Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/x2JIfH7n4hu8T9IcEOiRbBc3ExQ.roa
File: x2JIfH7n4hu8T9IcEOiRbBc3ExQ.roa (raw, json)
Hash identifier: vU+GyJjf9+fl2RJcxy9DAGsxlryz8cVX+XZ8aHt/CgI=
Subject key identifier: C7:62:48:7C:7E:E7:E2:1B:BC:4F:D2:1C:10:E8:91:6C:17:37:13:14
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8C9A338C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/x2JIfH7n4hu8T9IcEOiRbBc3ExQ.roa
Signing time: Tue 14 Jun 2022 08:09:44 +0000
ROA not before: Tue 14 Jun 2022 08:09:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:56ba:5b78/128 maxlen: 128
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:181:477e:58d8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2358915980 (0x8c9a338c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 14 08:09:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c762487c7ee7e21bbc4fd21c10e8916c17371314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:22:4b:4e:25:1b:0c:52:29:75:dc:4b:34:d1:
cf:bb:e4:ea:7b:4a:27:7b:b3:1a:dc:1f:da:5a:7e:
a3:4e:72:3f:c6:41:90:27:41:79:57:cf:64:35:26:
2b:99:68:c4:6a:91:d3:3d:1c:c7:ec:e3:a3:eb:e2:
fb:39:99:34:e0:e2:c4:3f:f0:e9:9a:2a:2b:b3:98:
48:a2:0a:58:dc:7b:2e:e5:b5:89:15:0b:7e:c5:69:
56:09:b6:2a:98:ad:08:60:90:b5:02:19:c7:22:58:
18:a1:9c:7d:51:33:94:d8:75:19:22:cf:61:8f:b4:
0d:82:5f:b5:d2:30:4d:5c:fc:8f:f4:6a:13:94:0f:
9e:f8:4e:a6:ac:2c:59:0c:a1:ee:8f:89:83:77:46:
e0:3a:eb:f1:4f:30:3a:6b:83:1e:10:19:7e:5c:3f:
42:7e:89:83:15:1b:05:e6:3d:8c:22:47:a5:ce:ef:
ed:68:99:8c:80:58:55:10:ab:a2:2d:0e:33:eb:9e:
24:ba:84:79:28:6e:06:9c:ed:63:7d:c6:73:ff:69:
cf:31:5f:4c:8c:1b:9f:5e:ff:f5:17:1f:94:c4:ca:
d8:49:9d:84:4b:10:8b:0f:80:63:f7:a0:0f:71:80:
1b:70:db:2f:48:c6:ae:ee:03:d5:4d:2b:bd:e4:81:
f0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:62:48:7C:7E:E7:E2:1B:BC:4F:D2:1C:10:E8:91:6C:17:37:13:14
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/x2JIfH7n4hu8T9IcEOiRbBc3ExQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3b:57:0f:57:ce:eb:fd:19:12:5e:b7:93:bf:66:f6:ab:7f:27:
8c:73:bd:c0:2e:ae:a9:e3:fc:a5:79:28:38:92:fd:b8:43:50:
8c:e4:77:50:e6:e6:c0:f4:4f:13:bb:bd:37:41:85:dd:d8:e1:
bb:11:eb:d3:19:df:9c:18:75:f5:a9:5f:9b:3b:1d:a5:63:1d:
76:63:c6:1b:e9:a4:ab:e9:e0:15:01:ba:58:95:14:0a:03:51:
e6:5c:dc:fb:c1:bf:1f:b7:67:4e:31:21:41:49:80:21:88:62:
99:98:63:f4:80:89:ab:df:8b:af:a4:2e:f0:f2:df:f2:58:e5:
0b:74:09:7c:bc:be:ae:a5:28:26:f7:2b:f3:c9:dc:8f:99:54:
39:27:ba:78:90:73:10:b2:54:39:f9:b8:ae:53:dc:dd:36:ee:
03:f6:60:24:91:c7:30:43:ec:28:a7:5b:00:17:63:90:12:19:
53:ad:36:74:bf:e7:58:20:c2:37:02:01:c2:6c:6b:3b:dd:b0:
c5:10:ee:26:f5:88:62:b7:12:69:56:54:9b:8c:38:3a:8e:ad:
1f:9c:66:18:a4:ec:95:a2:4c:78:1d:8b:c4:54:87:c0:64:9e:
dc:5e:c4:fe:4f:85:54:07:aa:2e:a4:a2:59:5b:99:e0:d0:5c:
5e:d5:25:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:18:47 2025 by rpki-client