Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/p3pBvgtxKISka0RKSyNr_9qvynQ.roa
File: p3pBvgtxKISka0RKSyNr_9qvynQ.roa (raw, json)
Hash identifier: LQ0EybEBLJKGjSTs+rh09ifrFB1K8c4ZwpEg/mYQzwU=
Subject key identifier: A7:7A:41:BE:0B:71:28:84:A4:6B:44:4A:4B:23:6B:FF:DA:AF:CA:74
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018521B4CD5B5951472BB5286FC600C3CFDB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/p3pBvgtxKISka0RKSyNr_9qvynQ.roa
Signing time: Sat 17 Dec 2022 20:09:35 +0000
ROA not before: Sat 17 Dec 2022 20:09:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:21:b4:cd:5b:59:51:47:2b:b5:28:6f:c6:00:c3:cf:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 17 20:09:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a77a41be0b712884a46b444a4b236bffdaafca74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:39:1d:d5:a6:ff:d2:44:0f:7c:bc:b0:93:bb:
fd:98:e7:90:77:67:51:07:1f:8b:97:0b:4d:a1:ad:
7d:a0:8e:7a:65:65:05:39:a6:e3:b4:34:f8:34:77:
03:77:d2:8e:d4:bb:49:d2:18:6d:e2:e4:2b:77:ed:
f2:c8:13:d8:60:01:8d:c2:97:82:96:07:35:22:67:
10:86:53:d1:66:88:20:9b:77:b8:0e:b3:23:58:a8:
e1:81:b7:d2:e2:67:2a:a6:21:ce:8f:f6:c9:89:25:
1b:eb:d4:e1:c6:1f:f1:fd:f4:c0:35:67:cd:73:6a:
42:fc:bf:2c:f3:3f:cb:13:9d:8f:9d:77:e4:28:21:
a3:07:26:db:51:b2:0e:1a:d2:df:1f:38:2f:b4:cf:
5b:02:16:c3:07:6e:a9:c6:42:c6:7d:bd:0b:d2:9f:
b2:a9:0d:3d:54:f1:0a:18:e7:18:79:25:59:99:79:
61:a1:ec:ad:fa:4f:4c:98:a5:cc:9e:cc:ca:a5:94:
b2:ff:ac:94:4b:f2:05:7c:e0:26:a8:5d:66:43:13:
d5:ce:54:25:bd:5f:cb:63:78:61:7f:73:2a:51:08:
3f:d0:b3:71:83:51:5c:43:be:8f:dc:48:e6:77:54:
ae:3c:0b:17:4d:bf:56:36:0a:ea:37:e8:47:2d:d7:
89:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:7A:41:BE:0B:71:28:84:A4:6B:44:4A:4B:23:6B:FF:DA:AF:CA:74
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/p3pBvgtxKISka0RKSyNr_9qvynQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
90:ef:12:b4:6f:06:8c:92:17:f2:11:8e:cd:19:6d:f0:9c:43:
d5:c5:dd:07:81:db:03:ab:52:d9:7c:bf:93:b4:0f:1c:55:32:
ce:88:a0:af:95:8e:37:22:43:86:0d:72:1f:10:57:f8:9f:39:
ee:5a:b8:f7:f2:ab:1b:0e:19:f8:70:ea:04:b5:de:e6:d2:f9:
91:a0:e5:ec:8f:52:24:2e:7a:ab:a4:ac:16:21:c1:0c:a8:02:
83:29:04:32:69:7f:7e:12:0c:21:87:5f:23:3a:7a:e2:f2:05:
ab:f0:f6:ef:0f:8e:57:19:bc:54:f7:4f:7f:17:1e:05:4e:a9:
84:89:88:3e:ef:34:23:b2:15:eb:ee:fc:eb:fe:b2:25:c7:04:
33:5c:9e:f4:ec:cc:5f:e9:6a:73:e8:aa:a5:bf:f0:3a:67:6f:
c2:d6:24:22:50:9f:9d:ad:14:4c:d8:a2:e4:62:90:d3:80:23:
da:f7:e5:59:81:35:d4:6a:82:03:d7:48:f5:d1:31:32:52:25:
22:2f:d5:b9:cc:44:3c:5a:7e:c3:88:e5:94:bc:42:63:75:3c:
fd:81:52:93:4e:e4:e1:32:1d:16:29:79:de:4d:9e:18:43:dc:
2d:e5:78:c7:ee:43:91:a2:0c:74:81:04:91:4c:ad:82:9a:e7:
c5:34:40:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 00:39:39 2025 by rpki-client