Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pVe7ZlEI0PiBIVBHcZTS3Jff_nw.roa
File: pVe7ZlEI0PiBIVBHcZTS3Jff_nw.roa (raw, json)
Hash identifier: vyOg+UPA0Z6TZ7Lc4SlekJymPbgaPmVoOvNXHeARevo=
Subject key identifier: A5:57:BB:66:51:08:D0:F8:81:21:50:47:71:94:D2:DC:97:DF:FE:7C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01852FDE74402551DF650FCDC143117BBD98
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pVe7ZlEI0PiBIVBHcZTS3Jff_nw.roa
Signing time: Tue 20 Dec 2022 14:09:45 +0000
ROA not before: Tue 20 Dec 2022 14:09:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2f:de:74:40:25:51:df:65:0f:cd:c1:43:11:7b:bd:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 20 14:09:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a557bb665108d0f8812150477194d2dc97dffe7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f5:0c:6b:43:91:0b:47:25:18:03:9c:f2:9f:
c6:08:fb:1e:cb:89:12:61:54:97:55:aa:25:72:62:
3d:bd:2b:7a:7f:56:00:cf:b5:6d:a4:e2:1e:d8:4e:
60:73:b4:82:85:a9:2e:68:ff:20:13:90:bf:91:d2:
72:d1:16:da:24:97:eb:7d:cd:97:41:5c:bc:92:79:
21:2c:0f:02:84:d8:15:32:5c:ea:08:2e:d3:83:38:
1e:41:5e:33:c6:4a:3a:60:d3:80:4b:e9:32:b7:6d:
6f:1b:aa:6d:ee:ab:71:fc:f1:55:66:42:33:47:ce:
e7:87:fc:6f:18:86:f3:a7:fd:c5:60:d0:46:88:ef:
6b:6c:bd:37:4d:9f:d7:0e:76:ff:0b:d9:e2:f0:5f:
a9:a7:f9:ff:5e:03:c8:60:6e:e9:5d:5e:b4:61:45:
05:46:57:5b:4f:de:aa:52:6a:20:be:60:f7:69:a2:
51:13:8e:ab:93:03:a9:0c:90:82:05:df:6e:3d:b1:
69:a0:02:1b:e2:be:89:e4:58:bd:18:31:3f:81:23:
40:16:64:78:31:76:df:94:8b:9f:46:44:2c:4f:08:
af:bd:d2:03:af:4c:f5:74:1a:9e:95:e4:ad:2a:79:
71:b5:60:b1:bc:12:38:05:b4:e3:28:80:2d:91:b2:
6e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:57:BB:66:51:08:D0:F8:81:21:50:47:71:94:D2:DC:97:DF:FE:7C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pVe7ZlEI0PiBIVBHcZTS3Jff_nw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
63:52:18:ea:d6:b2:51:75:f9:03:c8:72:b6:22:ab:d8:65:6c:
45:66:7f:88:67:97:2b:2f:d0:c9:0f:fd:64:6a:20:1f:b3:40:
9f:ef:a2:f8:dc:ba:bf:56:22:2b:56:9f:61:d8:8a:79:3e:55:
e5:9b:7b:16:f4:39:fd:94:7e:3f:63:22:91:3f:a3:74:7c:aa:
05:1d:3e:41:4c:be:a5:c0:7b:b5:5a:47:85:c3:54:46:fd:9a:
4b:25:53:96:ff:46:af:94:ba:3b:8a:f4:d5:e8:fb:69:f1:e4:
0a:3b:55:20:81:23:eb:f1:9b:fa:d0:da:8d:8f:37:9f:b5:f1:
e9:37:1f:e2:1a:0e:26:2d:c0:44:89:43:65:da:27:1e:4c:b0:
ac:5c:1b:1b:b4:00:13:ae:92:d1:69:0a:ff:bc:ca:3f:15:bc:
c0:71:ff:db:f0:e1:a9:66:66:8c:31:c4:73:a5:c0:c3:b7:76:
e7:44:cd:d7:d8:d5:de:80:b7:66:68:a7:a9:ee:62:d6:39:37:
cf:9c:74:c0:ae:0f:db:f1:24:4d:68:bb:17:2c:83:c4:a1:e1:
8e:da:b3:44:29:8f:fe:26:fa:5d:15:ec:fc:a0:d3:02:68:b8:
35:4e:fb:ef:c5:28:8d:d1:ec:e7:14:09:19:07:24:fa:67:fd:
b9:15:0d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:52:25 2025 by rpki-client