Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/m4BLLlTKsB729Kzy1GqG75G97lg.roa
File: m4BLLlTKsB729Kzy1GqG75G97lg.roa (raw, json)
Hash identifier: 0NivDflMvKjVB+fFb2PZn6Z2ggOCeejUGckU0HOCZCM=
Subject key identifier: 9B:80:4B:2E:54:CA:B0:1E:F6:F4:AC:F2:D4:6A:86:EF:91:BD:EE:58
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184D5C0BBA483CDB78C9EE602EC2B18A381
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/m4BLLlTKsB729Kzy1GqG75G97lg.roa
Signing time: Sat 03 Dec 2022 02:11:28 +0000
ROA not before: Sat 03 Dec 2022 02:11:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d5:c0:bb:a4:83:cd:b7:8c:9e:e6:02:ec:2b:18:a3:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 3 02:11:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9b804b2e54cab01ef6f4acf2d46a86ef91bdee58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ab:8c:fe:76:c3:f4:95:e5:a4:e8:05:55:59:
05:80:56:a6:e6:13:e4:94:07:b7:b1:9e:e7:19:ec:
ab:6c:76:bf:f0:69:eb:ec:18:92:c2:18:cf:53:07:
26:e6:9c:e9:c4:be:d0:a8:12:a8:32:13:80:af:ad:
b2:ed:f9:27:a1:c7:38:f5:c5:f7:3e:17:36:85:c9:
df:49:c4:b0:a3:30:cd:dc:84:5c:45:e1:1c:ee:7a:
08:ee:c6:65:45:75:c6:c1:78:4d:1d:6b:02:92:88:
2c:04:4d:22:13:ed:40:ff:4d:e0:7d:b1:00:25:f8:
36:95:04:ff:b0:68:d0:45:b4:e6:a0:12:54:ce:44:
b6:86:bc:85:64:d9:6d:2c:e9:94:4b:e2:11:17:4d:
05:96:db:b6:56:e7:c0:c5:c2:1b:9c:58:b4:91:b7:
c8:6c:28:54:f9:c5:a3:27:fc:42:aa:02:2d:a4:cb:
88:ca:0a:94:39:de:b7:fe:9b:51:0e:3a:93:8e:a3:
08:23:25:f7:39:48:30:3b:5b:92:71:a9:a4:75:64:
97:26:7d:f6:3d:1d:f2:8f:a7:94:d9:14:9f:98:54:
47:37:90:f6:94:b8:35:de:ab:bb:e9:99:16:77:c6:
e1:47:45:00:15:d9:fe:fa:da:72:05:b7:f2:93:42:
ca:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:80:4B:2E:54:CA:B0:1E:F6:F4:AC:F2:D4:6A:86:EF:91:BD:EE:58
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/m4BLLlTKsB729Kzy1GqG75G97lg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
83:8e:90:84:1d:99:3e:7f:1d:c9:df:25:db:e1:cf:ea:74:af:
00:cb:b3:cc:62:ad:f9:44:15:c4:8f:91:47:21:bb:67:a2:df:
fb:2d:f6:26:fa:30:b5:7a:96:ee:f6:90:6e:bf:29:fb:04:3d:
60:14:8b:53:b7:75:ca:5f:5c:7c:16:77:16:aa:a3:14:94:00:
36:29:c5:37:ac:58:3c:80:dc:02:6e:06:5a:2d:36:70:a4:a8:
35:f3:ad:01:47:dc:a3:ce:1a:b5:fb:80:08:68:ad:6a:7b:57:
86:2a:00:1b:1d:2d:66:ef:9e:3e:a7:42:42:50:f4:32:2e:e8:
69:9a:de:91:32:20:35:d7:66:89:46:ce:6c:6d:67:eb:d5:88:
d5:19:87:2d:16:ea:0e:14:2c:fa:fb:9b:6e:e0:31:73:77:3d:
3c:06:ae:09:20:fe:d5:6d:da:56:2a:d0:c7:bb:d6:b8:04:a5:
bc:27:73:58:ea:63:23:a1:de:17:75:81:9d:4a:42:fa:35:19:
de:c4:22:87:a5:0c:10:ef:09:e0:04:3f:f6:53:98:16:5c:66:
9f:44:ed:44:04:11:aa:1c:7e:f9:22:8b:3b:34:a3:5b:0e:5c:
ac:04:7b:29:c6:d9:77:20:17:00:06:43:ad:da:97:5d:cb:2a:
52:d5:6b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:16:11 2025 by rpki-client