Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/w4EEo3YqOUUx9r7gooEL5CsaOWU.roa
File: w4EEo3YqOUUx9r7gooEL5CsaOWU.roa (raw, json)
Hash identifier: XZvKv4hEdhYwh+FR3RdngPyFO0Ae4HWt1augnStWbYI=
Subject key identifier: C3:81:04:A3:76:2A:39:45:31:F6:BE:E0:A2:81:0B:E4:2B:1A:39:65
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 67E8029C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/w4EEo3YqOUUx9r7gooEL5CsaOWU.roa
Signing time: Fri 04 Feb 2022 20:04:29 +0000
ROA not before: Fri 04 Feb 2022 20:04:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17e:c656:90ae/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1743258268 (0x67e8029c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 4 20:04:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c38104a3762a394531f6bee0a2810be42b1a3965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:58:fa:01:17:83:0d:51:7c:0a:db:cf:4d:b6:
3a:98:36:84:33:9b:81:b4:02:01:5f:64:5c:6d:86:
c8:a2:c1:99:9b:23:b9:a3:7f:16:2a:03:29:dd:5e:
85:4e:86:a8:68:fd:16:f4:16:d6:1d:62:fb:1a:9f:
c9:3e:ae:79:db:bd:f9:a2:29:a4:e7:11:63:40:47:
83:62:fb:a9:43:54:58:61:29:64:d4:81:4e:54:64:
f9:5c:96:dd:ad:e3:96:d6:03:36:de:68:58:5b:2b:
df:41:72:54:8b:0e:76:fc:c0:2e:d9:3f:fd:1c:12:
b8:56:35:07:02:2b:fa:78:66:25:3b:0d:96:b0:04:
d5:6a:c2:26:60:3f:2d:67:a5:c3:c2:22:f0:2c:70:
bc:12:fa:42:2a:52:3c:d3:f2:04:4b:5c:19:4e:a1:
79:d7:9a:d8:71:50:76:af:0f:bb:5c:eb:a2:03:72:
1c:3e:84:8f:9e:ae:20:d8:53:36:7e:a7:c1:2a:6c:
a2:54:70:a8:44:48:66:d1:17:05:ed:f3:c6:e0:8f:
2d:d2:3a:92:75:5f:d5:c1:dd:3c:d7:d4:ec:9d:bd:
83:4f:d2:f8:d4:8a:56:35:b5:52:4d:3b:e4:ea:ce:
f1:bb:69:8e:63:13:87:18:a2:64:cd:c0:fe:00:4e:
4f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:81:04:A3:76:2A:39:45:31:F6:BE:E0:A2:81:0B:E4:2B:1A:39:65
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/w4EEo3YqOUUx9r7gooEL5CsaOWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3f:73:b0:de:6e:b7:ac:91:50:83:9b:11:41:70:43:c6:fd:2c:
6c:d4:c8:f7:45:32:e1:b6:62:d0:bb:f0:b4:99:8e:85:f6:35:
ee:e6:e3:04:8b:ff:e1:bb:43:25:d6:22:72:f7:75:75:cb:77:
43:aa:0c:b2:be:b6:4f:85:41:42:cd:a5:9f:c3:3e:5e:4d:2d:
4b:0d:9a:d4:04:d6:20:30:d8:88:9f:7c:c1:78:63:7c:99:15:
04:27:ec:18:dc:75:1a:c4:78:9a:50:c0:c9:3b:e0:37:8f:68:
b0:4f:72:6f:73:cb:75:a3:29:de:25:8c:ae:11:4e:bd:8b:f7:
f9:7e:b5:5d:6e:bf:26:35:bf:8e:49:2f:9e:0e:61:7b:07:38:
6b:d0:d5:fe:82:45:d1:59:47:7f:a6:c2:d8:94:eb:8e:18:fc:
d9:e3:1a:0c:0a:61:17:b9:8f:50:9e:05:35:06:df:cb:83:ba:
dc:b2:9f:19:d2:8c:f0:e5:25:8f:59:b8:4b:23:1b:0c:b0:b9:
53:de:00:e7:64:f3:38:bb:e9:8d:c8:6c:cf:98:34:26:68:ec:
1b:a6:bb:80:01:bf:a1:88:46:69:9c:5c:26:ad:fe:ef:d3:22:
30:c6:a5:fb:f2:a7:8d:0d:67:2a:a6:41:77:0a:17:f4:fa:ed:
84:9d:61:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 00:04:01 2025 by rpki-client