Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rSK49qeg08H8aKTIeXo3_AiWeOs.roa
File: rSK49qeg08H8aKTIeXo3_AiWeOs.roa (raw, json)
Hash identifier: WRjkpJvJOPNcFPwWW8NSw4m/343iTCi9uKJDb1sYlzc=
Subject key identifier: AD:22:B8:F6:A7:A0:D3:C1:FC:68:A4:C8:79:7A:37:FC:08:96:78:EB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 782601E0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rSK49qeg08H8aKTIeXo3_AiWeOs.roa
Signing time: Sun 03 Apr 2022 18:09:49 +0000
ROA not before: Sun 03 Apr 2022 18:09:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2015756768 (0x782601e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 3 18:09:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ad22b8f6a7a0d3c1fc68a4c8797a37fc089678eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b1:4f:63:58:4e:20:57:38:63:03:45:23:10:
bd:c2:38:09:1b:f2:67:ca:8d:d5:07:03:9e:41:0a:
73:2f:e7:cb:21:d3:4f:91:66:8b:f0:d2:a7:5a:8d:
29:ed:56:96:5d:fd:43:f3:c2:eb:5d:23:1e:c7:73:
94:4a:ac:8f:83:5c:07:74:1d:63:f6:53:4c:9d:24:
8b:da:ad:e1:4b:d2:d4:86:0b:c8:14:c4:09:30:41:
48:60:7d:31:8d:a9:63:6f:60:93:9d:9e:5c:26:c7:
03:f5:8b:dd:f6:19:d8:d3:fe:fd:c6:00:2a:0e:7c:
bf:e6:f0:92:28:65:b9:a3:49:f9:c7:0d:5b:c7:b0:
7f:2f:c0:f0:ee:3c:d1:c6:9f:05:46:44:3a:a2:ac:
76:3a:c3:be:fd:d2:1c:4f:8c:d4:9d:b1:2e:46:ed:
b3:88:99:5a:e7:1c:e1:73:b6:62:b1:fe:22:b8:ab:
b0:a8:51:b4:04:d7:f0:78:7c:ef:67:45:fc:b1:56:
c6:9b:7d:ed:67:8e:96:b0:3a:f6:56:90:ce:64:93:
b2:ed:89:02:0a:bb:b6:89:8d:76:ac:b7:99:ca:ab:
b0:e9:a7:ba:37:38:69:26:9c:7e:93:e4:d2:c7:cc:
30:e7:47:f9:ba:d8:09:8e:d1:5c:19:07:b1:58:5c:
28:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:22:B8:F6:A7:A0:D3:C1:FC:68:A4:C8:79:7A:37:FC:08:96:78:EB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rSK49qeg08H8aKTIeXo3_AiWeOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
21:e4:9c:3d:08:f5:19:9a:f7:ec:df:4a:c7:4f:d1:59:cc:48:
42:6f:64:5b:32:b5:45:eb:81:c6:1d:7d:e5:1d:8e:af:9c:08:
77:8e:33:47:77:22:79:6d:1b:59:7c:c8:a1:93:92:a2:34:3e:
e3:8e:ac:8a:2c:d0:d5:5c:84:c2:f0:bf:b3:98:cd:04:93:cf:
ab:22:49:b3:d8:14:4b:e6:b1:ee:99:69:a2:5c:97:55:f5:49:
6a:cf:bc:b8:35:8f:a1:31:77:8f:4d:5a:b6:d0:df:99:f6:79:
87:62:0b:b5:14:d9:5b:5c:22:13:52:b5:35:51:4a:65:14:c5:
ce:70:cf:0a:56:47:17:3d:af:08:c3:d5:96:69:d4:8e:f3:04:
0a:2a:94:f0:2f:1c:54:ce:3b:5d:b6:e2:10:53:98:9c:62:93:
a4:38:fe:3b:34:d5:9a:be:ea:d1:ba:7a:04:75:ff:8c:90:90:
62:5f:c1:e6:a8:ae:f1:f3:8d:55:78:e9:a2:b7:42:fa:5c:dc:
8d:57:7b:44:98:e2:e6:45:f1:68:74:19:78:13:c5:cc:a8:8e:
b0:a8:aa:19:6e:2e:58:0b:75:f5:66:88:b2:d2:3b:fa:08:bd:
ff:33:64:9b:b4:ab:bd:65:8b:96:77:64:79:fb:5e:a9:a3:1f:
62:e4:0c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 21:24:45 2025 by rpki-client