Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tQ5u8huNiFG67pKqgBiXXOKfOcI.roa
File: tQ5u8huNiFG67pKqgBiXXOKfOcI.roa (raw, json)
Hash identifier: 7Xt3TyTkLXr1li2DocLCKk7yw2B64fs/wo5eyiaxhlI=
Subject key identifier: B5:0E:6E:F2:1B:8D:88:51:BA:EE:92:AA:80:18:97:5C:E2:9F:39:C2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01850E605859D36CDE66A1DA48F0F910FFE4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tQ5u8huNiFG67pKqgBiXXOKfOcI.roa
Signing time: Wed 14 Dec 2022 02:04:33 +0000
ROA not before: Wed 14 Dec 2022 02:04:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:e60:141/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0e:60:58:59:d3:6c:de:66:a1:da:48:f0:f9:10:ff:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 14 02:04:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b50e6ef21b8d8851baee92aa8018975ce29f39c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:28:c1:33:1f:70:15:41:c8:1b:38:a7:41:ba:
2e:5d:53:fd:91:02:41:84:89:ca:51:a8:42:36:6e:
32:b4:ca:c7:4a:14:e5:71:c3:8b:3b:d8:88:aa:27:
9c:38:ef:7d:4a:a0:e6:27:e2:60:88:96:b9:59:b0:
97:b5:23:e1:9d:aa:b1:18:ac:1f:a4:fd:13:c8:64:
ed:97:c7:0b:f4:e5:9a:fe:35:27:a5:48:3e:84:de:
1d:c3:e6:30:39:79:2a:3b:58:1a:0a:e6:81:1a:e3:
bd:eb:11:58:41:0a:e7:63:f3:e0:9a:24:cd:9a:b8:
79:33:f9:b8:50:9f:4e:30:96:4e:c6:0c:74:4c:f0:
e2:94:db:fb:4e:78:28:2d:89:3c:c4:bd:4d:04:aa:
79:3a:40:e3:2a:77:5d:bd:8d:5d:43:18:ef:99:3d:
2f:17:8c:0a:e3:71:b5:e8:d5:b8:da:12:60:16:ed:
b0:0a:71:af:ce:2a:6c:0d:d6:53:5d:f4:bb:e5:a2:
18:61:e9:62:e9:e2:29:7d:dd:f5:7b:0d:28:21:64:
20:d3:71:d8:bc:1a:27:a2:4e:24:b1:82:29:96:ae:
2c:be:17:00:78:17:c0:f4:22:cf:50:f7:70:f7:fc:
cb:52:ed:c6:67:f6:3e:88:93:37:24:72:ad:5d:6f:
03:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:0E:6E:F2:1B:8D:88:51:BA:EE:92:AA:80:18:97:5C:E2:9F:39:C2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tQ5u8huNiFG67pKqgBiXXOKfOcI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
03:aa:1b:0c:f0:c1:94:0a:4a:99:04:31:95:3b:fe:c5:f7:f9:
4d:be:5d:18:dc:e2:f4:91:a4:52:34:62:55:4c:ae:bf:2b:bc:
58:11:79:5e:5f:ee:33:bd:a4:a1:af:eb:ef:70:c8:c6:1d:99:
75:ba:28:4d:7c:b1:cb:3e:70:5c:f0:f1:63:dc:2f:21:84:d7:
81:a1:bb:3a:b8:03:65:9c:40:a9:3f:a5:d4:bc:48:5f:60:dc:
db:9a:17:3d:5c:ac:db:3e:cd:4d:2e:b0:fd:ce:14:30:e5:f2:
ae:b0:40:37:81:b4:35:c1:83:f9:00:ec:37:41:ff:f1:85:7a:
6a:3b:47:57:78:ba:59:cf:19:71:86:4b:43:c7:46:00:44:ed:
49:87:01:bb:38:5f:9e:0f:9a:71:9a:67:33:a0:89:1e:b2:77:
77:96:dc:93:ea:a4:e8:7d:0a:55:f8:87:4e:a6:12:04:6c:80:
a6:79:44:56:78:90:45:7d:d3:6e:3d:f0:a6:01:65:70:28:1c:
4d:a1:af:c3:6a:ee:2b:57:bb:1c:ab:56:8f:da:fc:db:8e:af:
6d:40:c8:8f:6e:aa:d8:df:c8:e3:34:d6:dd:32:a5:80:f6:ef:
96:b5:f5:a2:a7:59:f2:eb:f6:86:77:74:5a:38:29:9a:c3:1e:
9f:3c:42:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 18:01:40 2025 by rpki-client