Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rK7U5fG5QTSaHmrYTpGJOFNgRFg.roa
File: rK7U5fG5QTSaHmrYTpGJOFNgRFg.roa (raw, json)
Hash identifier: fKUMual7scHk53Xb4400POBbLHst+ud6tH6Y5otHcHA=
Subject key identifier: AC:AE:D4:E5:F1:B9:41:34:9A:1E:6A:D8:4E:91:89:38:53:60:44:58
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182173FF54C2DFFC06FDE53CF829CCF49EB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rK7U5fG5QTSaHmrYTpGJOFNgRFg.roa
Signing time: Tue 19 Jul 2022 16:17:23 +0000
ROA not before: Tue 19 Jul 2022 16:17:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:17:3f:f5:4c:2d:ff:c0:6f:de:53:cf:82:9c:cf:49:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 19 16:17:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=acaed4e5f1b941349a1e6ad84e91893853604458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6c:eb:d2:d5:65:a9:29:3a:2c:ea:43:e8:60:
f3:64:57:4b:7d:95:24:30:17:30:66:4c:86:ad:88:
9e:a5:9b:2d:8f:54:96:3a:d8:54:02:64:5c:66:1c:
94:5b:29:90:97:b0:91:21:eb:5c:66:cb:20:1a:91:
95:94:a1:12:86:a8:3c:6e:f8:3a:60:3b:47:c2:aa:
91:71:53:61:8f:fc:f0:fa:22:d5:ea:ae:e2:30:6b:
0d:ad:b0:93:ba:7f:67:f1:b7:c5:4c:2b:9b:fb:f5:
6c:d1:9a:84:c0:1c:3c:f1:bc:4f:d9:db:9e:0f:8b:
e4:24:12:d7:b6:1f:59:3c:6a:d3:90:13:d9:32:2f:
e7:b7:9e:e8:7c:1a:0d:bb:da:52:d2:8c:ad:bf:a1:
cf:46:4a:42:c1:d8:60:c3:b3:b5:b9:af:c5:1a:a4:
8f:12:b5:3d:20:ce:38:57:b4:ab:dd:7b:d6:28:df:
99:cb:8f:c7:fc:79:de:cb:90:82:70:15:bd:e1:a6:
82:61:09:7e:df:18:fd:0f:35:ee:4f:d0:8b:7e:4e:
3b:f0:10:a5:f7:98:0c:fc:3d:e4:3f:e0:28:ef:8c:
9e:dd:8a:b3:bf:81:20:12:28:bb:f3:d9:67:1e:19:
a4:fa:8b:79:64:dd:a0:c4:9b:05:1f:a9:a6:60:ed:
b5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:AE:D4:E5:F1:B9:41:34:9A:1E:6A:D8:4E:91:89:38:53:60:44:58
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rK7U5fG5QTSaHmrYTpGJOFNgRFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9e:4e:75:1c:70:05:43:9a:1d:ec:1c:6b:6e:b5:13:03:63:19:
05:83:3b:fa:ab:f4:aa:a9:15:a5:a3:80:b1:ba:28:01:62:52:
c4:2c:a5:41:11:b6:19:3c:8d:bb:b5:1a:80:7b:b5:a9:19:55:
a7:98:ae:d0:3d:af:a7:5e:47:c6:da:f7:f8:3a:4a:f3:8a:b1:
0b:20:29:9e:72:a3:82:ba:d4:1f:fb:56:6b:1c:1e:e7:38:c3:
9e:51:f6:d1:dd:da:1c:7c:7a:6c:e8:a3:00:7c:5e:ee:92:fa:
84:dd:cc:96:f1:d1:0a:a2:05:a0:e9:7b:77:79:8b:64:36:eb:
09:36:f4:d3:3c:a7:50:ed:50:27:d4:42:97:52:f7:93:1f:23:
15:ef:a2:25:fd:ae:2d:a9:fe:bd:4e:f3:7d:fd:87:e7:af:ed:
14:1e:bf:df:47:94:b0:b8:ee:96:c8:9b:b2:e4:cf:1f:76:0c:
ee:ac:00:94:31:e7:06:0e:05:a0:af:b7:cc:df:43:ea:b5:37:
e0:15:7a:af:d5:20:23:d4:84:36:ac:9c:c7:12:10:c7:b9:0f:
bc:b0:66:0b:f6:b7:95:69:d5:55:d3:89:bc:6a:46:da:15:17:
c1:16:50:dc:af:14:7d:0b:ad:0e:c2:e3:5d:66:f1:2d:3a:e5:
53:04:95:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:42:04 2025 by rpki-client