Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xEJyFliinpD9JhBFZi6HYAoT2Qs.roa
File: xEJyFliinpD9JhBFZi6HYAoT2Qs.roa (raw, json)
Hash identifier: jAh6Togf+nANR37VC8Euw5mcNRrcAPLeFY7IoGcyckI=
Subject key identifier: C4:42:72:16:58:A2:9E:90:FD:26:10:45:66:2E:87:60:0A:13:D9:0B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6D03530A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xEJyFliinpD9JhBFZi6HYAoT2Qs.roa
Signing time: Wed 23 Feb 2022 12:16:25 +0000
ROA not before: Wed 23 Feb 2022 12:16:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1828934410 (0x6d03530a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 23 12:16:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c442721658a29e90fd261045662e87600a13d90b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6e:f3:30:a7:dc:4a:ef:9a:1c:07:7c:e5:0d:
c4:06:bb:76:ce:ee:ba:67:e3:58:8b:49:cf:2a:84:
57:b6:b3:39:4b:53:7e:36:d1:47:98:8a:21:a5:26:
83:9d:67:7d:30:b1:f0:ea:dd:c1:74:a2:11:e9:fb:
44:2f:b1:a2:03:8d:04:ff:fd:52:21:e8:41:ee:c1:
4c:2b:af:97:6e:ea:a7:c7:dd:eb:cc:3f:ae:12:dc:
13:aa:a8:b4:4a:f3:3f:91:15:65:68:ce:2f:12:98:
7d:b9:0c:3e:a1:dd:58:39:3d:4f:70:f0:18:26:9f:
cd:3b:fa:ad:c0:e4:e1:0e:23:8c:2d:80:02:03:99:
ec:b0:eb:2a:58:d2:12:ca:65:48:11:a6:d5:d3:cb:
86:73:bc:b2:d2:40:a7:d5:00:f3:40:5c:fc:66:3c:
bb:fd:1a:9a:5c:20:51:a6:b8:8a:53:a3:83:45:5d:
c2:bf:64:3e:00:c0:ec:0a:bf:f3:13:bd:53:18:a7:
4f:48:8b:53:a4:fd:03:a5:7e:88:1c:29:fa:f1:62:
b6:79:ff:3a:c7:58:6f:2a:a7:84:fa:31:af:9f:e4:
22:6f:fc:7b:df:09:47:9f:d6:2f:1b:02:b3:c0:83:
69:ea:96:db:58:76:2d:33:29:3d:76:28:5c:7f:41:
7a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:42:72:16:58:A2:9E:90:FD:26:10:45:66:2E:87:60:0A:13:D9:0B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xEJyFliinpD9JhBFZi6HYAoT2Qs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
57:d4:4c:20:d5:17:db:b1:f9:3c:4f:73:01:8d:37:2e:d4:ed:
1e:4c:b8:d4:9a:f5:d7:20:c3:0a:72:18:07:14:4f:33:8b:c6:
ad:98:d3:fc:14:8b:96:a3:e4:6b:42:e9:9c:5a:37:06:df:ac:
fb:1e:84:74:ac:10:21:5f:fe:f9:91:de:0f:17:ab:65:33:d3:
89:29:c8:6c:4f:af:e5:3d:9a:3d:c8:4e:0d:0a:72:74:45:be:
b1:11:b2:09:d2:ab:82:43:81:88:94:0d:2c:ac:c2:cc:77:5d:
4a:ef:b0:94:f6:04:10:00:ca:fc:1c:1a:1e:06:ef:13:93:47:
f1:6f:d2:7a:a6:ed:28:e9:37:08:6e:48:15:f9:2f:fc:9a:07:
a8:50:6f:9a:a8:5c:de:c1:fc:8f:ee:ea:4f:07:a8:92:af:39:
41:e9:2b:73:0f:32:18:5e:0f:04:4a:94:93:51:59:64:4d:19:
ae:81:99:50:a0:b5:8f:92:47:82:98:83:25:ed:b4:98:54:6c:
cd:9c:89:b3:4b:14:5a:17:63:a4:a1:52:e5:5b:e6:36:74:97:
93:ec:46:7a:4b:8b:f5:91:3f:3e:82:b5:4d:72:ae:e5:f5:1f:
8e:ae:24:01:50:ed:49:79:53:11:94:0f:ce:c3:5d:32:83:12:
98:74:77:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 15:12:56 2025 by rpki-client