Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/utUsQe9UKKCcjYkrOTZ4JsYENFQ.roa
File: utUsQe9UKKCcjYkrOTZ4JsYENFQ.roa (raw, json)
Hash identifier: a/mylXZrYQlZRULgoC9B+H54ZK15/lP6YVsg1rfuJVY=
Subject key identifier: BA:D5:2C:41:EF:54:28:A0:9C:8D:89:2B:39:36:78:26:C6:04:34:54
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018213294D86F402F5FC2138B2EFB1C5951A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/utUsQe9UKKCcjYkrOTZ4JsYENFQ.roa
Signing time: Mon 18 Jul 2022 21:14:10 +0000
ROA not before: Mon 18 Jul 2022 21:14:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:13:29:4d:86:f4:02:f5:fc:21:38:b2:ef:b1:c5:95:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 18 21:14:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bad52c41ef5428a09c8d892b39367826c6043454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:78:44:e5:2e:67:84:57:a8:43:6f:63:45:23:
bc:83:7c:b2:da:3c:15:1e:ba:a4:33:aa:3c:5f:c5:
cb:ad:00:9a:21:54:24:0b:da:de:ae:96:13:e3:f0:
1a:b9:b8:df:41:60:33:bb:81:84:91:22:6d:16:19:
a9:e4:67:95:bc:dc:e5:b2:2c:3c:0e:ea:39:d2:2f:
a2:f6:4e:7f:59:13:e8:c9:f3:31:dd:0a:6b:d6:39:
15:0a:8b:7f:a0:66:65:13:d6:9f:66:4c:bf:eb:54:
bd:25:24:9c:8d:c2:be:ee:28:93:4e:53:6b:17:ba:
ff:f9:4b:ba:21:43:59:4f:83:6c:7f:d0:37:93:85:
96:0e:48:c9:36:bf:17:84:9e:4c:63:c1:8b:0f:66:
53:d6:33:c7:10:b0:fd:b7:46:97:5d:ec:0c:4e:ea:
35:24:56:75:9e:74:ca:2c:8d:d7:82:ef:3b:6c:5b:
7f:d8:d2:61:8d:7e:cf:5b:79:f2:97:a6:d6:59:14:
9f:c8:2e:de:0d:b3:61:ef:5c:3e:c6:de:b9:a9:05:
ce:17:e6:06:a2:01:31:94:90:bc:32:4b:e1:ea:a6:
1d:44:92:f3:99:14:38:5e:30:b4:97:b4:63:0f:a8:
86:5e:4d:54:42:0e:76:4e:5e:81:77:d8:8e:1a:fb:
3f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D5:2C:41:EF:54:28:A0:9C:8D:89:2B:39:36:78:26:C6:04:34:54
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/utUsQe9UKKCcjYkrOTZ4JsYENFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a5:cf:d4:00:73:85:48:cb:a4:39:e6:1b:25:82:bc:2e:09:8e:
aa:c7:9e:80:35:7d:c7:f2:9a:5f:0b:de:3f:a2:2f:ea:81:2d:
1e:d8:81:81:bc:9c:83:14:4b:2b:22:01:9a:76:75:85:32:8d:
37:d9:65:42:d7:87:be:49:bc:4f:c2:1b:46:b6:64:cb:96:3c:
f8:1c:3e:05:39:83:af:ec:59:dc:ea:16:8f:02:ca:c5:ae:0b:
46:49:ea:cc:1f:35:82:ce:48:e6:89:83:ae:ce:a6:12:6e:1d:
c2:3f:16:e5:7c:ce:eb:f2:4a:5a:fa:56:c0:0c:2b:26:fc:b8:
19:51:e0:d6:f2:30:2e:e9:d6:68:a0:63:12:41:83:c1:dc:bd:
ca:c7:be:ba:a5:44:c7:c9:b2:39:9d:2c:79:d2:d9:9c:be:af:
24:c1:b4:a7:f1:a9:1e:f4:dd:10:aa:9f:ba:08:ed:8e:b6:a4:
a6:46:0e:8a:2f:e4:6e:b2:df:58:41:28:5e:bf:14:73:94:15:
71:77:7a:86:1c:47:5f:29:e6:8c:37:a2:d8:f3:b0:82:8b:54:
c1:79:5d:16:88:ee:47:6c:0f:29:1d:84:44:58:ab:1b:d9:c4:
46:be:1d:ef:a0:d4:b5:40:ca:b7:f2:6b:6b:a6:47:aa:58:42:
c6:f4:12:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:41:04 2025 by rpki-client