Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/p31BA6yhB_0uUowhE0ZWNGgwgHM.roa
File: p31BA6yhB_0uUowhE0ZWNGgwgHM.roa (raw, json)
Hash identifier: Vk93n6vHQx0HZE77Ws06sHYQ5UHhUP8/rHSNlSDqXRk=
Subject key identifier: A7:7D:41:03:AC:A1:07:FD:2E:52:8C:21:13:46:56:34:68:30:80:73
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 78C56475
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/p31BA6yhB_0uUowhE0ZWNGgwgHM.roa
Signing time: Tue 05 Apr 2022 21:09:22 +0000
ROA not before: Tue 05 Apr 2022 21:09:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2026202229 (0x78c56475)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 5 21:09:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a77d4103aca107fd2e528c211346563468308073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:81:89:1b:1a:dd:0e:01:32:97:57:c6:0b:43:
13:30:e0:78:1a:d5:16:87:15:95:8e:a9:ce:b5:3a:
94:49:a0:89:fe:4c:d7:fe:0e:13:c2:58:25:94:70:
c1:50:fa:8f:d0:38:43:02:e2:9c:e1:90:72:f1:61:
cc:97:99:66:e2:18:14:c5:ae:88:e3:2a:30:2d:87:
fc:e9:df:88:ee:1a:d9:ef:5f:72:ab:2f:f3:82:ad:
c6:56:68:59:0c:90:e3:ef:50:b5:8f:ca:76:fe:60:
d2:7a:06:59:55:e2:db:f3:1a:e4:b1:ee:42:0d:5f:
d4:14:5c:64:fe:83:10:32:8b:30:a5:1e:33:c6:99:
6b:c6:a6:ce:f9:80:ec:a8:5b:3f:4b:5b:09:2d:e8:
20:5a:6e:98:6c:dd:42:da:e6:f9:06:2d:38:ab:8e:
9c:6f:db:ca:0b:50:ad:74:13:1e:a5:89:78:32:64:
52:9c:06:e4:21:06:f0:0d:da:0b:ba:95:e0:df:98:
63:59:3b:4e:36:e9:b6:41:48:f9:1e:07:59:2d:48:
11:63:b2:dd:ef:3d:1a:37:26:31:4a:d0:49:2b:71:
07:91:20:58:ee:24:aa:83:d2:2d:1b:01:9a:d6:9a:
a5:f6:1b:71:3d:f7:4f:e3:2b:97:51:cd:c8:82:c7:
44:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:7D:41:03:AC:A1:07:FD:2E:52:8C:21:13:46:56:34:68:30:80:73
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/p31BA6yhB_0uUowhE0ZWNGgwgHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b4:5d:e8:79:56:c1:9b:27:3d:3c:7f:25:d5:ce:9c:4b:f3:01:
69:8d:44:fe:ab:85:dc:c2:48:cd:4d:b0:27:62:df:bd:e8:00:
aa:fa:ee:ab:e3:aa:09:72:68:4f:3b:e0:f4:ca:38:6b:b8:cc:
2d:9e:39:84:8a:ea:df:6d:1d:61:a0:ed:22:cb:8e:32:0b:70:
88:14:8d:3f:fc:8e:04:b0:0e:3b:5d:a6:9d:99:49:e7:7c:83:
da:15:0c:2f:e0:04:35:8c:5d:ca:52:57:76:e5:7c:ea:8c:07:
f3:26:86:46:9e:af:87:a8:51:13:b8:f6:a9:55:df:be:79:94:
22:f0:30:55:d5:1c:66:66:03:8a:b5:57:8d:c1:87:6c:6b:21:
9d:9c:fb:d8:0c:d8:2d:a5:e5:c5:ac:08:72:d5:b8:ae:33:27:
a6:4b:1f:6e:6e:6e:66:ed:7d:38:31:46:af:c3:15:c1:35:4f:
70:ec:e5:a6:40:e6:b9:bf:3b:61:6b:7b:5f:02:ae:cf:80:7b:
44:c0:f8:2c:1d:8e:7f:2f:0e:be:18:34:b3:53:a0:d4:db:f1:
23:be:c5:b9:69:6a:41:86:ec:73:ae:7b:8e:19:11:c0:04:8b:
9b:78:f1:30:78:83:38:3c:2d:fd:3b:2f:c2:5b:17:d2:5c:90:
0c:b3:09:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:05:22 2025 by rpki-client