Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/x4Kv-6xRiVNCCbfZXxBjxT7wx4k.roa
File: x4Kv-6xRiVNCCbfZXxBjxT7wx4k.roa (raw, json)
Hash identifier: uVCvfVCLajDBuKIY/hMfGc0w4l83PlyaPAncll5MdAs=
Subject key identifier: C7:82:AF:FB:AC:51:89:53:42:09:B7:D9:5F:10:63:C5:3E:F0:C7:89
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018523DB085FBA933AAFA853E16DCF3119E3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/x4Kv-6xRiVNCCbfZXxBjxT7wx4k.roa
Signing time: Sun 18 Dec 2022 06:10:35 +0000
ROA not before: Sun 18 Dec 2022 06:10:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:23:db:08:5f:ba:93:3a:af:a8:53:e1:6d:cf:31:19:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 18 06:10:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c782affbac5189534209b7d95f1063c53ef0c789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:be:7d:c2:16:a9:a4:df:ce:f6:d7:32:c0:21:
f7:96:24:e9:62:53:2a:6b:0c:aa:ce:80:df:ed:66:
eb:3f:7b:1e:9b:25:8e:8f:c5:72:18:a9:0b:59:c8:
6d:fa:23:98:d8:d3:df:fb:e2:e5:ec:f4:4c:74:08:
54:8c:2c:aa:db:08:2e:0f:c4:c7:41:95:e9:0f:f2:
fe:5c:bd:91:3f:07:a3:e2:c2:2d:05:68:2a:bb:46:
2b:34:bc:2a:a0:88:d0:f2:f7:a1:4c:a1:1b:7d:de:
5d:46:1d:74:3a:a3:14:8b:ec:c0:12:e1:1d:b7:14:
18:0f:a9:d8:89:92:43:13:11:e2:67:45:b0:c7:d5:
8f:c8:c0:f2:be:c6:ac:e0:50:b6:b0:d5:c3:98:ce:
6b:bb:84:89:93:d8:fb:a0:5d:69:ab:70:59:f6:8f:
bc:63:5b:bd:01:13:34:db:a4:81:cf:48:69:52:35:
05:fc:94:a5:10:f1:4e:97:8a:11:52:02:61:82:68:
98:f1:1f:30:e3:a7:b1:6f:10:68:a4:a2:e7:36:44:
a2:6c:21:d5:f0:ed:cb:71:b9:12:64:ab:c2:b7:b6:
36:66:08:2a:81:7e:ab:69:fa:4a:c8:0a:d5:02:4a:
7c:61:91:a6:b1:66:9d:a8:a9:d6:4b:20:97:b5:3e:
11:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:82:AF:FB:AC:51:89:53:42:09:B7:D9:5F:10:63:C5:3E:F0:C7:89
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/x4Kv-6xRiVNCCbfZXxBjxT7wx4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6d:6d:5e:be:48:c7:ae:c1:41:c4:75:0f:b8:31:19:55:a4:a5:
7a:a8:1d:ac:4e:55:bf:b8:2b:37:35:87:b2:bb:7a:9a:f0:f9:
b6:9a:c6:f0:68:29:19:87:9f:e4:59:38:88:16:a2:11:02:e8:
69:a3:f6:38:18:25:56:8e:4f:bd:3c:ba:6d:65:f4:bf:b5:eb:
07:51:43:51:62:32:4a:ff:7b:20:d2:71:17:b6:1a:d4:e6:25:
53:68:3a:ac:c4:29:c8:3a:8a:2b:a0:a9:24:5c:2a:a0:58:75:
20:84:b4:6d:cb:35:5e:13:2e:0a:e5:b4:b6:83:d7:e4:fb:43:
ff:a5:a6:de:98:d3:03:00:af:3a:ea:21:ae:b6:8d:70:68:a1:
e6:e7:ea:43:85:1e:9d:1a:46:79:90:85:bf:3d:42:bd:67:50:
83:2d:28:21:c3:cc:5c:36:b4:b7:b8:ba:11:dc:49:93:2d:eb:
a3:30:20:9b:47:4e:69:86:27:d8:35:a7:d2:f0:7d:4b:87:ca:
0e:a1:cb:69:ec:3d:78:4c:51:da:01:a3:84:5d:b3:73:d7:e7:
20:65:68:4b:f5:dd:a9:22:d1:71:76:67:94:d9:be:43:5d:82:
3a:64:96:4a:da:75:e2:b9:8b:a8:f8:48:c2:34:5a:7a:07:c0:
1b:05:c1:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 01:13:45 2025 by rpki-client