Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/V2RCILhd91alytu0-ZpVsn_JlhM.roa
File: V2RCILhd91alytu0-ZpVsn_JlhM.roa (raw, json)
Hash identifier: SzNlbOnm/tpzS1p7edDKrET5xA917gd66Ottj7uIBzI=
Subject key identifier: 57:64:42:20:B8:5D:F7:56:A5:CA:DB:B4:F9:9A:55:B2:7F:C9:96:13
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 811BB00A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/V2RCILhd91alytu0-ZpVsn_JlhM.roa
Signing time: Wed 04 May 2022 14:08:31 +0000
ROA not before: Wed 04 May 2022 14:08:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2166075402 (0x811bb00a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 4 14:08:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=57644220b85df756a5cadbb4f99a55b27fc99613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b6:38:6f:08:ef:6f:3e:12:a7:c8:f6:83:87:
23:1d:dd:45:80:86:8f:68:b9:4a:ce:07:57:f3:74:
07:99:de:f6:73:ae:30:f8:df:4f:3b:8d:2f:30:7f:
e7:83:3e:af:00:20:ab:bb:79:8a:ad:0a:c9:c8:06:
ec:6d:69:bb:08:0a:79:61:ac:c9:ed:98:28:b3:80:
4a:22:c6:81:60:e7:9d:92:43:ed:c1:96:90:dc:2e:
69:1f:1d:a5:e4:f1:bb:31:c5:a2:7c:47:bd:84:e5:
d5:fa:40:bc:a6:08:49:44:86:bf:08:8d:de:69:15:
9b:45:de:d1:9d:a9:cf:a5:86:b6:48:2f:58:3f:40:
67:6e:89:1b:b5:ed:5d:9b:ee:b1:08:04:7d:ff:fb:
a6:f2:69:43:be:1a:6f:f8:ec:e4:81:62:f1:3b:5f:
73:6e:93:6e:d9:b4:04:10:b4:c8:60:aa:c1:0b:9e:
1a:72:c6:9c:8c:5f:d5:7b:4e:ea:58:10:9d:d2:75:
24:da:63:4c:2a:f0:45:d2:ad:1f:7b:c1:37:24:62:
b6:64:e8:d1:39:de:1d:62:e2:5b:4d:b5:e3:15:8f:
1b:72:a6:7f:12:2b:40:a0:5c:c9:45:e8:dc:8f:8a:
a8:91:e8:d4:6a:ba:c5:6c:2d:fb:77:46:c6:4a:cd:
92:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:64:42:20:B8:5D:F7:56:A5:CA:DB:B4:F9:9A:55:B2:7F:C9:96:13
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/V2RCILhd91alytu0-ZpVsn_JlhM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
85:12:78:e5:d2:bd:17:fe:ec:53:57:a9:a8:4f:e2:5a:ee:b3:
74:e5:19:b2:e9:47:0b:99:7b:27:1f:f4:93:65:2b:75:f5:0a:
5e:bd:6e:bb:69:5c:21:a2:e9:05:2f:55:fe:b8:6b:fc:6a:06:
aa:78:88:43:10:b0:49:63:f6:fc:e4:6a:f5:97:dd:03:89:69:
bd:a8:12:35:34:f2:1c:1c:2d:02:56:31:2e:6d:8d:52:e9:42:
22:24:9e:95:33:17:26:ca:e4:05:9b:ba:5b:98:66:ee:dd:f0:
a7:9b:20:d2:40:36:8a:93:51:b9:06:33:7e:2d:70:18:03:f2:
af:d5:b8:de:0d:8f:61:77:da:5e:18:93:23:42:32:37:aa:5b:
25:20:e4:be:ed:c6:83:e7:67:d5:b4:6f:7e:83:02:27:9d:6b:
48:fd:55:28:3e:58:52:09:fc:cd:59:9f:3f:ae:ac:d6:59:ff:
d2:54:ed:6b:d1:d9:71:49:7d:02:69:85:19:87:3c:dc:c4:70:
02:13:38:86:de:f2:7b:ee:67:9c:a1:8d:b2:5e:ba:bb:84:5b:
05:6f:c7:1a:38:32:ad:41:bb:3e:b4:f7:09:6c:3c:d9:fc:e9:
da:24:0e:23:35:d4:90:52:80:ac:b9:c4:4e:2b:3d:30:26:8c:
23:e5:b2:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 05:19:25 2025 by rpki-client