Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oL0FCxWYt6xaEnIvU9xq9dtJlYs.roa
File: oL0FCxWYt6xaEnIvU9xq9dtJlYs.roa (raw, json)
Hash identifier: EYS3fI8zpop4WchcFxm45Z0UElTMX4hQ6RjF/ypAJH0=
Subject key identifier: A0:BD:05:0B:15:98:B7:AC:5A:12:72:2F:53:DC:6A:F5:DB:49:95:8B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7423070C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oL0FCxWYt6xaEnIvU9xq9dtJlYs.roa
Signing time: Sun 20 Mar 2022 13:09:37 +0000
ROA not before: Sun 20 Mar 2022 13:09:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1948452620 (0x7423070c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 20 13:09:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a0bd050b1598b7ac5a12722f53dc6af5db49958b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:55:15:cd:28:06:42:71:ec:76:93:91:d9:60:
34:73:93:c6:aa:be:f1:9a:b3:c7:3d:cb:b4:bd:af:
b1:97:5a:83:8b:6e:a9:bd:d7:e7:ff:af:e8:b3:f3:
b3:a5:34:cc:f6:ac:3b:45:ef:96:64:2e:17:1e:d6:
4f:96:01:55:bf:85:51:07:0e:24:06:80:f2:c3:c5:
73:f3:6e:c3:c4:1f:de:3e:c8:c4:9a:01:bb:ac:18:
b4:bb:de:63:85:f4:9d:97:62:46:50:2b:50:c5:3d:
93:3a:28:f2:4c:24:65:72:3d:3e:28:1e:9b:18:47:
03:fd:d5:90:98:62:f7:4b:4f:a4:79:1f:fb:7c:d0:
9a:ca:cb:b0:18:c9:f6:ca:34:18:b4:14:f2:4c:b3:
d5:b5:6d:7f:d9:57:15:e4:6e:81:5b:1f:17:f2:ce:
f3:f4:0d:52:14:11:ed:d5:3f:fc:a3:f3:eb:36:16:
04:ea:d3:d1:b4:84:24:79:b2:c8:73:57:2d:2d:19:
ad:8d:94:35:6e:36:f6:9a:9d:5d:9e:6a:d4:10:c2:
2b:8f:92:f4:7b:20:f1:3e:f8:31:7b:6c:ad:bc:3c:
d1:45:53:bd:5e:1e:1f:c7:1f:7b:bf:c7:eb:02:dd:
e7:44:e6:94:34:6d:14:07:27:46:7d:88:7b:64:83:
46:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:BD:05:0B:15:98:B7:AC:5A:12:72:2F:53:DC:6A:F5:DB:49:95:8B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oL0FCxWYt6xaEnIvU9xq9dtJlYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
72:57:5a:e0:eb:37:41:44:74:f8:4a:7f:57:f9:05:15:b9:8f:
03:92:44:0e:a2:9c:cd:99:75:0a:f3:f1:25:d9:b1:c4:67:b4:
ce:1a:78:86:14:3a:d1:e3:11:5f:50:a1:9b:70:c8:aa:eb:0e:
f7:cf:93:48:e2:5a:3f:ee:cc:b4:11:4b:06:a9:e9:18:8e:aa:
d7:b4:c2:54:99:0f:af:dd:98:89:1b:fe:aa:11:6a:c3:72:13:
32:bf:d3:29:29:f5:05:19:87:04:2c:0f:c2:0f:85:a1:5d:de:
dd:f0:5e:30:27:6b:08:c7:a0:2b:aa:36:c8:71:14:3b:9c:3c:
57:eb:dd:c4:95:87:54:36:fa:75:d1:dc:b6:9f:4d:84:94:32:
ab:f0:8a:07:64:9e:0d:c4:a5:c5:5c:7f:5d:65:8b:6d:ed:72:
5d:96:18:51:6f:d8:1c:25:48:d6:ad:57:12:3e:e2:49:44:79:
2e:ab:f1:0c:7b:43:a4:ef:ec:0c:52:ca:55:99:f2:9a:ce:67:
57:f9:f1:b8:03:f9:6d:6c:85:c4:87:25:3a:8d:e0:36:9b:29:
64:7d:04:63:fa:dd:2d:4a:35:e6:a6:da:57:ec:29:ab:12:e5:
0a:cb:e7:ec:8b:d6:ef:79:6a:04:a9:f6:2a:b8:97:0a:a2:ef:
3f:98:07:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 18:21:03 2025 by rpki-client