Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/v74XnBQUluS3s6dw65pZCV6PkxA.roa
File: v74XnBQUluS3s6dw65pZCV6PkxA.roa (raw, json)
Hash identifier: nHHgS6h3ZL9ZhqJbRrh4v8xY3N3LjuX7naveoCBWBDs=
Subject key identifier: BF:BE:17:9C:14:14:96:E4:B7:B3:A7:70:EB:9A:59:09:5E:8F:93:10
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7BA102C5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/v74XnBQUluS3s6dw65pZCV6PkxA.roa
Signing time: Sat 16 Apr 2022 00:11:38 +0000
ROA not before: Sat 16 Apr 2022 00:11:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2074149573 (0x7ba102c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 16 00:11:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bfbe179c141496e4b7b3a770eb9a59095e8f9310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f2:39:8f:d3:ef:6d:7e:2f:fb:e1:4c:58:ac:
5a:b9:04:86:12:cc:d4:03:47:2a:ef:49:6b:99:5e:
a3:c9:98:b1:0d:f8:69:c8:1c:ba:fa:67:3f:a6:6e:
0c:53:9b:29:31:5d:66:97:98:c8:eb:0d:f4:ce:c4:
4f:bb:80:bb:47:b3:4e:ae:9f:74:c6:94:d8:13:c5:
e7:b0:0c:ef:1e:93:e4:99:07:ee:f3:9a:e4:1d:12:
be:05:ef:c3:a9:59:ad:40:2e:a6:d6:1e:df:f7:9e:
81:ba:e4:e0:36:d3:35:4c:8b:63:fb:a7:4a:d1:50:
73:98:c3:d4:7e:b1:82:3a:22:36:30:97:47:de:2d:
a4:3c:41:57:3c:13:da:93:21:52:22:c0:8d:cc:37:
78:c9:e0:61:ce:c6:cb:fa:03:94:07:47:a8:14:75:
f1:76:9a:ce:df:6e:25:ee:86:e9:9a:ae:af:49:01:
38:bd:59:53:a7:45:b1:b8:9b:13:5c:d9:b5:db:37:
72:46:04:4e:44:1a:b9:f7:d6:dc:20:27:d3:da:8e:
b9:6c:7b:2c:09:84:04:0b:f5:65:f0:95:d2:42:e6:
9c:2d:e2:44:e6:c5:68:bb:ed:6e:43:ee:c6:7d:16:
02:9b:e6:cf:e0:f5:92:89:33:cc:28:ac:69:8e:87:
06:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:BE:17:9C:14:14:96:E4:B7:B3:A7:70:EB:9A:59:09:5E:8F:93:10
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/v74XnBQUluS3s6dw65pZCV6PkxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
aa:cc:a6:eb:59:64:af:f3:54:be:bd:93:17:dc:a7:9a:33:2d:
e4:71:33:3d:e4:be:06:fe:02:40:df:f5:a6:7e:ed:13:d1:08:
45:3a:c7:7d:b6:4e:4b:65:80:56:9f:98:3f:ea:50:71:9c:aa:
55:89:6f:1a:ab:fa:83:aa:a8:3f:a7:3a:53:b1:45:df:c2:2a:
2b:fc:66:9d:b9:24:e0:7e:fc:b9:58:00:8d:3b:9f:41:30:5f:
57:a6:09:c3:be:55:b0:e7:7f:85:0b:d4:0f:19:ae:5c:2c:d7:
2d:7e:48:ee:5e:f2:a7:3d:3d:4e:bc:64:fe:db:58:1c:41:ad:
34:60:1a:7b:83:5c:c2:d1:f8:88:37:77:c7:76:4b:eb:2c:6b:
04:c5:e9:bb:43:e9:55:53:ad:22:67:0b:b1:10:a7:29:94:68:
7e:12:99:a4:6f:99:03:1d:86:cc:3a:d2:52:b7:45:08:8f:95:
a2:5c:4e:ef:8a:e5:36:53:6a:b0:49:3d:07:c1:1a:e8:5f:1c:
67:6d:e5:95:fc:0c:16:c7:c1:70:e9:e9:17:bd:20:b8:4a:77:
12:13:70:6f:39:79:7d:0f:51:ae:45:85:91:91:f0:a5:da:d7:
92:0f:a2:5b:ab:ff:9a:21:c9:4d:d6:ae:2f:48:b9:32:d5:ee:
5a:d5:e0:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:26:58 2025 by rpki-client