Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/o2o9ZaencNXObvT4vt4ZhDqXLpw.roa
File: o2o9ZaencNXObvT4vt4ZhDqXLpw.roa (raw, json)
Hash identifier: p3l/6no8R5YmLE57cQlm8e176s65Zd35OTx7o9zBBZs=
Subject key identifier: A3:6A:3D:65:A7:A7:70:D5:CE:6E:F4:F8:BE:DE:19:84:3A:97:2E:9C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01821BF788349D65E53BF51B47ECC3646604
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/o2o9ZaencNXObvT4vt4ZhDqXLpw.roa
Signing time: Wed 20 Jul 2022 14:16:23 +0000
ROA not before: Wed 20 Jul 2022 14:16:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:1b:f7:88:34:9d:65:e5:3b:f5:1b:47:ec:c3:64:66:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 20 14:16:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a36a3d65a7a770d5ce6ef4f8bede19843a972e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:44:91:fe:32:46:bd:f5:9b:12:0d:1f:7e:ce:
cf:bb:72:c0:96:23:56:31:90:27:e3:98:7e:dd:2e:
cf:8e:79:e7:41:ee:fc:8b:70:3c:7a:a1:51:02:65:
79:61:3c:44:8e:c5:2f:0e:24:8f:db:9e:34:fb:23:
0b:24:4f:43:b1:fe:03:15:2d:20:f7:43:16:19:87:
f7:62:3e:a0:84:28:46:5c:60:3e:f0:9b:98:a8:ec:
3b:f5:41:19:86:15:be:ed:aa:d8:04:f2:24:3e:54:
8b:d8:b8:2e:3a:a5:1f:b3:58:0c:6a:81:51:ba:d8:
e4:1c:95:83:d0:65:ef:71:c1:61:2c:4c:34:7c:03:
04:10:4e:5a:69:d2:15:68:14:c6:2a:6a:d4:b0:a7:
5e:c5:e3:88:e1:18:cb:04:06:34:0e:5c:17:8e:08:
17:d3:61:3a:84:48:8c:33:a9:bd:93:96:02:7c:ba:
ba:3d:b7:70:7b:35:ac:a5:51:a6:26:55:57:af:c2:
89:ef:58:6b:12:c4:c2:a9:e6:08:84:b5:84:ef:ad:
a1:10:71:23:77:3f:33:38:79:e8:6e:b3:29:e0:f8:
f4:d0:f4:b8:85:f2:09:4b:9e:b0:90:1b:90:b7:92:
df:24:51:11:0d:68:7c:7d:fd:3f:43:dd:46:6a:57:
96:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:6A:3D:65:A7:A7:70:D5:CE:6E:F4:F8:BE:DE:19:84:3A:97:2E:9C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/o2o9ZaencNXObvT4vt4ZhDqXLpw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4a:25:9a:bf:8d:a9:74:dc:8e:b0:7c:1a:be:66:6c:f8:b2:72:
4f:0f:0b:c3:80:27:90:e2:9b:76:d0:38:cd:82:c9:42:17:0e:
86:2b:4c:57:cf:97:f1:1a:1c:69:27:d6:4b:f9:43:d8:e3:5c:
2e:cf:f5:37:31:7e:20:0f:8e:64:c3:d3:99:63:ed:9f:e6:cf:
61:a1:0f:94:84:31:1b:fe:c0:3c:90:0b:dd:3d:f2:f1:bd:96:
61:45:a3:1e:1f:b5:47:37:45:cb:72:be:0f:39:52:6f:50:66:
a0:c5:97:2a:59:8d:d7:50:e5:ad:8f:2f:a0:49:ce:74:a6:26:
32:3c:1c:68:ca:62:c1:ee:ad:36:bd:ff:96:e8:66:fe:f3:35:
88:cb:2c:57:3b:8b:3d:0b:27:f2:4b:8e:ed:18:07:32:0a:a2:
7d:69:1b:bf:87:60:e8:c6:c3:94:61:61:8e:bf:34:fc:08:7a:
3b:0e:18:ad:22:af:34:e8:fc:63:d1:f1:77:f5:b3:d5:ca:c2:
b3:fd:1b:30:3b:e0:4e:4b:dd:1e:a5:4d:e8:cd:ae:00:7e:97:
cb:86:cc:9f:37:5d:be:74:71:ff:9b:ed:79:0c:f5:d5:e8:9b:
d8:a4:4e:fd:6e:e3:44:e6:06:9e:db:09:d4:21:a1:a7:1a:37:
4e:c3:2d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:42:13 2025 by rpki-client