Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mytJeZKCScjcdaMQoHuy92yLjvQ.roa
File: mytJeZKCScjcdaMQoHuy92yLjvQ.roa (raw, json)
Hash identifier: sGXqa9SzzKiU/zLinD2gOS7fOlBBQ0tK0YkjeQmghFA=
Subject key identifier: 9B:2B:49:79:92:82:49:C8:DC:75:A3:10:A0:7B:B2:F7:6C:8B:8E:F4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7C1D9681
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mytJeZKCScjcdaMQoHuy92yLjvQ.roa
Signing time: Sun 17 Apr 2022 14:16:34 +0000
ROA not before: Sun 17 Apr 2022 14:16:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2082313857 (0x7c1d9681)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 17 14:16:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9b2b4979928249c8dc75a310a07bb2f76c8b8ef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e0:14:6f:54:66:a4:8e:b2:38:c1:42:3d:1f:
82:ac:59:1e:d7:b6:d2:d8:3b:a4:eb:77:d9:87:6d:
23:92:53:03:98:9d:57:c8:b1:e6:c4:3a:38:ff:11:
90:ba:5a:c1:0d:44:7a:4d:af:3f:d2:4c:a7:c6:76:
63:91:4e:17:f0:87:67:95:a1:c4:2f:6a:bf:51:60:
8f:84:1c:62:bd:92:23:0b:3c:5b:ef:62:0c:6a:08:
90:b3:69:13:c8:79:d9:61:a6:29:45:37:6d:f0:2e:
8c:d9:ea:6c:60:a6:44:4a:fd:ab:bc:ae:6a:ff:17:
db:d1:58:29:98:c6:4a:e4:d6:83:79:6a:86:84:da:
81:34:9a:c0:39:ee:25:64:ab:79:b5:55:5c:a6:35:
e8:1b:a8:26:5d:98:ef:d3:ad:60:6b:83:be:69:7e:
2f:d8:c8:3e:b0:08:5e:b7:fa:fd:7c:22:7d:1f:7b:
05:d0:1d:31:68:98:4d:19:d0:6e:d6:6d:24:7f:96:
a7:6b:fc:29:62:07:25:4e:65:41:7c:14:13:6c:2a:
08:da:73:d0:63:e8:bf:66:22:3d:31:ac:90:f3:f5:
67:06:93:c6:cf:fb:32:fb:45:5d:80:d8:ff:17:9b:
62:85:da:db:6e:d6:5a:0e:7a:36:ef:18:4d:97:a8:
d9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:2B:49:79:92:82:49:C8:DC:75:A3:10:A0:7B:B2:F7:6C:8B:8E:F4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mytJeZKCScjcdaMQoHuy92yLjvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
06:55:4f:e9:b3:e6:5a:54:01:df:8e:4d:bb:f7:93:8b:a3:d1:
fe:d4:5c:53:8c:57:95:a1:91:d3:03:79:b1:89:9b:0a:ba:83:
a3:06:e6:a0:3d:ec:39:67:c0:1a:77:6a:a2:59:d0:19:29:87:
df:63:37:8d:8f:3d:74:3a:85:11:d1:b4:1f:88:4a:0a:9b:61:
58:eb:14:b8:01:86:61:b4:33:59:82:b6:76:80:bc:15:8a:95:
73:32:d4:f1:51:be:ca:10:af:ff:0e:7e:b2:fd:99:76:35:0c:
ed:32:b1:12:1d:f3:cf:f1:6b:04:7f:ff:a5:75:6e:05:2f:fc:
c4:b5:d2:06:7f:cf:38:b4:a8:e5:c7:d4:33:4c:f9:fc:67:4a:
99:c6:0a:5d:22:55:f1:57:57:fb:2e:20:d8:71:a4:41:21:66:
03:8c:ec:6f:f3:78:0a:02:ab:41:42:1e:ee:eb:82:e5:bb:54:
54:d6:89:8a:8a:88:cf:89:be:37:cb:c9:bf:92:08:0c:fb:05:
3c:47:06:aa:bf:1c:36:31:e1:7e:3f:5a:bf:70:fe:20:9b:49:
51:e1:7d:25:a6:ba:a6:e7:55:cf:51:3d:fe:1b:46:9b:d4:73:
35:af:32:c5:9c:2b:ca:a3:68:1d:28:04:b1:63:6f:df:e6:34:
ed:57:9b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:46:42 2025 by rpki-client