Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0jZFObt1mTtLzljF0T5FARelSHU.roa
File: 0jZFObt1mTtLzljF0T5FARelSHU.roa (raw, json)
Hash identifier: u4HVwmGz7CeQUHGehenuMJuRPM9ZQjD/Qs/UXcxTpko=
Subject key identifier: D2:36:45:39:BB:75:99:3B:4B:CE:58:C5:D1:3E:45:01:17:A5:48:75
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018657C76D364A257ACE208B80568B704359
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0jZFObt1mTtLzljF0T5FARelSHU.roa
Signing time: Thu 16 Feb 2023 01:12:12 +0000
ROA not before: Thu 16 Feb 2023 01:12:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:57:c7:6d:36:4a:25:7a:ce:20:8b:80:56:8b:70:43:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 16 01:12:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d2364539bb75993b4bce58c5d13e450117a54875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:19:96:aa:3d:b3:07:e4:39:47:0b:48:04:f3:
3f:a6:e9:09:61:f5:e2:58:be:0c:2e:a5:a1:8a:6e:
5b:bf:89:d7:e7:dd:c9:61:0a:49:ca:a4:01:f2:bd:
18:19:de:f4:a6:a3:66:d7:61:e6:31:5b:68:18:58:
0a:d2:a8:fd:35:51:94:e6:3a:56:f8:8e:ac:1f:07:
d8:94:86:3f:7a:d6:d8:e5:3b:90:72:11:ea:ba:56:
05:a5:81:33:78:89:96:d2:0b:32:4b:97:c4:97:25:
91:80:5e:ef:fb:b5:c5:23:35:93:03:08:f8:ac:03:
52:01:fd:3a:e5:44:b7:46:02:da:ac:48:94:18:c3:
5e:34:4e:f5:a0:44:76:97:10:14:78:49:b9:26:23:
74:cf:ab:a8:07:58:11:d7:5d:fa:20:31:ad:42:14:
1b:60:d9:80:db:2f:47:3b:91:e7:dc:2a:94:6f:04:
45:d1:a8:1d:1a:c0:3c:11:fa:d9:2e:0c:11:4c:8c:
ab:40:c8:f8:ee:0a:2f:8d:f7:02:f8:d1:df:03:c4:
36:ea:a1:78:5b:18:6d:a5:13:c7:9b:1d:09:ee:c2:
87:21:e9:c5:ff:e5:4b:02:12:6f:2f:20:14:9e:80:
e0:3c:d6:e8:17:81:56:7d:17:b7:25:a7:1c:d2:fd:
e1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:36:45:39:BB:75:99:3B:4B:CE:58:C5:D1:3E:45:01:17:A5:48:75
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0jZFObt1mTtLzljF0T5FARelSHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6e:fb:e0:8e:6c:72:81:88:1d:78:46:9c:ff:5c:0d:7b:ae:d0:
8e:bc:37:92:d5:81:77:94:25:9f:1f:13:58:95:3c:96:7f:32:
82:0f:94:db:2d:c4:4b:bb:3b:11:3d:7b:9f:72:d6:9f:70:d0:
02:7f:d4:ae:b2:4e:5a:3b:ba:c5:ab:3a:6a:06:a6:1a:76:58:
9c:d5:06:a2:65:44:ec:a5:88:2e:44:ce:4f:ab:35:9c:53:22:
9a:c3:08:a4:ff:6e:b6:e3:03:5e:cc:41:ba:e3:ea:d7:2f:28:
2a:6d:b5:d5:39:f2:81:fb:72:6e:01:4c:21:52:ec:51:e1:1b:
32:65:1f:a9:3f:6a:1a:72:51:0f:6a:f6:a5:a4:66:70:37:1a:
06:83:a9:f1:a7:c8:c0:44:d3:7f:20:55:5d:c0:c1:ec:99:b7:
38:75:0b:76:5f:65:64:65:0a:b5:89:7a:6e:6b:14:b1:40:65:
48:ad:f4:2f:89:2f:d4:c7:38:0d:93:85:65:15:9a:03:b2:f4:
89:68:a7:71:f2:a0:e2:4d:0a:b7:7b:6e:2d:5b:6a:20:6b:04:
33:7c:28:8b:f0:bf:50:31:52:2b:df:dd:e5:4c:18:18:f3:b4:
1e:a0:87:95:56:9c:19:5c:d1:87:94:01:41:7d:d8:c8:a8:97:
9e:18:b8:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 22:53:03 2025 by rpki-client