Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/01GutXO_8sO57aK4c74sf65ymSk.roa
File: 01GutXO_8sO57aK4c74sf65ymSk.roa (raw, json)
Hash identifier: UK6lmEn5LFzuuUlujCLQdxpK3w0rnTX+OBmMiyVhPTA=
Subject key identifier: D3:51:AE:B5:73:BF:F2:C3:B9:ED:A2:B8:73:BE:2C:7F:AE:72:99:29
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185093DA68D6C8F50495591F0BDE189DF65
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/01GutXO_8sO57aK4c74sf65ymSk.roa
Signing time: Tue 13 Dec 2022 02:08:33 +0000
ROA not before: Tue 13 Dec 2022 02:08:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:09:3d:a6:8d:6c:8f:50:49:55:91:f0:bd:e1:89:df:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 13 02:08:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d351aeb573bff2c3b9eda2b873be2c7fae729929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:af:23:8b:f9:02:1f:9b:5a:54:38:b2:58:84:
18:58:ca:93:4f:42:43:4d:77:ac:74:bc:1f:d1:e5:
02:bb:93:04:5f:0d:5a:60:c5:81:24:69:f3:96:6d:
64:42:a9:f2:c2:9d:ed:18:ea:54:80:38:2a:5b:a3:
96:7d:33:d3:d2:0c:2a:25:fc:c8:3b:a5:aa:e0:77:
31:fb:79:d1:3e:b0:5d:e8:45:46:e9:4a:32:b1:4d:
df:b9:83:fb:95:c8:1f:35:09:59:67:4a:c8:93:8a:
93:97:35:e2:98:78:93:07:f2:da:84:b4:a7:c1:13:
22:ff:c6:55:98:c6:da:73:3e:c8:e2:d9:6b:a2:8d:
84:f2:23:60:0d:55:cb:5c:33:bf:db:b5:f7:f1:ef:
8a:43:eb:b8:93:e3:97:ed:45:15:97:fb:20:31:ea:
b6:20:e7:28:11:f6:28:15:d5:b6:ec:07:75:d6:7d:
a7:06:e6:3b:09:12:c0:74:e1:9b:06:d6:3b:21:20:
1e:08:ad:7c:32:36:c1:a4:eb:f4:86:f6:90:b1:7d:
55:cb:f1:4c:30:12:91:cf:b5:84:6e:c9:1f:95:4b:
a2:a7:1e:30:f5:70:a0:1d:76:68:12:34:a8:82:16:
ff:08:75:85:ad:f9:aa:a0:2f:4b:1d:63:f0:cf:f8:
aa:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:51:AE:B5:73:BF:F2:C3:B9:ED:A2:B8:73:BE:2C:7F:AE:72:99:29
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/01GutXO_8sO57aK4c74sf65ymSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6c:50:02:0e:03:71:d3:41:35:8c:71:87:9d:8d:3c:2c:cb:14:
ea:d5:c8:20:45:99:24:49:6c:26:65:67:2e:81:e0:c4:c7:4b:
77:37:b7:b7:69:5a:dc:49:28:d0:fd:d6:e8:31:f4:09:01:4c:
e0:d8:9a:4b:41:4c:06:88:65:1d:bb:f1:6f:24:a1:42:e7:5f:
ba:fe:ee:1b:f2:6b:7a:b8:58:2a:7c:c5:52:b6:b4:9d:71:83:
83:db:82:81:11:dc:d4:e1:41:50:e3:4b:36:e2:85:c2:77:31:
b4:6f:44:52:6b:eb:f1:ea:d0:51:76:f0:72:d2:49:9b:91:eb:
23:cb:8c:df:8f:d8:79:89:bc:a3:cd:08:a9:98:17:f0:7d:fc:
68:6e:fa:0a:af:67:4f:49:76:77:57:ef:b1:30:bd:7c:98:d7:
f6:6b:59:6a:17:74:fa:03:90:56:b3:00:4e:d2:f7:11:a7:cf:
ce:95:1c:13:33:05:d6:8d:80:3e:0c:38:5e:91:97:d7:b1:62:
ac:d5:25:2c:d6:52:6f:44:71:a1:bf:f1:7b:2c:df:b8:e2:f0:
61:5d:d7:95:be:ad:db:6d:ac:45:fa:38:9e:4a:ee:01:46:18:
49:1d:ab:98:38:d1:b6:75:a5:ec:1a:52:23:28:bb:ab:f2:52:
e3:b3:62:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:41:25 2025 by rpki-client