Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/t2S7_uih3Kzp-Z_jQZ7UvyFBrUI.roa
File: t2S7_uih3Kzp-Z_jQZ7UvyFBrUI.roa (raw, json)
Hash identifier: nWSMrJrpCHuTkmZSIIGlX7LbWVj/G9TmfdhCH3NBDcY=
Subject key identifier: B7:64:BB:FE:E8:A1:DC:AC:E9:F9:9F:E3:41:9E:D4:BF:21:41:AD:42
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182FF3511B011783B849CD023E2BC1A3D28
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/t2S7_uih3Kzp-Z_jQZ7UvyFBrUI.roa
Signing time: Fri 02 Sep 2022 17:17:24 +0000
ROA not before: Fri 02 Sep 2022 17:17:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ff:35:11:b0:11:78:3b:84:9c:d0:23:e2:bc:1a:3d:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 2 17:17:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b764bbfee8a1dcace9f99fe3419ed4bf2141ad42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:12:6f:5b:73:f4:11:c2:50:ab:9c:fa:9f:a9:
ab:7b:cf:70:46:79:9b:c5:20:75:25:7d:06:c0:68:
86:c5:da:e9:a8:cc:09:b4:e0:2a:20:9b:d7:d3:6e:
cf:2f:54:05:b5:21:8a:26:60:a1:5c:eb:a7:c8:bf:
f2:6a:a2:f1:07:17:d9:de:81:0e:58:4a:c8:ed:18:
88:40:f4:fc:84:c0:ed:a9:78:6b:1a:26:d0:91:dc:
3b:c6:5f:0a:e0:81:11:ce:b6:a1:3f:67:9f:1a:e1:
7e:fe:95:b2:01:34:fd:41:8e:aa:6f:82:62:0e:2c:
52:71:38:1e:6f:16:28:d8:2f:62:bc:e0:f5:6c:ae:
98:c0:21:69:21:bb:0e:35:a7:f8:ac:80:83:49:58:
85:8a:e7:4c:4e:9c:94:0f:4d:41:56:f9:2e:0a:e4:
33:3f:74:a9:7a:3a:3f:1d:3f:02:0f:95:9c:01:05:
6c:5d:cb:86:4d:12:68:0e:0f:ac:13:7a:2f:4b:c6:
53:7a:9f:6d:6a:48:93:99:83:4d:e2:4f:06:e1:24:
7a:86:e4:ae:e4:a6:20:42:c8:c4:31:82:c8:f4:20:
c7:1c:c3:61:85:f0:2c:f0:22:f9:eb:b7:6f:0e:1c:
97:b0:4d:39:53:5f:42:6c:4c:2c:c8:d6:e7:26:ca:
e4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:64:BB:FE:E8:A1:DC:AC:E9:F9:9F:E3:41:9E:D4:BF:21:41:AD:42
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/t2S7_uih3Kzp-Z_jQZ7UvyFBrUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
96:42:c9:75:bb:84:d0:9e:02:fb:57:83:23:e8:9b:f2:cb:9b:
bf:9e:19:28:36:62:3b:00:14:31:19:cc:6c:a9:40:c7:ba:b3:
7c:23:45:ec:e9:2b:1e:2e:38:22:9e:98:f2:5d:8a:56:fc:68:
4d:cd:7b:65:09:31:8e:72:dd:da:b0:b3:5b:9f:3b:f4:94:8a:
08:a5:0d:f4:24:95:4f:2d:94:cc:e1:e4:fd:48:2c:37:88:6b:
1d:ce:2c:25:de:ca:28:3a:5c:ae:0c:da:83:ff:53:20:77:09:
79:1a:b1:7f:48:cc:c2:8e:35:1e:3f:26:53:e6:89:34:0a:ee:
b5:cb:18:67:c5:8a:c3:13:1d:04:2b:9b:c9:30:94:41:83:02:
a8:1b:ea:89:6e:f0:f8:ce:16:16:74:5a:4c:d0:a1:28:5d:b0:
46:b2:37:9e:89:14:71:19:24:9b:33:74:ac:0d:1b:97:c3:0a:
0b:61:0f:c1:9f:f8:60:af:8b:04:81:a6:b1:e7:c0:2e:19:f4:
04:28:87:fd:a5:bf:25:9b:a8:e2:f6:47:a6:c0:7e:54:50:9f:
2d:88:b5:73:9d:ab:7e:52:5a:0e:e2:2c:e3:49:6c:f3:e4:09:
61:0b:a0:14:ae:d4:cb:22:80:0e:26:a4:24:41:52:bc:30:88:
bc:4e:5f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:23:21 2025 by rpki-client