Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/owNXwxZyQvf7uinisUUX6zuNK10.roa
File: owNXwxZyQvf7uinisUUX6zuNK10.roa (raw, json)
Hash identifier: WG4k+LBn4NqoBzSxWIG5WrduXZ5V96rAC2G6nAVldcc=
Subject key identifier: A3:03:57:C3:16:72:42:F7:FB:BA:29:E2:B1:45:17:EB:3B:8D:2B:5D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 664266C3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/owNXwxZyQvf7uinisUUX6zuNK10.roa
Signing time: Sun 30 Jan 2022 05:05:15 +0000
ROA not before: Sun 30 Jan 2022 05:05:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17e:a95f:80c6/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1715627715 (0x664266c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 30 05:05:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a30357c3167242f7fbba29e2b14517eb3b8d2b5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e5:a9:1b:fc:3a:50:26:2a:0b:ea:3b:9a:69:
81:47:20:77:9e:87:b8:42:35:f8:24:5e:86:86:0f:
2f:ae:1c:c8:45:ce:d9:c5:d2:f2:05:c0:16:0f:be:
b8:11:3a:f7:f2:c5:e0:91:96:d0:57:57:af:67:ce:
bf:5d:2d:e2:5e:2f:bf:e8:c8:64:95:dd:bd:c9:06:
56:9a:2f:3e:ea:f8:52:6f:72:44:b9:c7:66:f6:77:
4b:07:ae:2d:d1:24:a6:ab:f2:de:1c:88:16:42:79:
d7:f2:e9:ac:18:63:d0:ae:38:98:06:79:05:a2:64:
da:7f:de:dd:b4:6a:d0:5c:67:55:3c:91:af:a3:c6:
a2:d8:11:ba:17:e4:93:95:af:4c:6b:0e:53:72:ef:
91:69:84:f4:e1:bf:4c:c6:ab:9f:c1:11:b9:b8:60:
53:66:f7:31:41:84:3d:18:80:c5:fc:24:de:d2:53:
d9:b5:2f:0e:84:ca:67:0c:cb:7b:23:25:ef:38:6e:
16:7c:d9:5f:b9:76:7d:b0:ea:0f:2e:6f:b7:7c:08:
2b:3f:7f:fa:97:c5:c1:2e:66:ff:be:a4:2a:3b:fe:
a7:ef:e3:99:da:21:fb:ad:ac:7c:d3:6e:77:cb:2c:
7f:3d:2e:8f:f7:a5:4a:8f:d9:6a:63:5c:5b:f6:54:
b5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:03:57:C3:16:72:42:F7:FB:BA:29:E2:B1:45:17:EB:3B:8D:2B:5D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/owNXwxZyQvf7uinisUUX6zuNK10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
27:bd:64:78:11:fe:4a:44:1c:9a:95:5f:46:eb:2c:04:54:67:
32:ae:ef:67:81:7e:7c:bb:81:22:e9:35:38:a5:59:8b:bf:af:
4e:56:89:16:3a:93:44:e9:61:2c:73:a3:ae:e9:61:5d:ea:08:
97:49:fe:19:a9:11:a1:7e:73:0e:40:0b:70:bc:60:ed:95:e4:
5d:e3:cf:c8:ff:a8:59:ed:51:69:fe:e7:ff:0d:9b:d7:f0:be:
95:8e:78:52:f7:b4:14:61:74:f6:cb:fe:b8:3e:43:f4:5d:e0:
00:7a:dd:96:60:8a:fd:6c:8c:44:50:17:b7:fd:4b:8f:5b:9d:
85:cb:b1:c9:dd:d4:74:0e:09:05:6e:cf:d5:1b:72:94:36:9e:
ac:f9:15:51:c7:b6:06:fd:4b:8d:45:b4:6e:87:f1:13:ec:5a:
23:c8:36:aa:a6:d3:b8:7b:10:9d:36:a1:bd:d7:42:4b:a2:9a:
50:1c:46:c6:d4:9f:b4:98:1f:7a:48:cf:ef:90:ce:3e:28:27:
23:8b:25:d1:64:94:f9:df:c7:ba:8d:c6:79:c0:ca:34:25:43:
72:06:e1:53:50:ef:44:9a:6e:1f:c9:68:ef:99:50:ab:c7:ff:
bc:8a:56:27:72:51:c2:d3:51:c7:34:8a:3c:fb:0f:fe:a0:2e:
93:5b:98:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:24:05 2025 by rpki-client