Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sP5Vp-6pCDatuo7gBcHVWIdKFH0.roa
File: sP5Vp-6pCDatuo7gBcHVWIdKFH0.roa (raw, json)
Hash identifier: c0lsZwO0YpEaEoJZjnCVKrFULIqsGgj+t7OBOQpipoI=
Subject key identifier: B0:FE:55:A7:EE:A9:08:36:AD:BA:8E:E0:05:C1:D5:58:87:4A:14:7D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183E6161C17287A5C1343008F12D28203CA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sP5Vp-6pCDatuo7gBcHVWIdKFH0.roa
Signing time: Mon 17 Oct 2022 13:15:51 +0000
ROA not before: Mon 17 Oct 2022 13:15:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e6:16:1c:17:28:7a:5c:13:43:00:8f:12:d2:82:03:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 17 13:15:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b0fe55a7eea90836adba8ee005c1d558874a147d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0e:ff:7d:c2:db:02:9b:f3:ff:68:09:e1:f7:
76:2e:6b:87:69:99:57:6b:6a:67:03:43:88:de:05:
3b:9e:8c:5f:1c:cc:8e:c3:01:dc:34:8b:5e:bf:23:
2c:d3:ed:47:78:3a:07:aa:7b:4f:3f:de:74:43:3f:
4f:d5:d5:e0:90:8d:80:fa:70:b2:e5:89:3d:2b:eb:
66:7e:be:ff:cb:50:d9:b0:a0:f8:35:0e:97:ff:87:
a2:d9:34:37:a5:64:01:07:a4:0e:7f:34:5e:70:10:
3c:5a:1a:62:dd:e8:43:62:bc:bb:ee:84:9b:6d:4a:
1f:0b:22:dc:22:5d:e1:25:1d:fe:18:1d:09:d0:62:
c5:cc:86:60:46:29:96:f2:5f:51:d1:13:17:bc:7c:
30:3f:87:4a:db:92:0f:d4:11:20:3f:75:91:91:06:
b6:32:18:0a:fb:66:a8:3c:37:d5:fe:91:6f:98:b4:
e7:0a:02:57:94:fc:27:f6:3d:22:50:95:56:77:25:
86:c8:b1:64:4b:c3:48:f8:2d:34:83:1a:76:19:58:
a6:e7:4d:51:65:15:2c:08:cd:ea:86:a4:17:79:35:
33:39:70:8e:26:53:d9:87:fd:03:97:84:68:44:73:
f5:e0:75:07:09:ee:58:b8:f3:58:e3:1f:25:71:30:
a3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:FE:55:A7:EE:A9:08:36:AD:BA:8E:E0:05:C1:D5:58:87:4A:14:7D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sP5Vp-6pCDatuo7gBcHVWIdKFH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
73:87:2b:53:aa:ca:d9:fe:c8:c2:d0:fd:a8:0f:81:f5:f9:a7:
b7:0d:9a:5b:fb:6a:17:65:41:e6:0c:73:76:09:8c:6f:08:ba:
33:2f:40:83:b0:ee:78:de:ef:93:fc:2e:18:41:87:71:ed:75:
1b:65:6b:a4:b6:df:59:3e:ec:20:6f:82:af:5b:c3:7e:95:d6:
e8:5f:e7:71:81:24:60:11:35:49:16:22:e5:03:8d:54:3a:5e:
34:80:e4:ca:92:bd:80:1f:3f:32:fe:27:55:f1:2e:af:d6:92:
f2:10:fa:13:be:28:a0:54:0d:66:4a:46:be:5d:d1:79:29:da:
a4:42:4c:61:44:88:a5:0d:b4:11:c2:f8:40:93:16:d5:b9:f8:
df:98:9b:81:37:ba:73:b0:f3:7a:f4:56:42:b0:5a:6b:6f:ca:
1f:8e:97:e0:d2:39:27:32:a3:55:8e:08:15:ac:83:e0:c3:c3:
6e:24:fc:78:78:b2:02:9a:26:13:fa:a7:65:80:c3:b8:ed:92:
10:c8:4e:44:4a:67:c1:fc:0f:1a:6f:8a:3f:b2:f7:65:54:d0:
cf:f0:1a:fc:13:28:b1:17:20:d0:b5:38:3b:e2:bb:c9:07:59:
bb:36:96:6b:15:14:5d:e3:9f:cd:e1:10:e9:a2:80:17:93:06:
ea:2c:c5:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 12:03:47 2025 by rpki-client