Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/p4wHccnY_1FFF2aaD-YqyQ4wZMg.roa
File: p4wHccnY_1FFF2aaD-YqyQ4wZMg.roa (raw, json)
Hash identifier: AeP+S1vSEiHbfqhEaZYrJBAesdRTGddT1Jian2NV1+0=
Subject key identifier: A7:8C:07:71:C9:D8:FF:51:45:17:66:9A:0F:E6:2A:C9:0E:30:64:C8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184EC48208C8B61FAC007F45EE69A146284
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/p4wHccnY_1FFF2aaD-YqyQ4wZMg.roa
Signing time: Wed 07 Dec 2022 11:11:00 +0000
ROA not before: Wed 07 Dec 2022 11:11:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ec:48:20:8c:8b:61:fa:c0:07:f4:5e:e6:9a:14:62:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 7 11:11:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a78c0771c9d8ff514517669a0fe62ac90e3064c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:60:0c:01:96:87:32:d2:d9:76:33:44:51:46:
87:bf:ad:ee:1d:fd:ac:3d:24:55:d2:69:e7:28:8a:
94:65:e5:36:c3:28:7a:a5:a0:a4:a3:62:22:78:52:
a8:db:e2:1a:d4:ee:ff:73:f3:fd:b7:9a:4d:aa:ef:
16:5b:ce:90:61:ea:ce:31:3e:d1:be:85:78:84:91:
61:95:6c:a1:45:8b:0c:2f:62:58:8e:57:0e:ff:9b:
62:d7:fe:e0:d2:98:e5:bf:6c:8e:15:2b:1b:c7:b9:
d3:4c:31:88:03:b3:c4:9f:a4:e7:8b:de:6c:98:8a:
54:89:6f:56:2a:75:42:c4:83:c9:e2:ea:e7:b6:e0:
d5:7d:0d:85:5b:38:e8:5c:21:b6:98:cd:5c:d9:cf:
b7:b9:76:1e:7a:4f:db:23:95:e5:3b:11:80:48:b8:
9b:34:23:10:44:cc:77:62:fd:93:31:d2:e6:51:96:
97:89:06:23:b1:f5:76:2d:4e:51:08:61:00:f3:14:
53:e4:76:82:52:02:34:eb:88:9e:36:c3:83:9f:aa:
62:01:8b:ec:01:cf:bb:87:0c:f4:87:98:92:3f:23:
4f:8d:c1:ec:9a:cd:c9:1e:cd:72:11:70:b6:dd:8c:
85:78:dc:03:b2:c2:a9:5f:8e:d9:7d:7b:7c:3b:d2:
c9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:8C:07:71:C9:D8:FF:51:45:17:66:9A:0F:E6:2A:C9:0E:30:64:C8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/p4wHccnY_1FFF2aaD-YqyQ4wZMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7b:15:1f:74:27:30:9a:f9:00:78:f4:c6:c3:02:a3:7e:6d:1b:
a5:ec:26:e5:c4:d4:9a:58:f9:2d:ff:54:41:69:ac:fd:00:9f:
85:47:35:7e:85:5c:56:cc:47:43:e5:0a:a1:53:be:b4:21:b2:
eb:06:da:cc:69:e7:d5:76:52:1a:e7:a3:71:4f:c4:76:62:f0:
65:14:b5:df:7a:44:5f:1b:ac:4f:32:57:10:66:f6:ad:c0:23:
74:da:c7:25:73:69:b5:35:bc:47:2c:36:7d:1c:2c:a9:b5:2a:
f1:84:49:4f:82:0e:7a:17:e9:4c:d1:7e:ce:5a:33:73:24:0d:
a7:fb:c9:13:2b:9a:7d:d0:cb:eb:6f:21:60:83:b2:82:9f:94:
04:53:e0:53:f0:53:64:be:9c:5e:87:e4:f9:c3:7c:80:b3:05:
0d:26:7d:44:85:59:77:be:09:9c:77:03:66:37:46:76:c7:5c:
f2:34:d7:3f:ae:af:27:d9:32:8d:b4:22:f8:08:72:f1:75:4d:
26:bd:0c:7a:8e:32:d7:c2:de:48:5e:11:1c:13:41:79:a3:a0:
f9:60:be:03:00:6a:c1:aa:64:ec:3a:24:d3:e5:5d:e3:a2:6d:
b2:3b:1a:23:b6:e3:a4:d8:af:79:49:f8:ca:0e:52:72:16:b5:
0c:70:e6:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:45:21 2025 by rpki-client