Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kSHmUkJ_5dcq0DTIYtdjOa9zHRw.roa
File: kSHmUkJ_5dcq0DTIYtdjOa9zHRw.roa (raw, json)
Hash identifier: HJHHhnMhmYaG8wBDsxlL374o6B9kC11jkJ3xYGJp9dE=
Subject key identifier: 91:21:E6:52:42:7F:E5:D7:2A:D0:34:C8:62:D7:63:39:AF:73:1D:1C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 91343100
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kSHmUkJ_5dcq0DTIYtdjOa9zHRw.roa
Signing time: Thu 30 Jun 2022 15:12:02 +0000
ROA not before: Thu 30 Jun 2022 15:12:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2436116736 (0x91343100)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 30 15:12:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9121e652427fe5d72ad034c862d76339af731d1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:23:a5:fe:8c:8d:18:a8:92:e4:fa:8b:b4:2f:
04:12:f5:1a:7d:9d:11:b5:4d:d5:78:29:01:89:f4:
46:94:27:49:1c:82:1d:58:ba:51:63:f4:8f:fb:33:
e5:11:86:46:13:db:2d:ed:ee:1c:e6:d5:21:22:e6:
8c:8f:d5:5a:ce:10:7e:72:f3:fa:8b:ac:17:1a:8b:
ae:d9:64:92:54:34:78:7d:1c:32:c4:c5:e5:da:7b:
01:42:b1:32:44:60:34:98:c7:20:eb:5f:0d:0e:ca:
e2:33:72:f8:5d:6a:cb:45:ba:ff:73:88:fe:6b:57:
11:2b:a3:29:e2:f7:a3:53:e9:8a:3d:f0:a7:fa:b1:
d1:8e:e7:77:fa:34:55:04:8f:fa:60:cb:25:60:6c:
ea:10:11:0a:16:6c:47:c6:97:62:cd:de:16:a4:02:
7b:c1:b6:ea:f9:4f:3f:b4:2e:21:bc:85:0c:ac:48:
b3:9f:58:ec:0c:3c:9d:88:00:f6:89:38:70:26:59:
22:8a:62:5b:04:27:e0:97:39:d5:63:09:d3:f1:65:
9a:a9:32:c5:f3:e6:5a:f1:02:5b:82:93:e1:d6:f9:
71:b0:04:e2:1f:53:dd:cf:4d:a6:d2:89:87:bc:92:
07:a7:a6:d1:93:76:af:af:30:04:8f:a5:d1:49:f2:
0a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:21:E6:52:42:7F:E5:D7:2A:D0:34:C8:62:D7:63:39:AF:73:1D:1C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kSHmUkJ_5dcq0DTIYtdjOa9zHRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
28:e9:34:53:bd:98:5f:3a:6a:5d:d1:4b:66:18:26:7e:52:30:
c1:d1:5a:20:91:08:9c:da:97:11:a7:ea:d2:79:bf:79:a7:2b:
d4:51:65:f5:11:4b:4d:c7:2f:55:d2:06:f2:e3:87:80:de:4a:
76:e5:d5:f3:27:be:55:64:9b:1f:2e:82:e9:87:55:69:5d:ae:
df:d2:d8:a0:93:ec:97:71:00:ce:7d:4e:3b:b3:8f:bf:1d:bd:
4a:89:e7:83:a8:92:57:39:d7:a8:24:21:0e:83:23:30:6c:b0:
7f:20:6c:6e:3d:10:5b:bb:a8:32:24:a8:36:a1:5b:85:9d:fc:
9f:b9:44:e0:43:b2:a8:4c:ab:9c:b6:e2:79:57:7f:51:42:f8:
c6:3b:58:33:95:b7:b0:e2:e6:a8:6b:27:ca:57:9d:36:1c:bc:
da:98:0b:02:86:61:4a:d2:15:73:ee:eb:84:17:66:35:55:65:
45:de:c5:b0:e3:a6:a8:f0:1e:1b:39:c3:dc:ba:e3:16:f9:f6:
fe:c0:fa:be:60:7c:6f:84:74:a9:01:13:18:63:db:9d:cf:11:
0b:8a:0a:3b:d4:d2:91:3b:e6:44:78:bd:a7:91:4a:0e:5c:e4:
f1:b6:f4:f6:e7:b9:8e:27:01:55:57:03:24:e2:fc:63:87:90:
c8:1c:b5:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:02:54 2025 by rpki-client