Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vW9954rW517cFG_syTAOpcRLcLY.roa
File: vW9954rW517cFG_syTAOpcRLcLY.roa (raw, json)
Hash identifier: tkdDuJMuuVxl3upB8WOYPk5yEaA+S6gdPdJVCfdzv4Q=
Subject key identifier: BD:6F:7D:E7:8A:D6:E7:5E:DC:14:6F:EC:C9:30:0E:A5:C4:4B:70:B6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01841F5FEED7F689F285A9B6CE29387889E8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vW9954rW517cFG_syTAOpcRLcLY.roa
Signing time: Fri 28 Oct 2022 16:14:51 +0000
ROA not before: Fri 28 Oct 2022 16:14:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1f:5f:ee:d7:f6:89:f2:85:a9:b6:ce:29:38:78:89:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 28 16:14:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bd6f7de78ad6e75edc146fecc9300ea5c44b70b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e4:61:14:f6:21:2c:58:e0:60:2e:49:9b:7b:
cc:ac:b5:a6:61:c7:32:1c:e9:9b:b6:26:7f:73:c1:
21:79:2d:06:ea:8f:43:a5:c4:c3:8a:b9:82:34:f6:
df:7e:13:4a:57:43:40:16:b6:e6:e3:a3:4f:72:bc:
bb:3d:5d:ea:3c:b2:ca:54:d4:5b:b8:5e:06:9a:26:
9a:54:f5:5e:91:29:fc:1e:31:9d:0c:ba:56:3a:b9:
b5:b3:3e:0e:9a:03:8f:0c:54:75:8f:a8:89:09:0d:
6d:0d:28:b4:20:4d:f7:a7:61:cf:d9:14:9f:d7:fc:
36:ae:ec:a2:37:c3:4a:fd:3e:bd:f0:80:03:90:b3:
ce:07:83:52:a8:14:79:31:95:55:e0:e5:6c:83:3f:
be:fe:06:81:fb:de:db:4b:24:7b:c4:84:ed:89:4c:
04:0f:37:77:c1:b3:39:ce:8c:ac:1c:d7:10:09:3a:
65:8b:0b:84:96:01:d9:11:b6:91:98:b4:1f:0e:34:
ec:a4:3e:f8:38:72:34:8d:53:cd:c6:fc:da:87:cf:
36:5b:08:cd:7c:0b:a1:65:0d:5c:50:be:2d:0c:a7:
87:0e:b3:69:c0:86:8c:69:0e:02:b1:9e:02:8e:a0:
a1:32:a9:0e:20:fa:f0:da:30:e4:7a:87:70:83:e8:
cd:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:6F:7D:E7:8A:D6:E7:5E:DC:14:6F:EC:C9:30:0E:A5:C4:4B:70:B6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vW9954rW517cFG_syTAOpcRLcLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
65:ae:91:f9:6c:36:96:b9:58:e1:ac:88:27:7c:e0:cb:9d:b5:
ec:6f:26:e7:27:03:83:d0:d3:ff:07:3b:96:97:91:00:b7:bd:
9b:a9:ae:03:df:d1:6e:38:9d:86:c6:f2:04:0f:ca:85:49:4b:
67:fb:32:e1:a3:4e:36:82:e3:dd:58:2b:3a:ef:39:d1:88:00:
75:20:13:00:1e:5d:5e:25:8f:fd:2e:91:25:6f:a2:f5:05:25:
fb:f7:78:41:57:8d:f3:df:60:4b:49:6e:87:9d:63:7c:ba:69:
55:17:2d:4e:c8:73:fc:8e:65:c8:ea:3e:a8:dd:63:34:1e:a5:
40:aa:b4:98:61:bf:0f:e2:e3:8c:76:54:0e:34:2e:b7:98:31:
81:97:13:d9:c1:7a:83:e5:10:bd:e5:54:b7:4d:a9:31:b4:24:
3b:a6:d3:31:64:df:f1:1a:43:8d:3f:9f:ad:d3:4c:ce:23:3e:
25:d1:02:b1:e3:9e:34:9c:08:3f:98:58:a4:fa:e1:51:2a:65:
d9:68:44:fc:25:b5:0a:e6:69:0b:30:57:65:07:2a:69:38:f3:
c2:25:2f:11:a5:bc:00:aa:96:f5:ea:76:93:7c:56:50:8e:67:
17:23:fb:65:41:ac:90:5d:ef:7a:00:6c:92:72:b3:fa:e8:cb:
24:c1:6b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:42:03 2025 by rpki-client