Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oRfX0TMgy8wwZwV6-TUFX9auWiA.roa
File: oRfX0TMgy8wwZwV6-TUFX9auWiA.roa (raw, json)
Hash identifier: Mjq/Gh7peiyRknudtjMN+fEon99rVIHbe/6Z9mav55s=
Subject key identifier: A1:17:D7:D1:33:20:CB:CC:30:67:05:7A:F9:35:05:5F:D6:AE:5A:20
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8E9B50D5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oRfX0TMgy8wwZwV6-TUFX9auWiA.roa
Signing time: Tue 21 Jun 2022 06:10:44 +0000
ROA not before: Tue 21 Jun 2022 06:10:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:56ba:5b78/128 maxlen: 128
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:181:477e:58d8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2392543445 (0x8e9b50d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 21 06:10:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a117d7d13320cbcc3067057af935055fd6ae5a20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:35:c3:19:0b:13:6a:dd:9c:98:f7:d4:52:3a:
c4:dc:35:bb:27:44:79:56:c5:67:4b:0a:db:04:9e:
05:ca:42:81:fc:88:d6:04:3b:49:46:d1:f5:5f:4f:
17:9b:20:b1:db:60:fe:9b:81:a0:d4:ad:12:66:19:
7f:28:31:53:a8:c2:4a:39:1e:23:9b:67:53:d5:54:
59:da:64:29:c4:d8:05:b1:89:ec:7c:cd:ce:b3:94:
37:78:48:55:34:73:bc:8d:9a:0e:10:5e:50:68:28:
4a:f6:18:94:f9:49:d8:5c:f1:e6:cd:7a:7f:64:6c:
74:6b:32:b1:b7:dd:05:17:71:b1:7e:81:4a:d7:bd:
c7:92:16:53:d1:b5:8b:d9:11:e6:2c:52:b5:58:f9:
eb:df:46:3e:d6:14:08:88:bb:38:fc:78:96:d3:e9:
89:66:74:97:50:f2:c5:1c:60:9f:fb:a8:4e:32:d7:
b7:8d:12:c4:4e:16:78:9d:d6:d6:01:9b:cf:26:44:
d1:4e:7b:5c:78:2d:af:19:fb:33:ab:33:57:9f:56:
39:80:64:23:34:63:a2:b5:7c:ae:15:98:75:22:bf:
e9:d1:4b:d3:14:8d:89:bb:e3:c8:d8:3f:31:83:d5:
8f:e2:57:9c:6c:b7:cb:ea:fa:39:65:65:7d:ab:92:
ec:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:17:D7:D1:33:20:CB:CC:30:67:05:7A:F9:35:05:5F:D6:AE:5A:20
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oRfX0TMgy8wwZwV6-TUFX9auWiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
40:fb:78:ff:63:b9:62:b3:1e:fc:14:86:4f:cf:63:c4:98:92:
68:52:67:2f:d2:f7:db:a1:da:e0:04:dd:e7:b0:a5:0b:98:9a:
35:bd:89:c6:36:75:27:0e:69:fa:14:79:79:9d:99:2a:06:d6:
b8:59:22:30:fc:5f:f2:b7:f0:74:23:51:d8:88:29:3d:5f:3c:
bf:9e:b6:00:b7:a7:7f:24:33:e5:a9:04:42:ec:58:fa:78:a2:
a2:2d:12:88:11:d4:d7:19:c3:00:dc:78:ef:31:cf:8a:26:b3:
4b:86:93:36:af:c2:43:b6:37:24:95:1e:d2:95:bd:81:0b:7b:
02:dc:02:80:d0:c5:2c:42:40:a0:20:83:85:70:ea:6d:e8:35:
c7:ed:25:d5:50:61:7c:74:54:4a:be:7e:d7:de:f8:2a:7e:c2:
e4:bd:46:c8:13:7b:6d:d3:18:1b:74:75:72:70:d6:93:af:7f:
c9:97:ee:ca:8f:93:a1:c4:4f:be:1e:07:98:c7:c0:89:4d:19:
a5:2f:8c:ea:87:37:1d:76:53:14:bd:9d:3b:79:c3:e2:ca:be:
eb:aa:78:50:cf:be:7f:3b:91:be:4a:0c:a8:5e:4f:38:03:17:
6e:07:4f:50:fb:64:5c:33:f4:4d:69:9f:06:f3:77:76:e8:49:
65:b4:8f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 15:52:33 2025 by rpki-client