Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/t2MhB0ndYDTKJkp8EzW5iVSz75c.roa
File: t2MhB0ndYDTKJkp8EzW5iVSz75c.roa (raw, json)
Hash identifier: PHWIYGLG1CqB6enjsUdR3WLjRr1AYGU5HFNeB9V4X0Q=
Subject key identifier: B7:63:21:07:49:DD:60:34:CA:26:4A:7C:13:35:B9:89:54:B3:EF:97
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01821EF5D3B89355DF4FA90D59F21B26FD94
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/t2MhB0ndYDTKJkp8EzW5iVSz75c.roa
Signing time: Thu 21 Jul 2022 04:13:23 +0000
ROA not before: Thu 21 Jul 2022 04:13:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:1e:f5:d3:b8:93:55:df:4f:a9:0d:59:f2:1b:26:fd:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 21 04:13:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b763210749dd6034ca264a7c1335b98954b3ef97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0d:b6:20:b8:ce:f2:ee:dd:7e:2d:f3:94:97:
20:45:c0:5b:ca:4c:7c:e5:c2:de:5c:87:d8:30:45:
0c:fa:6b:8c:ce:b9:d2:49:9e:71:ba:55:31:3f:b4:
ef:2a:40:8e:4e:52:d7:8f:50:b5:16:11:86:8f:ab:
d0:0c:6e:e0:fb:e1:01:64:79:fa:b6:66:33:44:f7:
bf:d5:35:25:76:e4:7e:9a:65:8c:72:4b:52:b7:6a:
fd:a2:3d:fb:57:d6:6b:3e:a9:72:b7:89:45:72:aa:
ac:ee:7e:41:8f:2f:6b:ad:26:c6:32:a2:6b:3e:94:
78:87:61:41:c4:ec:4b:46:ec:08:1f:74:24:a6:36:
4c:5c:34:c7:7a:fe:0b:57:2c:8a:31:b9:97:1c:b5:
8f:c2:09:3f:fe:07:7f:b3:03:cd:3d:c5:d4:56:e1:
4f:4d:ae:02:0a:80:f3:74:3f:99:fd:2e:ea:79:44:
63:58:97:67:be:52:1f:81:4d:c5:6a:31:80:e2:c6:
ed:18:f9:64:8f:55:70:de:08:3e:d3:3a:e2:75:73:
1c:15:47:15:e3:d6:e9:10:d5:71:b8:91:e9:12:cf:
a2:38:78:82:08:9e:79:e8:3d:37:b8:09:7d:9b:a7:
b3:78:a9:a1:b5:cc:11:4d:65:39:ba:a8:42:5c:fa:
3f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:63:21:07:49:DD:60:34:CA:26:4A:7C:13:35:B9:89:54:B3:EF:97
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/t2MhB0ndYDTKJkp8EzW5iVSz75c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2b:57:5a:93:68:02:52:76:ec:ec:c4:e1:ae:2f:21:24:c1:eb:
b1:fe:a6:23:99:c7:f9:99:75:76:d4:ec:3b:38:e6:c2:33:c5:
0e:bb:fe:d3:41:f5:35:41:8d:c8:7a:19:cc:b5:e4:91:a6:eb:
ee:30:c9:d2:f9:d7:63:65:72:a0:59:c4:bb:08:e5:39:5e:1a:
ab:46:6e:67:f6:d6:20:47:ee:ed:02:7e:1f:87:8a:a2:75:6c:
98:5f:b7:f7:09:69:5f:7d:17:58:7a:f0:5f:d8:69:9f:22:f4:
e1:08:d7:86:71:aa:14:8a:21:38:d9:a8:fe:66:96:de:0c:5e:
47:ff:1c:c9:34:b4:4d:5c:f2:af:53:84:00:98:09:83:23:fe:
38:03:61:ce:0f:72:24:92:0c:67:af:92:35:fb:92:43:ed:cf:
82:bc:b8:c5:2f:4b:c8:27:d4:08:d6:64:65:58:ee:c3:db:3b:
9c:17:cf:5c:94:d6:95:b1:69:27:fb:b6:64:77:4b:b6:40:b4:
32:41:ad:f9:be:6b:fe:25:da:b2:59:aa:46:08:e1:01:02:b8:
23:f5:f5:b3:e6:26:d7:8b:a7:fe:54:57:8f:7b:89:26:7f:69:
d4:d7:8f:16:44:21:59:4a:3c:ab:f8:99:77:2b:1c:0b:ad:1e:
60:bc:53:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:52:29 2025 by rpki-client