Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sT34jcr6zt3PXJQLxQbzO3tdZT8.roa
File: sT34jcr6zt3PXJQLxQbzO3tdZT8.roa (raw, json)
Hash identifier: XZCv1Ge3SC3hKU+68sDWnJT1RM1ElFsy34fbO+7iNtc=
Subject key identifier: B1:3D:F8:8D:CA:FA:CE:DD:CF:5C:94:0B:C5:06:F3:3B:7B:5D:65:3F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018569CFC3CB5BBE81CA65825D175CD72CBA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sT34jcr6zt3PXJQLxQbzO3tdZT8.roa
Signing time: Sat 31 Dec 2022 20:11:41 +0000
ROA not before: Sat 31 Dec 2022 20:11:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:69:cf:c3:cb:5b:be:81:ca:65:82:5d:17:5c:d7:2c:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 31 20:11:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b13df88dcafaceddcf5c940bc506f33b7b5d653f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:79:38:df:2e:17:6b:d8:8e:c7:29:27:51:f5:
c9:e9:71:91:ca:44:f0:0b:c4:15:2b:74:3e:1d:06:
dd:06:ae:7a:78:30:92:f9:37:1e:c6:d7:90:cd:22:
69:1a:82:c4:12:7f:11:bb:37:89:61:cf:24:55:d5:
2f:78:fe:3a:32:3f:e2:06:60:d9:e0:50:b2:03:c4:
08:6e:ba:ac:b5:8e:6c:bb:99:d2:55:3e:63:32:19:
30:b0:60:37:49:4b:1d:21:cf:68:e5:13:79:ea:c6:
69:bd:1a:a7:db:54:4e:83:f0:14:e8:7e:f1:ba:50:
d4:4e:7f:bd:58:08:d8:09:e9:75:d0:84:62:58:61:
ac:a0:6d:d0:2f:7a:b5:d1:3b:74:0d:00:20:ef:e0:
63:19:4a:f1:e6:ff:05:d8:5b:ab:fa:ff:af:99:01:
0e:a8:66:20:cc:a8:db:b2:dd:f5:19:a7:69:0a:91:
5c:61:4d:b5:b1:7a:70:0c:b1:61:b4:16:37:86:44:
18:69:a1:60:81:17:f5:54:d3:52:20:96:0e:30:db:
b1:08:22:9b:c7:1a:fd:ee:f3:e0:ea:80:ed:34:a9:
7e:80:60:94:36:9d:90:27:45:32:bd:5d:47:6e:5f:
c4:6d:c9:f8:4b:15:6c:fb:c9:94:f1:65:f8:ab:67:
a3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:3D:F8:8D:CA:FA:CE:DD:CF:5C:94:0B:C5:06:F3:3B:7B:5D:65:3F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sT34jcr6zt3PXJQLxQbzO3tdZT8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
79:63:e9:33:3a:b1:7a:8c:f8:90:b7:79:85:3c:eb:89:de:81:
86:c9:27:64:f6:24:09:1d:45:ee:2b:e4:77:53:20:21:90:73:
c8:d1:9c:91:38:9b:dd:11:51:e8:11:4c:65:64:d9:05:8e:59:
9d:a3:5f:61:34:27:d5:a0:9a:57:8b:3a:b0:90:9f:86:a3:a0:
40:71:b3:81:14:57:35:24:a9:35:ef:f9:40:b8:be:13:8e:19:
1a:2c:35:2a:8d:64:07:22:8c:34:e2:35:0f:47:4e:d8:21:58:
2c:2d:2a:ce:97:75:d3:0e:4a:b9:d5:f9:b3:3c:f2:a1:fb:e4:
d9:26:7b:40:36:7e:97:5a:31:7d:c4:f6:0f:65:85:b3:53:da:
d3:a9:9b:94:7e:3e:d3:d2:04:92:b2:ed:93:28:39:35:e3:8d:
74:a6:e7:68:35:3d:06:17:46:69:8d:7e:4c:85:58:e8:d8:cd:
9c:21:c7:56:d8:0d:0d:4e:46:99:77:09:02:63:1f:8e:2a:aa:
89:6b:2b:7a:cc:c9:96:7b:5a:74:34:ea:35:e4:8e:76:ab:9c:
77:ea:bf:37:a4:c6:31:78:3b:4c:ec:3f:75:46:bd:20:c5:01:
9a:e6:62:db:13:b5:a5:50:82:1a:9e:bf:45:33:e5:93:40:42:
dc:c5:53:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 10:15:00 2025 by rpki-client