Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/z-9jB_Hs0aQv6tIm-smEW-fHtXQ.roa
File: z-9jB_Hs0aQv6tIm-smEW-fHtXQ.roa (raw, json)
Hash identifier: OeRC9t3CEht08DM31fpSJGAXfnNZjWXITCL+uxc8QB4=
Subject key identifier: CF:EF:63:07:F1:EC:D1:A4:2F:EA:D2:26:FA:C9:84:5B:E7:C7:B5:74
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6AFC146A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/z-9jB_Hs0aQv6tIm-smEW-fHtXQ.roa
Signing time: Wed 16 Feb 2022 03:13:57 +0000
ROA not before: Wed 16 Feb 2022 03:13:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1794905194 (0x6afc146a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 16 03:13:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cfef6307f1ecd1a42fead226fac9845be7c7b574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:8d:d3:ef:cd:eb:05:72:70:70:2c:68:91:c2:
87:6e:71:4c:a5:f6:bc:db:23:6f:b1:d3:99:f3:2f:
a7:53:6f:a7:12:88:54:5f:16:f1:38:f9:6f:1c:b7:
54:7f:5f:8e:05:7e:24:ce:05:4b:53:5b:25:bb:63:
73:45:f4:0d:64:ba:3e:3b:89:cd:ae:2b:07:db:67:
5a:fe:b3:81:83:81:27:84:fb:5f:01:9e:5b:7f:e5:
2c:af:f7:a3:66:0b:fb:5a:20:5b:57:7a:85:ed:e0:
c9:dd:82:d3:84:b1:53:3c:07:ab:6a:f8:d2:c9:43:
6e:b7:3b:26:2d:2e:6b:6c:9a:64:e4:3c:63:fb:ee:
0d:5b:e5:ff:c6:a2:52:37:c7:80:1e:26:de:9c:0b:
38:1c:54:08:cc:4a:00:6b:0d:19:ef:13:b2:28:3a:
b9:f3:fa:6e:da:61:35:2e:e6:6e:f3:97:81:e3:9e:
21:54:bd:64:e5:1d:bd:f9:e5:95:b1:6e:c8:b1:02:
0f:ce:2a:b1:87:97:38:49:e3:35:17:ab:5b:1d:69:
45:ec:fd:2a:a4:3a:31:0d:ed:4b:e8:1f:46:e8:c7:
07:33:cf:fd:00:79:da:30:e9:0b:dc:e5:9d:34:13:
99:66:84:bc:2f:11:ed:4b:b5:e5:d4:6e:32:d4:04:
9b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:EF:63:07:F1:EC:D1:A4:2F:EA:D2:26:FA:C9:84:5B:E7:C7:B5:74
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/z-9jB_Hs0aQv6tIm-smEW-fHtXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ad:84:bb:0e:b6:7c:f3:e5:45:0a:5e:43:b9:40:79:3c:8b:b6:
6d:99:6d:39:ab:2d:73:9e:b5:fc:cc:64:38:22:b8:9c:4f:68:
cb:5c:7c:ad:ca:bd:d9:29:3f:10:30:61:34:ad:67:33:63:f0:
58:ab:b1:b6:53:7c:d3:28:1a:92:f6:d6:a0:4b:ab:f2:50:9f:
fa:61:a3:f7:9d:4f:36:b5:79:bf:b4:cb:bf:a1:f6:a1:7a:50:
0a:56:45:04:8d:ee:ad:21:fa:d2:f1:cc:49:d2:33:8e:98:4d:
28:2a:d4:cf:ea:65:08:a8:8e:3b:5b:df:43:a0:6f:71:96:9b:
ff:42:2c:08:43:b8:45:03:a6:39:bf:d7:cf:53:82:69:aa:f3:
f3:6f:78:34:42:d0:58:d3:16:a0:47:2c:84:53:6c:6c:0a:d1:
06:a0:8f:b0:bb:91:af:6f:90:9c:c2:63:a0:bf:78:6c:30:9f:
21:08:30:46:c0:03:6b:df:12:aa:94:3a:9a:47:37:68:59:71:
98:18:91:81:92:2d:a6:6e:4e:13:1a:78:9d:3e:03:ab:0d:eb:
66:06:2e:fb:76:17:ef:8b:84:54:64:ba:89:f2:e0:d2:e3:6f:
50:c8:ab:3b:f1:ef:16:c8:4b:df:59:10:b7:71:a7:4b:7d:8f:
9c:ef:b6:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:07 2025 by rpki-client