Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oy23uGt4NIn5l-nGWGtUwVWrFxA.roa
File: oy23uGt4NIn5l-nGWGtUwVWrFxA.roa (raw, json)
Hash identifier: xBgYXdWIG8XAxRZn8oXZHsDLPBIZFaG7RrSUGr9aGNk=
Subject key identifier: A3:2D:B7:B8:6B:78:34:89:F9:97:E9:C6:58:6B:54:C1:55:AB:17:10
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018504198A487E11F9DD7D673D00B981B71D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oy23uGt4NIn5l-nGWGtUwVWrFxA.roa
Signing time: Mon 12 Dec 2022 02:11:00 +0000
ROA not before: Mon 12 Dec 2022 02:11:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:04:19:8a:48:7e:11:f9:dd:7d:67:3d:00:b9:81:b7:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 12 02:11:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a32db7b86b783489f997e9c6586b54c155ab1710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:09:34:5b:8e:ae:3d:e6:73:59:3e:5c:7e:7b:
b7:03:9a:d1:28:f7:d4:48:0c:34:16:57:fc:31:18:
06:16:7c:89:64:29:39:cd:17:64:8c:21:bc:95:53:
a3:fa:f9:37:3f:09:c4:ec:b7:cf:3b:38:b5:4b:af:
91:4c:9b:a2:17:0f:bf:45:ea:85:09:d3:36:a5:42:
fa:65:95:27:67:41:86:b2:3d:b9:01:af:c7:f8:34:
67:f0:cc:f9:8a:70:dc:af:9b:9b:33:3d:f9:76:2b:
ac:2b:e9:f6:33:69:86:4c:e2:f4:5d:3e:15:3d:a1:
94:46:af:a5:b2:1e:b9:04:46:65:d7:24:8d:1c:05:
aa:e6:dc:94:44:41:bd:9a:06:cd:84:cb:2f:26:88:
33:19:6f:67:fe:69:68:22:e7:7c:da:dc:12:eb:57:
d8:9c:dc:e9:92:4c:9d:a4:df:db:6a:48:1e:e3:96:
8e:8e:ae:e8:61:cf:58:38:e0:e7:4e:10:67:5a:89:
51:64:a6:93:39:7c:d3:1e:d9:6b:eb:9e:48:0d:c5:
20:98:e4:45:1e:94:95:26:f3:26:08:8d:e1:f3:8e:
39:07:46:8e:87:d5:ac:88:f2:42:9b:43:f0:93:d1:
0f:46:96:63:7c:b0:b7:2a:6f:0f:a8:48:49:65:18:
1c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:2D:B7:B8:6B:78:34:89:F9:97:E9:C6:58:6B:54:C1:55:AB:17:10
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oy23uGt4NIn5l-nGWGtUwVWrFxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6b:fc:a6:67:ef:c4:d8:b0:f3:0b:9e:70:c0:3c:91:09:27:08:
17:29:eb:16:fb:91:cc:b9:c1:e9:dd:73:4d:a4:d1:69:c9:12:
62:e6:1d:ad:d6:dc:b8:f5:62:85:9a:ec:a6:e7:57:7a:88:1c:
28:d4:ca:61:33:11:5e:28:d3:0e:b3:d7:2e:f7:bf:59:ce:c1:
e4:5e:dc:69:d0:85:98:d7:8f:6b:1f:e3:84:f5:60:91:f7:a7:
d2:40:0d:d6:7b:d6:98:5f:af:cd:51:0f:1f:fb:3b:5e:40:a2:
d9:b4:27:38:22:22:0a:fb:5e:9d:f5:8e:2b:77:61:65:be:c0:
61:b3:3f:29:44:0d:f3:80:c9:03:23:3f:fa:81:b9:bd:68:09:
3d:54:b6:ab:21:f9:47:3c:cc:01:33:04:75:c4:d0:97:5b:80:
80:94:0b:a6:22:7e:b1:3b:5f:fe:77:84:99:66:e0:03:06:f5:
7e:0a:0a:d5:e6:dc:c8:4e:61:70:b6:ad:9e:0e:b4:59:2e:0c:
ad:f3:d5:32:e2:92:56:3c:ef:be:57:14:42:41:48:d7:eb:ea:
53:61:aa:dc:e9:d7:1e:26:09:5b:f7:35:45:95:37:a7:a3:aa:
fc:57:27:6d:0a:99:4d:75:7e:1a:df:b7:b5:32:80:3b:00:46:
f3:a5:91:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 19:21:58 2025 by rpki-client