Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rvwADRKZSXtDxze-nJYTh1_eQJY.roa
File: rvwADRKZSXtDxze-nJYTh1_eQJY.roa (raw, json)
Hash identifier: ZGjtBgUpNDfAleVJyHKHugWfrwClZYSlxYu7VMo7lXk=
Subject key identifier: AE:FC:00:0D:12:99:49:7B:43:C7:37:BE:9C:96:13:87:5F:DE:40:96
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184D99C958D594DAD75B9E2DE386DD6ADC9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rvwADRKZSXtDxze-nJYTh1_eQJY.roa
Signing time: Sat 03 Dec 2022 20:10:28 +0000
ROA not before: Sat 03 Dec 2022 20:10:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d9:9c:95:8d:59:4d:ad:75:b9:e2:de:38:6d:d6:ad:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 3 20:10:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aefc000d1299497b43c737be9c9613875fde4096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d1:b7:70:27:6d:77:86:3a:83:66:1c:4b:a1:
bc:f0:7c:d0:1e:3b:af:d9:df:87:77:c4:db:1f:e8:
d8:f8:26:7b:c7:c3:76:58:d3:0c:f2:d3:fa:44:11:
4b:52:dc:17:46:20:02:d7:a4:de:fa:2d:00:04:9c:
8a:4d:0e:87:af:ef:97:b0:3d:e6:c3:1e:0e:c0:c0:
d2:6f:08:6e:c8:81:96:74:d8:8e:50:c7:f2:7e:ef:
a1:af:5f:fe:f6:90:79:cc:44:1d:44:4a:12:a1:f7:
7d:56:18:e0:f3:27:bb:43:f1:9c:e1:84:20:33:aa:
3b:e7:93:95:32:87:8a:7f:1a:ce:44:3f:25:2e:ed:
12:5d:0a:0d:48:64:b9:f7:c2:f5:6a:dd:96:3a:ee:
73:24:45:ca:52:49:2b:70:06:fd:e9:6a:a6:49:dc:
5c:0d:7a:f3:d3:1a:56:09:2f:d5:64:34:16:a9:6d:
db:7a:79:bf:c6:e6:44:4c:64:dc:97:fa:fc:ee:39:
32:91:5c:8c:5f:4d:a3:4b:e7:c2:63:63:c3:0c:fa:
cc:20:81:7b:4f:1f:2b:5f:e1:ba:f1:74:3b:e3:7c:
8e:69:ef:7b:1b:7f:d7:31:a3:1c:ad:a7:ae:5e:8c:
64:23:40:cf:94:26:1b:16:6f:ce:fe:c2:1a:56:94:
25:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:FC:00:0D:12:99:49:7B:43:C7:37:BE:9C:96:13:87:5F:DE:40:96
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rvwADRKZSXtDxze-nJYTh1_eQJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
22:1c:cc:d5:40:06:09:e6:ed:71:b0:1d:b7:b3:8f:e6:d3:d7:
8a:2a:bc:7e:65:82:76:4f:6b:58:4b:cc:3b:c8:42:93:6d:69:
64:d4:02:6d:ca:07:76:49:5e:6a:bc:b8:05:8e:a3:0b:d3:a8:
91:5e:72:30:2b:3e:a7:81:20:b5:5b:9a:9c:ac:bf:e5:18:3f:
cc:9b:a1:16:35:15:20:c3:a7:a8:9f:b5:e3:aa:02:d6:e0:f4:
4b:60:f0:03:2b:64:59:d9:38:c9:73:ee:29:6a:57:a2:a5:ab:
cb:e4:8d:6b:28:19:72:90:de:b9:4a:f5:15:15:6f:05:1e:69:
6c:85:bb:4c:9a:a4:b4:9b:b2:6a:97:34:ba:ef:47:42:00:29:
5c:67:fb:d2:fc:fe:ea:e1:fc:69:ba:e3:21:39:4c:a5:7e:5e:
5a:2f:fc:99:ad:99:40:d2:5f:58:2f:9e:71:83:99:a4:97:8c:
2e:78:17:ec:7e:26:ac:0c:a8:f4:7a:24:c9:96:32:b6:a2:21:
62:ba:3f:60:c6:cd:46:8d:78:af:54:bd:97:c2:9d:e7:cb:02:
c9:1c:b0:0c:2f:a5:cb:b7:30:47:56:bd:a6:21:3d:e9:70:6b:
cb:d1:b0:80:df:59:03:95:d9:b2:86:03:9a:bf:e5:01:d4:45:
8d:bc:63:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 19:13:30 2025 by rpki-client