Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/o73f0BuR_6uV8AkgdH_Qy9KIhCc.roa
File: o73f0BuR_6uV8AkgdH_Qy9KIhCc.roa (raw, json)
Hash identifier: 9l3SyThuTq/n1MqqT7mpl5DCZJPbmapitladB06vmlE=
Subject key identifier: A3:BD:DF:D0:1B:91:FF:AB:95:F0:09:20:74:7F:D0:CB:D2:88:84:27
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0181F40A6496028D2E97F37FA070F3855337
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/o73f0BuR_6uV8AkgdH_Qy9KIhCc.roa
Signing time: Tue 12 Jul 2022 20:12:10 +0000
ROA not before: Tue 12 Jul 2022 20:12:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f4:0a:64:96:02:8d:2e:97:f3:7f:a0:70:f3:85:53:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 12 20:12:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a3bddfd01b91ffab95f00920747fd0cbd2888427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:60:a5:4d:48:02:49:cf:4b:5e:42:51:15:ce:
ca:76:35:da:da:08:83:cb:da:2f:23:15:73:f3:34:
c2:20:13:7b:61:b0:06:b2:27:09:40:f9:e1:ea:0f:
db:f1:3a:8f:99:84:f6:3d:d2:cd:98:2b:23:5b:16:
0c:c2:38:57:5b:3f:6a:94:01:b0:3c:a9:a0:68:df:
e8:c7:6a:6f:15:92:34:eb:be:5d:60:32:d9:64:b0:
13:d4:9a:e9:28:5e:fc:2e:5f:0c:81:7d:3b:db:d7:
6e:52:3c:ec:d3:a1:f9:ec:c6:77:63:d3:a1:27:a7:
19:9d:0d:1f:91:5e:49:23:2f:54:8c:ab:98:fd:3a:
cf:bc:6b:d8:11:34:48:3d:c8:42:b0:16:e0:3d:43:
e5:23:91:f1:97:e5:0b:8f:e2:fa:c9:ac:6f:6e:00:
06:20:41:94:04:c4:b9:55:95:90:55:72:a4:15:33:
a9:88:71:7d:ae:96:17:57:7b:8f:a8:c4:4e:79:9d:
7a:fd:be:5c:76:72:0a:19:b6:c5:32:7e:76:b2:ea:
bd:55:53:d7:b0:d6:f3:90:e2:c2:c9:b4:7d:8a:d5:
3c:d8:59:40:a5:41:f6:10:5f:f0:c8:05:cb:1b:15:
8a:c7:96:18:9c:1e:8a:a8:5d:9c:23:a8:e0:a9:82:
dd:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:BD:DF:D0:1B:91:FF:AB:95:F0:09:20:74:7F:D0:CB:D2:88:84:27
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/o73f0BuR_6uV8AkgdH_Qy9KIhCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8e:5c:4d:c7:bc:22:ea:a7:00:06:31:87:2b:fc:be:8c:16:18:
82:3a:f9:d5:ca:78:71:d9:58:65:82:6b:1b:c3:06:e5:43:2e:
c4:c6:14:d6:43:d7:3d:1a:83:cc:94:3f:09:ab:c7:55:b9:35:
26:66:fa:e6:9d:2e:21:7b:8c:c4:9a:c4:99:2e:3e:fc:53:f2:
d9:a7:86:6a:b1:a8:31:b9:2b:c8:fd:63:1f:90:ae:5b:d4:a7:
5f:0f:20:9b:5b:b9:48:d7:7b:60:1e:fb:35:9c:8a:31:32:16:
ca:f9:40:61:72:90:21:15:d1:ec:4b:0c:56:6b:3f:9c:9b:94:
31:73:c4:eb:51:d9:4d:31:d9:85:42:72:ac:4f:5f:7c:ca:23:
7f:46:5a:ef:9b:d7:b9:40:91:51:f1:9b:b9:46:c9:42:b8:48:
ae:ad:92:be:f3:89:74:3a:9a:21:e3:93:da:3c:32:91:26:b7:
31:5f:18:97:6e:9c:c2:dc:22:1a:d5:97:81:75:b5:c1:67:68:
c6:f2:10:1d:db:5d:f9:e7:94:04:9c:d3:10:61:85:bc:da:0e:
d7:d6:cf:1c:b4:41:0a:4a:22:82:23:26:0a:6a:33:c6:82:7e:
ef:46:dc:06:35:ec:42:1c:49:92:95:ec:7f:aa:8c:b4:66:86:
e8:58:19:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:13:10 2025 by rpki-client