Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rO5J90Ph5hKiJLInMA1XNH0JZE4.roa
File: rO5J90Ph5hKiJLInMA1XNH0JZE4.roa (raw, json)
Hash identifier: 1Vc8SoN1ozJMCSSX87M1uRz6B0Qg777bDY8GD5H6ZMw=
Subject key identifier: AC:EE:49:F7:43:E1:E6:12:A2:24:B2:27:30:0D:57:34:7D:09:64:4E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182EB07643B31299C1CB6F052797106A05C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rO5J90Ph5hKiJLInMA1XNH0JZE4.roa
Signing time: Mon 29 Aug 2022 19:15:05 +0000
ROA not before: Mon 29 Aug 2022 19:15:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:eb:07:64:3b:31:29:9c:1c:b6:f0:52:79:71:06:a0:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 29 19:15:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=acee49f743e1e612a224b227300d57347d09644e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:5a:c7:00:65:06:60:5a:f3:7d:61:1a:2b:4b:
5e:cd:2a:b3:55:26:09:f0:5b:a9:81:61:41:d1:90:
f4:42:d9:fd:a3:e6:fe:f4:90:da:b3:6d:f7:f9:8d:
ce:05:93:4f:1b:af:b1:73:3e:a3:1b:d3:f4:35:a5:
d3:3c:d4:4b:38:43:d4:53:66:9a:d5:90:5a:d8:9c:
16:f8:be:6b:e6:cd:de:46:72:d6:39:6b:80:a6:7c:
e6:f5:32:33:ba:41:a8:d8:4d:9f:e4:9c:fb:22:b8:
05:d8:30:a5:d1:33:a9:72:e1:9d:78:f5:50:85:ad:
b0:2e:c9:5d:69:47:bc:67:bf:23:a6:26:91:6d:fe:
2b:05:79:10:53:11:17:05:ec:46:6c:22:4e:01:2a:
36:8a:03:22:88:31:41:ac:4b:c6:88:3b:ca:80:5a:
eb:2e:84:46:7b:23:51:b8:ab:46:a3:33:94:9d:c2:
75:12:07:f1:7b:ef:8c:d5:eb:11:14:02:7c:0f:11:
df:d8:d2:76:f3:ad:84:d9:47:bc:29:e5:6f:de:05:
bd:6c:37:af:99:35:18:3e:5b:b4:20:62:05:30:4c:
51:7d:de:99:52:a6:df:2d:d8:32:6d:89:d4:d4:a2:
60:35:4e:22:af:33:a0:f3:25:5e:54:05:11:6a:4d:
ff:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:EE:49:F7:43:E1:E6:12:A2:24:B2:27:30:0D:57:34:7D:09:64:4E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rO5J90Ph5hKiJLInMA1XNH0JZE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
31:06:bb:d7:d9:65:a5:f7:8f:8b:49:b9:2a:17:8e:dd:21:6e:
c5:36:31:70:99:a7:06:56:f1:f7:30:ac:6a:6a:df:d3:52:80:
65:bf:e7:b7:57:ef:82:ba:17:e1:dc:59:37:fe:f7:39:7f:e9:
af:5d:44:51:d0:53:d3:21:bf:d5:92:f1:a0:59:98:9d:b0:b6:
87:84:46:a7:37:06:63:42:9a:3c:42:d9:46:62:ad:aa:35:b0:
3b:6a:bf:a3:f7:07:9e:35:6b:f9:af:87:00:87:b6:ed:78:c4:
38:5e:2a:f2:7c:9e:d1:d8:cd:76:48:50:19:eb:8f:64:60:5d:
eb:91:b0:a4:bc:9b:59:d1:e7:d1:6e:02:14:ff:6f:a5:b9:02:
f1:21:ee:18:7f:69:78:18:79:8d:09:fd:f6:c2:e9:09:28:11:
0c:c1:5f:fa:45:d9:5b:f5:50:ff:da:fe:6e:ba:62:df:e3:b1:
15:cd:04:61:ad:f4:06:78:d2:5e:69:f6:6c:f8:1e:80:b1:3c:
dd:16:86:36:e4:78:e5:83:d8:21:2d:8f:9f:96:44:66:1f:f9:
a7:26:65:e2:64:44:97:f7:05:1b:6d:72:6f:0d:ac:e6:06:ec:
65:e6:e1:b8:d8:92:7e:3b:dd:d5:19:07:6e:d0:a9:d8:8a:82:
83:d8:40:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 22:29:54 2025 by rpki-client