Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ln8OPEKy0MAhbn7rZJSxVAC6e1A.roa
File: ln8OPEKy0MAhbn7rZJSxVAC6e1A.roa (raw, json)
Hash identifier: KFCbaACGpzGeMZygRyw6PLpkZX/MXGmGPDNgA7m0aCg=
Subject key identifier: 96:7F:0E:3C:42:B2:D0:C0:21:6E:7E:EB:64:94:B1:54:00:BA:7B:50
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7A64B1C8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ln8OPEKy0MAhbn7rZJSxVAC6e1A.roa
Signing time: Mon 11 Apr 2022 11:11:33 +0000
ROA not before: Mon 11 Apr 2022 11:11:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2053419464 (0x7a64b1c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 11 11:11:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=967f0e3c42b2d0c0216e7eeb6494b15400ba7b50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:01:96:8a:dc:7c:1a:2a:95:6a:ae:e2:50:ac:
0b:a8:69:b3:4f:d8:5f:a9:8d:26:88:1b:a4:5d:5e:
f8:87:15:27:15:63:7f:5a:c4:0d:db:63:2c:fe:80:
78:e5:dc:bb:eb:61:49:6b:2b:49:e7:a6:b8:04:5f:
09:10:69:0b:c4:4e:d5:f3:20:fc:c9:1e:bc:00:2b:
f9:78:b3:a8:b5:de:59:f4:70:9b:8b:05:be:a5:db:
c5:b2:eb:bf:53:ef:92:10:e0:6e:d6:b5:03:70:1c:
e5:ce:da:1f:fe:66:18:44:33:7c:7c:5c:97:d1:06:
83:bb:53:0c:ce:ec:dd:bd:35:3b:39:8f:98:60:56:
9d:e1:59:fa:36:13:9f:88:fc:9d:d5:bf:ec:6f:39:
ff:b3:13:cb:a9:03:61:9b:86:3f:39:26:8e:03:f7:
76:8a:30:80:ff:f6:c2:38:a4:a7:01:67:49:be:3c:
48:bb:41:1a:ef:2a:3e:49:42:2f:6d:3d:db:5d:8f:
81:13:8b:0c:43:49:75:45:30:fc:db:b1:88:1e:cb:
9d:4c:aa:3b:e7:07:3f:08:11:df:22:90:00:ce:2a:
f2:98:2f:c5:6e:79:f5:4c:0f:f5:2e:09:fb:52:c0:
9a:a3:20:59:81:a5:9b:5e:47:ed:ee:0a:fd:b8:b9:
a5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:7F:0E:3C:42:B2:D0:C0:21:6E:7E:EB:64:94:B1:54:00:BA:7B:50
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ln8OPEKy0MAhbn7rZJSxVAC6e1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8c:d6:17:29:6f:a1:7b:61:f7:f6:3e:f0:13:99:7b:8b:cc:60:
20:44:4e:6d:de:3f:f5:57:cb:2f:e8:c5:2e:51:10:b3:9e:3c:
4d:e7:b7:f4:cd:08:d4:39:48:79:a4:8c:a5:c1:6e:e8:98:7e:
9f:94:b4:21:37:80:63:b0:44:41:64:6f:e0:05:79:92:5d:a3:
73:bb:fb:09:1e:9c:cc:d2:7a:f9:82:62:db:e3:cc:a2:89:70:
94:a7:c3:27:ef:03:a3:af:e8:f1:05:0f:2f:2b:4a:03:1a:31:
79:e5:09:18:e0:1d:e9:01:ff:e3:42:6b:e6:c4:b7:11:08:f1:
c1:12:54:83:bb:10:85:ff:66:63:8c:82:44:e4:a4:00:b6:3c:
29:5d:cf:38:b9:9a:21:70:5e:92:ab:92:da:a0:29:2a:4c:15:
4d:ba:be:1e:44:52:d5:73:e0:4a:5e:75:e1:52:92:d3:9b:19:
22:1b:11:57:5a:e5:6c:71:f4:2c:70:f8:a8:af:92:d2:5d:5f:
39:43:b7:d3:ba:ca:6c:e4:ea:e0:10:48:0e:7e:e7:a6:ea:c7:
5b:ef:89:d8:35:10:9f:1e:85:30:9e:2c:a8:67:86:6b:a2:28:
c7:92:7e:7c:b4:5c:38:15:89:39:82:d5:3c:7c:97:fc:31:65:
2e:51:a3:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 18:45:09 2025 by rpki-client