Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/svtk4BWhXVK--IBOmprk90k5u0M.roa
File: svtk4BWhXVK--IBOmprk90k5u0M.roa (raw, json)
Hash identifier: +MaoEVRq19gylFBlkJKaCskF10vTlVEeGLyy1Hc61Lg=
Subject key identifier: B2:FB:64:E0:15:A1:5D:52:BE:F8:80:4E:9A:9A:E4:F7:49:39:BB:43
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01821E88E15766C0CA397C79E32C41A2262F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/svtk4BWhXVK--IBOmprk90k5u0M.roa
Signing time: Thu 21 Jul 2022 02:14:23 +0000
ROA not before: Thu 21 Jul 2022 02:14:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:1e:88:e1:57:66:c0:ca:39:7c:79:e3:2c:41:a2:26:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 21 02:14:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b2fb64e015a15d52bef8804e9a9ae4f74939bb43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7d:26:50:93:60:19:61:6a:ff:24:cc:31:9b:
4e:59:9b:cf:57:ca:25:f9:36:5c:a6:4b:89:26:64:
44:16:3d:46:e3:2c:c7:e3:61:e3:12:f9:e9:c1:44:
61:f0:9d:82:c3:36:76:a2:de:80:af:f9:3d:5a:9b:
8c:1d:10:da:9d:26:35:d8:80:e3:dc:9f:36:49:ce:
17:a1:3d:e7:bb:87:2b:46:c1:83:2f:b0:2c:a9:1a:
5f:0d:3e:d7:62:e9:0d:6f:21:19:a7:fd:2b:cc:54:
88:2e:e1:11:41:7b:c4:7f:6d:fc:80:5f:94:43:fa:
f2:3a:1b:5e:d4:a2:5e:9b:26:84:2c:9a:a3:01:2f:
28:03:70:12:d7:bc:bd:ea:3c:51:fa:03:2d:0d:f8:
3f:63:ec:d6:b9:06:23:ae:db:20:bb:b6:2d:69:70:
7a:fe:e9:73:4e:00:73:54:8b:a5:0f:3a:fa:00:d1:
0e:99:2f:f8:c6:50:4a:0d:38:6c:28:c6:47:c9:94:
4d:5f:81:1b:9d:11:97:4a:a8:d7:81:7e:2d:40:a6:
0c:de:4c:53:2a:67:fd:ec:74:bf:f9:8f:a0:51:00:
42:96:da:43:69:50:fc:42:4f:53:e7:e3:f1:b5:3c:
90:a5:1a:35:41:86:f9:f9:d9:ec:a3:52:0d:7a:87:
f0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:FB:64:E0:15:A1:5D:52:BE:F8:80:4E:9A:9A:E4:F7:49:39:BB:43
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/svtk4BWhXVK--IBOmprk90k5u0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4a:cb:61:2a:92:68:cf:72:3b:67:93:e0:96:7a:0d:35:77:c6:
b5:ce:46:af:7c:8f:89:fd:a9:5f:f6:5c:58:82:56:86:c3:49:
2d:7c:90:9d:c1:37:e2:a1:1d:7b:7d:97:4c:3e:23:19:4d:41:
c9:50:d0:ce:d6:e8:b3:ca:63:9a:eb:31:d0:52:15:b9:6e:6f:
91:90:7d:94:b7:c4:68:78:b6:19:6c:f3:a9:36:f4:00:31:ee:
52:8c:e2:9a:99:a4:5b:07:f7:48:9b:7c:3a:ab:ae:31:41:9d:
a7:ec:34:d0:99:cd:3f:ed:fc:75:9a:f5:f6:6c:93:59:a0:25:
6c:bc:ac:37:d3:20:a0:2e:6a:19:e4:fe:92:9a:15:c3:bc:d5:
76:26:8d:ad:97:af:3c:a8:2a:42:54:9f:98:e3:29:ca:de:ff:
3d:e7:8d:74:f6:94:3b:5c:bd:ee:b8:cc:08:1e:59:5f:2a:56:
c1:be:84:64:d6:ed:a7:45:10:d0:42:cb:41:50:48:33:62:54:
9a:6f:89:9a:62:86:de:10:32:e6:6e:6a:3a:74:75:ee:45:58:
f9:e0:a3:f8:be:09:6b:3e:9e:13:a3:b4:ab:e5:bc:ed:ae:57:
2f:ef:36:40:52:6c:b1:5e:cb:0d:b0:83:fb:9a:db:4b:aa:67:
b4:4c:5e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:41:01 2025 by rpki-client