Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wJ_rKTm_0qRdaaYWcEjyxkCxfNw.roa
File: wJ_rKTm_0qRdaaYWcEjyxkCxfNw.roa (raw, json)
Hash identifier: rPdcKBlYagEtXo60mds1Ie9dWUWA5EkpMu2K6cJuxAU=
Subject key identifier: C0:9F:EB:29:39:BF:D2:A4:5D:69:A6:16:70:48:F2:C6:40:B1:7C:DC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018546D328DCB1F189B6D6A7E515618FEC70
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wJ_rKTm_0qRdaaYWcEjyxkCxfNw.roa
Signing time: Sun 25 Dec 2022 01:08:41 +0000
ROA not before: Sun 25 Dec 2022 01:08:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:46:d3:28:dc:b1:f1:89:b6:d6:a7:e5:15:61:8f:ec:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 25 01:08:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c09feb2939bfd2a45d69a6167048f2c640b17cdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8b:eb:7d:d5:d0:cd:7d:17:02:f1:74:56:47:
03:2e:e0:7e:0d:0e:6d:03:93:86:01:f9:5d:c3:39:
50:d0:df:fe:25:e5:9b:12:6b:03:5d:6d:3d:07:64:
a4:aa:d0:46:57:36:57:c8:59:20:28:0e:d7:9c:98:
14:07:b1:96:06:80:41:fe:59:f4:0a:58:8f:46:6d:
c0:f7:80:1e:e4:71:30:d6:0a:c5:5c:ca:a9:c1:5c:
49:c2:bf:71:32:05:b8:74:69:ea:a1:78:33:4b:72:
a7:b7:10:49:e1:71:ea:6d:d0:d8:eb:d3:e3:d6:55:
2e:47:7d:30:6d:53:24:37:00:a6:52:1b:6a:e9:df:
14:18:e1:dc:58:e2:5b:e6:e5:6b:45:eb:88:b5:d0:
28:0a:32:c6:66:b2:bd:55:49:bd:7b:6c:67:eb:72:
c2:a0:2e:62:d8:d3:07:64:20:93:c9:41:e8:39:16:
72:8f:98:d9:c0:ed:95:3e:3a:60:e9:3e:c6:ea:14:
c1:c9:5e:72:a5:e0:c3:e7:4c:a1:b5:50:fe:7f:93:
6b:e5:0d:41:b9:71:14:15:d9:4a:a7:9a:fb:44:ff:
eb:e3:1a:05:3a:0c:df:ac:d9:90:0b:10:ed:d8:88:
7c:30:38:bb:22:f3:83:79:ce:31:78:0b:a2:f2:43:
9f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:9F:EB:29:39:BF:D2:A4:5D:69:A6:16:70:48:F2:C6:40:B1:7C:DC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wJ_rKTm_0qRdaaYWcEjyxkCxfNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
78:bb:64:ab:61:d7:2c:45:af:a7:ab:f0:b9:a4:12:d8:8e:59:
8b:56:6c:66:5d:d9:0e:a3:fb:08:c4:0b:52:21:e5:5e:3d:0f:
31:63:72:c8:6b:70:69:22:6b:41:7e:e1:89:93:72:c0:49:56:
80:b0:ee:bd:58:cd:f3:91:4a:1a:99:24:03:6d:8c:f1:4e:bd:
d7:01:2e:a7:50:a8:dd:24:99:aa:af:25:b5:6e:b5:b2:40:b0:
c1:65:d8:2b:53:d2:8e:78:5f:81:1c:d0:73:76:82:62:33:20:
d1:75:40:9c:a0:05:59:bf:0e:9f:8a:da:c6:be:02:bf:ce:01:
05:c5:2a:cd:80:99:91:97:b0:73:b9:46:5e:70:33:d5:34:b1:
b8:84:57:fd:44:ed:43:d4:64:02:d4:86:f0:ad:ab:30:61:c8:
e0:92:0b:e3:b2:99:92:89:fe:15:78:66:e5:16:98:50:88:66:
15:89:e6:be:d1:25:9f:0d:f9:43:72:87:d3:f0:d2:ba:be:b1:
5c:fe:ef:3a:cf:19:cf:f9:30:fd:94:3c:de:64:42:95:c3:b6:
cd:18:92:2b:8b:cc:7d:17:b0:7b:8a:0f:01:82:17:a7:22:cc:
88:e6:e1:0d:20:75:bf:69:db:8c:c2:5b:7b:99:17:a4:38:c9:
5f:1c:c3:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:36:29 2025 by rpki-client