Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pNITLEOk9d-5ZfndMh8Hi4eVDsU.roa
File: pNITLEOk9d-5ZfndMh8Hi4eVDsU.roa (raw, json)
Hash identifier: 12wcnLs8qhXhXYretmtSzlcTTbpXjMYWWA2Pg8bfG/M=
Subject key identifier: A4:D2:13:2C:43:A4:F5:DF:B9:65:F9:DD:32:1F:07:8B:87:95:0E:C5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 78A6DF17
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pNITLEOk9d-5ZfndMh8Hi4eVDsU.roa
Signing time: Tue 05 Apr 2022 11:11:43 +0000
ROA not before: Tue 05 Apr 2022 11:11:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2024202007 (0x78a6df17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 5 11:11:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a4d2132c43a4f5dfb965f9dd321f078b87950ec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d8:32:bc:30:b5:cb:5e:5a:81:91:d8:59:07:
02:c4:eb:1a:05:25:46:ea:1d:98:6c:49:d0:37:05:
75:b7:8f:2c:36:e3:60:7e:7a:a0:a0:09:60:30:34:
61:d7:29:a2:7c:1b:33:27:5a:77:0c:2c:16:30:cf:
13:a0:cc:79:27:24:af:95:17:77:33:c1:31:f9:86:
5e:67:4f:97:06:59:2c:13:f1:60:86:42:94:46:f7:
1e:44:9c:23:b2:0f:f9:45:15:0f:5f:18:69:88:c5:
fa:33:3c:0c:cf:5c:37:fc:fd:3a:82:c8:fc:ab:8e:
0f:71:f1:6f:f7:ec:ec:3a:b6:33:24:36:b0:9b:21:
48:be:fd:73:97:9c:ac:ef:81:cb:cb:82:60:59:2a:
96:ed:d2:5a:b6:c8:d4:27:09:64:4e:bb:77:b3:f9:
9d:fc:66:4f:cc:f9:bd:c9:d7:35:94:e8:11:c7:4b:
61:56:39:89:20:1b:a1:fa:96:7a:57:1b:92:54:77:
50:e0:d5:a5:1b:ec:70:8e:41:af:24:05:27:86:9a:
f9:b2:92:63:f3:5b:3a:0f:ce:e7:91:2d:f1:af:9c:
eb:33:c9:1e:6d:7d:43:63:de:b5:5d:f7:bc:a7:3c:
6b:15:02:8b:fb:4a:cc:7f:15:f3:d3:ca:52:d5:1e:
ac:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:D2:13:2C:43:A4:F5:DF:B9:65:F9:DD:32:1F:07:8B:87:95:0E:C5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pNITLEOk9d-5ZfndMh8Hi4eVDsU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
82:62:28:6c:1c:e9:49:59:cf:82:db:58:aa:c2:89:f6:ee:91:
b2:60:d7:fd:79:26:d4:af:4d:37:79:7d:88:5f:18:0a:a8:2f:
a4:e0:6e:ef:9c:62:0a:c4:71:08:53:c2:d1:43:0d:5d:00:96:
62:59:b8:c1:e4:c8:89:e6:19:7c:01:2c:8e:5d:ba:ed:2b:89:
c1:b4:dc:f5:63:07:39:c3:f6:9f:13:88:a0:db:c2:3f:21:a7:
24:20:e1:1a:93:54:39:15:20:ab:7a:29:b6:28:5b:2f:7f:44:
a6:bb:05:2d:7b:8d:b5:88:9d:9a:4d:6c:00:e8:c5:c2:4a:3a:
f5:d2:3f:0c:64:d9:79:d9:56:33:fc:d8:b7:5f:25:4b:27:1f:
20:86:46:98:9f:11:60:fc:7b:73:fc:32:c5:7f:57:35:73:68:
3c:54:a6:5d:94:27:3e:ae:b0:5b:36:af:11:1a:3f:62:b6:43:
a9:a6:50:6e:c5:17:bf:f1:a6:4f:18:66:88:2f:83:27:ab:4f:
63:f4:ae:21:7e:64:18:7c:9d:3f:da:bc:96:86:17:d2:c0:75:
52:ba:c3:3d:79:6c:19:66:af:9d:f8:a7:2f:42:04:78:ae:8e:
29:51:c0:90:e2:05:c1:cc:0b:09:a4:53:8e:1c:b0:3f:62:4e:
4c:fa:8e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 17:14:36 2025 by rpki-client