16:7b:7e:4c:c9:88:3b:6c:
cb:01:2f:fe:95:01:aa:2e:8b:02:3e:63:c2:f8:22:88:1a:b9:
15:13:b1:26:cd:ac:af:9f:8f:8c:27:d8:22:b2:a4:66:0e:4d:
a9:38:7a:83:d7:af:68:c5:be:71:9d:9b:3f:d1:02:c3:d5:60:
a5:83:43:1c:05:3c:a8:32:a7:42:27:7f:96:5d:28:27:52:d4:
a1:4e:19:e8:92:ef:07:1a:f3:93:de:e9:f6:ce:47:31:43:f0:
0d:cb:60:24:a7:bb:cf:44:5c:f3:21:70:22:03:51:93:b0:af:
90:57:f7:cc:87:c7:80:30:77:7b:a6:91:ea:d7:67:cd:4a:03:
0c:e1:d0:35:70:58:de:71:d0:b4:92:02:84:38:4f:70:da:20:
b3:c8:93:3f:aa:15:5f:5f:ca:6e:21:59:06:55:13:d3:58:dd:
83:4e:34:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:06:03 2025 by rpki-client