Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/04AQ1KF3tk3_8safRPhBPkI8p2A.roa
File: 04AQ1KF3tk3_8safRPhBPkI8p2A.roa (raw, json)
Hash identifier: iErrMVv8Bmj2maZbY7jh1ONmR31j2du3JoayrQF3n6o=
Subject key identifier: D3:80:10:D4:A1:77:B6:4D:FF:F2:C6:9F:44:F8:41:3E:42:3C:A7:60
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A2931BCCC24E0DBC9C13F96AA8FA1352E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/04AQ1KF3tk3_8safRPhBPkI8p2A.roa
Signing time: Thu 24 Aug 2023 20:17:20 +0000
ROA not before: Thu 24 Aug 2023 20:17:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:29:31:bc:cc:24:e0:db:c9:c1:3f:96:aa:8f:a1:35:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 24 20:17:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d38010d4a177b64dfff2c69f44f8413e423ca760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f3:17:dd:72:85:97:5f:ee:a9:34:bd:20:aa:
88:12:9a:e0:4a:e2:64:60:7a:73:c2:4d:7d:26:90:
bc:99:da:d4:22:35:db:01:c1:9a:9c:3d:cf:16:c6:
dd:1a:e7:49:a9:4f:bd:35:2c:27:83:41:1b:0d:19:
d0:bf:c2:9e:e9:46:07:f2:42:87:6a:b4:98:9d:08:
46:75:53:11:6d:cf:17:42:6c:16:2f:ea:19:3b:78:
6e:ca:b0:6e:35:da:c4:0f:48:62:23:f4:cd:23:b1:
41:15:be:f4:64:3e:ee:c0:14:c4:0a:92:03:42:cb:
5b:52:52:c9:9a:39:61:60:1b:07:2a:27:49:14:4f:
37:fe:49:01:2f:44:4f:97:cc:f7:9d:a3:79:d7:fd:
db:4f:87:78:0c:61:48:df:8b:aa:c6:f0:e6:4d:d0:
0e:eb:9f:42:6b:81:af:d4:a9:47:6c:fc:29:04:7a:
84:24:74:68:5d:c1:76:32:1e:ee:53:08:07:93:fd:
d3:b1:bf:83:28:4d:ee:30:5f:a9:92:34:94:64:6b:
6f:83:ee:81:74:42:ff:30:4c:11:d7:dd:31:6d:80:
07:55:28:d6:a9:47:88:0a:bf:b1:fb:11:8b:41:3b:
bb:11:de:7a:c6:b1:7b:2b:8c:45:b1:5a:66:a9:3a:
6d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:80:10:D4:A1:77:B6:4D:FF:F2:C6:9F:44:F8:41:3E:42:3C:A7:60
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/04AQ1KF3tk3_8safRPhBPkI8p2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8d:51:7f:a1:b8:27:21:08:85:56:25:d6:77:f2:23:4e:11:44:
25:61:fe:be:ea:02:2a:b4:36:2d:f5:03:e9:98:e1:a1:df:12:
79:36:a7:4e:05:ac:00:98:dd:7e:7a:81:01:7b:e5:a3:f7:44:
9b:53:40:99:6e:e7:1f:1f:4b:37:83:f5:fb:6d:e6:ae:cb:af:
f5:81:48:f6:ec:52:8d:dd:41:3a:7d:1a:95:f2:96:b7:90:90:
04:42:74:d4:d4:91:a1:84:04:34:1e:a5:59:a8:7f:14:2a:0f:
78:3a:3a:ae:7e:31:b8:ec:41:fe:55:a3:38:56:b3:e6:00:6d:
e3:67:04:b3:60:79:69:2c:25:8a:ff:af:a4:27:40:6f:e7:1d:
2f:26:6e:d1:74:c9:3e:61:76:76:0e:9b:da:97:19:24:56:a5:
2d:dd:06:77:f2:c6:0d:a9:bb:d9:a2:9d:93:62:e9:cb:95:a9:
b1:a0:64:67:48:cb:e2:97:d5:4c:d9:33:7d:c1:4d:f5:c1:1a:
00:d7:2e:f6:ca:5d:f5:4f:78:09:45:0c:16:01:a9:44:55:ca:
51:a7:40:eb:d9:15:b5:0f:02:0d:1a:63:cb:07:56:74:6d:4b:
4c:25:dd:4c:98:41:09:c9:34:dd:59:9d:a9:63:08:ec:53:b3:
46:84:d9:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 02:24:09 2025 by rpki-client