Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/p54lihnsQauCpQPRBrKYbr2N1qc.roa
File: p54lihnsQauCpQPRBrKYbr2N1qc.roa (raw, json)
Hash identifier: Xihk97Qx15oa5iWxfxE3kb0zY+F2EpDPqXHtvEbO1FY=
Subject key identifier: A7:9E:25:8A:19:EC:41:AB:82:A5:03:D1:06:B2:98:6E:BD:8D:D6:A7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018304FE5EAABB30AE2B6E3A342D9BADCD31
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/p54lihnsQauCpQPRBrKYbr2N1qc.roa
Signing time: Sat 03 Sep 2022 20:15:22 +0000
ROA not before: Sat 03 Sep 2022 20:15:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:04:fe:5e:aa:bb:30:ae:2b:6e:3a:34:2d:9b:ad:cd:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 3 20:15:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a79e258a19ec41ab82a503d106b2986ebd8dd6a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:7a:74:c6:9b:9c:94:28:9c:7e:6f:86:df:9b:
31:53:be:4f:75:6b:7e:ba:12:24:62:1e:73:cd:71:
54:e2:b8:7d:e2:2b:cf:e9:63:2e:17:df:2e:c3:b8:
c8:94:42:ae:50:e3:47:e8:2a:1e:78:2e:0b:cc:a5:
a3:51:c3:d4:4d:48:50:f2:a6:46:df:eb:8f:95:41:
80:6c:4b:0a:d7:79:5f:26:58:a7:ff:2a:0e:7f:fe:
cb:8e:6b:1b:72:64:15:31:ad:dd:84:ee:1d:93:a2:
2d:3a:d4:cb:00:3a:c4:95:0c:c9:25:43:e5:b5:00:
7e:9b:8a:01:6e:19:de:d3:66:be:e1:8c:ee:d7:39:
be:a2:82:13:d7:96:d4:d1:69:3c:a3:30:6b:fb:e7:
10:96:46:f4:c0:a4:a6:8c:75:05:04:6c:11:6e:d2:
f3:a7:0d:e1:ea:2c:32:1b:eb:77:d7:18:71:1b:d5:
c8:cb:25:1a:0a:22:ec:af:e6:b9:60:e5:d8:34:d0:
e8:bd:f4:f5:01:27:87:c6:69:ab:42:ac:fc:ac:fd:
37:2a:c8:06:7c:09:78:8f:45:6d:08:f6:bf:24:3d:
9c:f2:13:b8:2a:40:bd:e4:39:06:68:88:24:46:f6:
32:49:b6:2e:07:ab:29:1d:f9:b6:d2:78:62:5e:fd:
49:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:9E:25:8A:19:EC:41:AB:82:A5:03:D1:06:B2:98:6E:BD:8D:D6:A7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/p54lihnsQauCpQPRBrKYbr2N1qc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6f:ed:80:66:a5:b6:6a:a7:76:49:a6:f1:17:1e:74:56:41:c1:
2a:de:ea:db:c0:0e:00:46:76:d1:e6:0f:5e:9b:19:a1:f5:be:
39:d8:a6:cb:b9:d5:76:18:de:94:1a:8e:29:c6:ca:8a:1e:2e:
42:2c:73:16:07:eb:2a:59:23:39:dc:1d:11:cc:06:d4:0c:28:
9e:02:f4:cf:d9:27:73:cd:01:8e:42:82:58:7e:2c:08:e6:f8:
d8:fb:a7:85:ae:8e:02:82:76:81:03:9d:d2:e0:7d:3d:5a:92:
81:07:f3:87:1a:33:22:d1:75:3d:3a:8b:43:da:13:f1:e9:40:
f1:5a:da:34:26:a6:f9:15:18:2a:c1:90:5a:87:1d:e4:31:27:
64:e4:28:0b:21:ec:39:6b:43:ad:9d:aa:68:93:2f:a7:32:97:
d7:b9:cb:01:95:51:f7:a2:7a:5e:eb:d8:43:de:e9:e9:f2:f4:
04:44:15:9c:ab:65:d8:b2:d4:04:cf:03:5a:f9:af:78:7e:cb:
5e:bb:ef:30:e6:c2:ba:bc:8c:c0:03:f1:a1:44:52:fd:19:60:
da:2b:7b:de:95:b9:cc:9e:4c:69:81:53:65:8a:b1:b0:ca:64:
71:15:db:f6:01:c6:f7:57:24:68:d6:4f:33:d0:55:e0:63:1d:
eb:5f:8b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 17:08:07 2025 by rpki-client