Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rk1v0W5zs73pYhaqB_ui9i5h6m4.roa
File: rk1v0W5zs73pYhaqB_ui9i5h6m4.roa (raw, json)
Hash identifier: cEEMlIa8h2xyXIiGIPdUNTQQk/Bxh6/cwJLZlH1Pt2E=
Subject key identifier: AE:4D:6F:D1:6E:73:B3:BD:E9:62:16:AA:07:FB:A2:F6:2E:61:EA:6E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8E29C6A1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rk1v0W5zs73pYhaqB_ui9i5h6m4.roa
Signing time: Sun 19 Jun 2022 17:09:45 +0000
ROA not before: Sun 19 Jun 2022 17:09:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:56ba:5b78/128 maxlen: 128
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:181:477e:58d8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2385102497 (0x8e29c6a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 19 17:09:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ae4d6fd16e73b3bde96216aa07fba2f62e61ea6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:d2:cd:73:15:c3:35:6b:9f:3c:4e:c1:5b:29:
b7:79:2b:80:00:57:11:c6:6b:3d:7e:d8:d4:a5:d7:
87:1e:40:de:5f:74:be:23:75:03:e9:21:57:e2:77:
82:5e:f6:45:25:d0:f4:23:e0:f9:e1:4f:d9:19:0b:
c5:df:98:31:88:16:f4:11:ff:fa:e8:c5:56:38:d4:
f9:99:c2:fa:36:c5:78:8c:be:cc:08:3f:0a:eb:eb:
7c:0c:95:0f:66:52:7b:b5:ab:2e:eb:9c:78:af:c8:
6a:73:23:6d:f0:b3:0b:c5:6d:6e:01:04:c5:31:f9:
eb:1e:84:60:3d:a5:95:b0:2a:a1:bc:14:b7:12:a1:
b6:e9:2d:95:a8:3a:3f:c9:25:ff:13:4f:d8:98:01:
3d:97:64:15:93:2c:dd:31:3b:1f:78:1c:59:a5:78:
f2:a2:5c:6c:f1:fd:be:84:7e:89:de:0f:08:74:62:
fd:9e:99:a1:df:7b:8b:56:71:d0:e1:22:78:a3:d2:
41:67:91:6f:0b:71:98:9a:29:1e:4f:74:7e:51:26:
7b:ea:3b:20:f7:03:6b:d6:26:66:c3:0d:c4:98:42:
90:dc:79:74:69:37:3b:8c:f1:be:b0:d8:50:f3:d6:
fb:77:e9:1e:8b:9a:ef:49:ec:40:2a:9e:aa:0f:2b:
c2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:4D:6F:D1:6E:73:B3:BD:E9:62:16:AA:07:FB:A2:F6:2E:61:EA:6E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rk1v0W5zs73pYhaqB_ui9i5h6m4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a5:4a:de:da:74:b9:ef:ed:69:78:13:d5:70:fc:a1:95:4a:c0:
49:f8:77:a2:3f:a9:b0:ea:67:dd:9b:46:0e:4f:ca:1c:a2:1c:
ef:43:a6:8e:ae:df:b7:47:e8:7d:17:6e:17:5b:64:41:2d:4d:
b2:f8:34:b2:b8:26:6c:d1:d4:cb:b1:49:09:8c:cb:40:0b:07:
93:08:b7:07:22:09:52:06:3b:e7:7d:7d:73:57:51:2f:84:ae:
ce:50:dd:d3:41:ad:3b:fc:38:67:07:40:33:ca:6a:24:a0:fd:
0f:d6:a5:77:43:49:dd:61:9e:03:69:5c:0f:49:f8:b0:de:1b:
de:b7:55:76:d0:42:e7:77:81:2a:b0:c6:bb:5e:e4:e4:5c:b9:
8a:f9:d2:c9:4e:4f:31:aa:62:f6:8a:33:31:18:6f:7e:b6:a0:
ec:aa:07:27:19:9d:b1:cf:b9:c4:ea:d4:19:2b:b7:06:66:42:
a7:f0:13:ab:26:e5:ce:f7:44:f2:a0:d0:75:2f:b9:5e:8f:63:
5e:b1:d4:d7:76:e9:d1:15:36:13:2b:cb:41:17:2f:36:87:e2:
f8:ec:66:60:5d:4b:2d:e2:90:b7:01:06:1f:5d:52:13:50:7a:
13:77:79:20:4e:ed:31:97:11:3f:2b:ba:64:20:71:c6:7b:85:
ae:53:7b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:29:08 2025 by rpki-client