Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rdRbaGqRTAdfn7KsXKVLr-4yD28.roa
File: rdRbaGqRTAdfn7KsXKVLr-4yD28.roa (raw, json)
Hash identifier: GzmacBC5SjGiRy5NTwU6JaGLkTkfcDvitWw+DorYohQ=
Subject key identifier: AD:D4:5B:68:6A:91:4C:07:5F:9F:B2:AC:5C:A5:4B:AF:EE:32:0F:6F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01851A6BE4CDB160F66CCF34BC44AF046F43
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rdRbaGqRTAdfn7KsXKVLr-4yD28.roa
Signing time: Fri 16 Dec 2022 10:12:36 +0000
ROA not before: Fri 16 Dec 2022 10:12:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:1a:6b:e4:cd:b1:60:f6:6c:cf:34:bc:44:af:04:6f:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 16 10:12:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=add45b686a914c075f9fb2ac5ca54bafee320f6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c2:bc:9b:70:d3:b4:03:a6:18:14:59:11:56:
55:95:0b:8c:06:76:4a:84:b4:4e:b5:52:24:fa:26:
f2:f8:a3:48:4d:14:d6:9b:34:a2:83:b5:a8:3b:71:
d4:cb:b5:d3:b7:8b:7b:1e:51:f5:5a:1e:82:ef:b0:
44:8c:09:d2:dd:86:07:1e:60:8b:b1:17:e8:f6:27:
3f:c2:38:6b:3f:71:e4:97:48:e9:1d:2c:84:a9:bc:
d0:b6:de:78:6e:3f:71:5d:bb:09:c4:60:ac:c9:33:
9c:e8:f7:03:d9:9e:11:fb:e4:05:21:f7:f1:ce:cd:
67:01:fb:9c:91:c7:c8:2e:d5:36:24:e7:9a:37:d5:
6e:63:35:e0:3d:22:81:5a:4f:c3:80:f6:84:f0:43:
f9:45:58:65:20:9c:f2:97:c6:8e:6c:f2:5d:35:02:
22:1d:04:58:10:ce:5e:12:36:ec:06:ca:51:58:d5:
b3:9d:aa:a0:1f:c5:65:ff:e6:68:a0:4e:83:8d:8a:
89:c1:0c:26:bf:bc:6c:62:68:95:b6:40:6f:8b:c0:
f9:02:5d:db:b2:e3:1c:de:b7:2e:4f:27:63:9c:17:
98:ec:a5:e9:11:1b:89:fc:7e:a8:1e:7a:bd:da:45:
31:49:09:29:10:c7:6a:7e:e6:72:59:a0:4b:1b:91:
eb:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:D4:5B:68:6A:91:4C:07:5F:9F:B2:AC:5C:A5:4B:AF:EE:32:0F:6F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rdRbaGqRTAdfn7KsXKVLr-4yD28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7c:b4:17:c1:a1:b3:0d:8f:a9:c1:fa:61:c2:07:60:69:ac:1d:
46:a4:d7:e4:6e:e3:14:d1:6b:95:6e:4d:82:0f:49:16:d2:3c:
dc:0a:9f:30:e6:3c:b4:0d:3e:9a:67:a3:ae:f5:d8:76:6c:11:
db:ea:8e:b0:05:e2:f1:f3:76:17:76:8a:8c:91:04:33:38:09:
81:11:82:00:a6:ff:e2:99:32:8c:9f:4d:bf:e3:fe:1a:71:84:
8a:d6:86:ff:fa:ea:68:6d:11:2c:bb:8a:89:4f:e2:9e:c4:b4:
18:f6:ec:cb:39:2e:24:f9:b8:3a:7c:41:b8:3e:27:38:7c:99:
62:b6:84:64:de:ad:1b:cf:01:b3:74:89:74:b1:bd:cf:3b:ac:
e5:00:33:88:5f:7d:83:6b:54:cd:bb:4b:db:5f:dc:00:68:a5:
b4:94:a4:97:6a:0f:ea:f2:2b:82:e3:76:b6:ff:cb:eb:60:d0:
fe:86:41:40:77:e9:c7:c7:ef:d9:09:0f:36:c3:fd:69:83:e2:
2f:18:b5:dc:b8:d7:c7:f5:20:ed:07:dc:4f:c7:fd:d6:fb:a3:
34:e7:cf:97:9b:4e:ee:46:4d:fd:91:f5:58:9f:1c:ee:cc:b4:
14:8c:ea:14:be:76:15:48:1d:c6:d1:24:ee:fa:77:fa:df:f8:
56:e9:34:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:45:08 2025 by rpki-client