Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/o5xZbRHJOh-rt_S0sVKGDNTxd8Y.roa
File: o5xZbRHJOh-rt_S0sVKGDNTxd8Y.roa (raw, json)
Hash identifier: CUJyQYeec8BJmXUq9qaK6oF69oc6V72lYiSxG3ST4Jk=
Subject key identifier: A3:9C:59:6D:11:C9:3A:1F:AB:B7:F4:B4:B1:52:86:0C:D4:F1:77:C6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018522C2E2440925FBCEC37EA7440A207604
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/o5xZbRHJOh-rt_S0sVKGDNTxd8Y.roa
Signing time: Sun 18 Dec 2022 01:04:35 +0000
ROA not before: Sun 18 Dec 2022 01:04:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:22c2:8a51/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:22:c2:e2:44:09:25:fb:ce:c3:7e:a7:44:0a:20:76:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 18 01:04:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a39c596d11c93a1fabb7f4b4b152860cd4f177c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d6:3d:4f:b7:ac:70:d5:15:6d:6f:44:5a:5b:
53:a0:c7:5f:14:ac:21:c7:dc:af:3f:70:3c:d1:9b:
5a:dd:46:bf:f0:45:43:3e:84:67:77:fd:5f:64:14:
fa:ca:1e:95:0a:a9:85:ec:86:61:03:95:59:aa:82:
0f:f8:7d:af:dd:74:c1:50:1f:83:3f:5d:a0:7c:16:
71:6c:e4:6f:1d:5a:2a:ac:5b:e5:82:bb:87:1f:70:
9f:a5:5c:36:5f:eb:c4:50:9a:75:d6:61:4a:e0:8f:
35:06:c2:09:2c:c4:64:a4:ea:ff:2e:c2:24:5c:d0:
cf:d4:23:40:db:39:2f:cd:a6:5f:46:ce:8f:8d:0e:
41:11:15:6a:6f:36:1e:0b:3f:24:0b:40:12:68:3e:
cc:db:05:5e:2f:ef:9e:94:84:ff:31:53:e6:54:94:
50:18:d2:83:92:4b:82:cd:41:0e:65:47:7d:4e:7f:
3e:d5:2a:d9:c4:02:47:95:8d:71:df:4d:a5:3f:49:
bf:40:f3:99:ba:59:f4:41:08:40:1b:67:70:ec:63:
df:17:d8:9c:a8:f5:af:6f:2f:dd:db:a0:02:a1:0f:
af:ac:6d:83:8a:ce:92:e1:c3:4e:b3:e7:e3:e8:43:
5e:0b:4e:fc:29:47:4b:38:99:40:04:d9:37:73:e3:
03:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:9C:59:6D:11:C9:3A:1F:AB:B7:F4:B4:B1:52:86:0C:D4:F1:77:C6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/o5xZbRHJOh-rt_S0sVKGDNTxd8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
88:6b:d6:9a:06:32:38:18:1c:09:94:57:0d:ea:e9:7b:45:5f:
32:42:35:5a:64:a5:11:d0:96:10:d0:08:88:82:75:6f:e5:61:
67:2d:09:60:ab:ff:6e:c5:e3:67:4f:83:85:d7:7a:14:b2:1a:
4d:f4:a9:03:3f:81:07:d5:cb:3c:9a:98:42:bc:24:4f:6b:c4:
84:e0:3f:eb:94:d4:54:07:b0:1a:99:54:44:5d:46:6a:23:bf:
70:4a:02:2c:77:90:8c:00:ea:5e:b3:f7:f2:70:28:2d:83:18:
3a:92:8c:30:00:6f:ed:51:1c:f9:6b:ac:fa:a7:34:85:92:22:
ec:4c:7e:07:ce:06:97:32:09:f0:ff:a9:d1:25:80:0b:e3:47:
9d:53:42:83:50:31:33:43:f6:3a:51:15:67:ff:be:69:03:96:
00:51:c9:bc:fa:9c:85:32:06:96:a1:fa:da:0a:70:fe:e9:62:
bf:7f:23:9b:d5:38:d7:43:b1:38:29:2a:f6:3d:f1:a9:e1:85:
f9:ab:c7:1a:37:88:4d:c3:3d:95:e7:64:96:8b:16:f3:de:4d:
4b:47:bc:bc:6e:e0:4a:38:27:5d:a6:b3:dd:db:13:47:26:31:
88:17:1f:a1:4e:03:32:af:0d:9f:55:05:ca:01:cb:76:66:42:
a9:0b:1b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 16:37:23 2025 by rpki-client