Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-EFVKCy5TZ6OhEqpubZkl1w5gFc.roa
File: 1-EFVKCy5TZ6OhEqpubZkl1w5gFc.roa (raw, json)
Hash identifier: f3V7C2M3IboIS2bhcd4FRCsuUFts+mnherre/GxKPqM=
Subject key identifier: F8:41:55:28:2C:B9:4D:9E:8E:84:4A:A9:B9:B6:64:97:5C:39:80:57
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184FCCEC835446D307FD9BAA1C584C9BF3F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-EFVKCy5TZ6OhEqpubZkl1w5gFc.roa
Signing time: Sat 10 Dec 2022 16:12:00 +0000
ROA not before: Sat 10 Dec 2022 16:12:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:fc:ce:c8:35:44:6d:30:7f:d9:ba:a1:c5:84:c9:bf:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 10 16:12:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f84155282cb94d9e8e844aa9b9b664975c398057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:05:5e:88:7f:97:17:c3:29:9f:73:30:36:97:
85:7c:33:32:a6:cd:d8:e2:a0:d3:52:09:ee:73:03:
c2:ad:90:39:db:e6:66:f6:25:e8:b4:b8:79:6b:69:
14:c6:d2:f1:23:57:44:88:38:21:9e:1b:6f:f0:24:
5e:9d:0a:7f:08:93:5b:3f:5f:3d:6a:1a:c9:df:b8:
d7:cd:ef:ab:6a:ba:5d:50:a3:2e:15:0e:91:3c:38:
02:34:22:82:cb:ab:8c:e6:55:db:65:c1:11:62:44:
88:4e:4f:f4:69:1a:09:cc:af:06:d3:d2:75:e9:d4:
df:58:dd:26:8f:0f:8c:1a:db:9a:bd:de:4f:51:fa:
78:35:27:fa:bf:70:32:e3:84:76:86:b9:99:14:a6:
a3:80:04:26:8e:e6:ff:e7:94:4e:c2:ee:55:db:75:
9f:13:af:9d:3f:78:5a:3a:41:55:b9:a9:75:61:82:
41:f8:c2:d4:b1:1a:5e:60:ef:6f:a6:40:30:e5:83:
4a:6f:cd:96:64:4f:90:8a:ec:fb:bd:12:28:94:09:
c6:49:7f:1e:cf:22:22:3a:66:12:2e:05:a4:12:31:
47:ea:31:a5:c1:d6:93:f8:ce:20:73:09:f8:eb:6a:
00:e6:59:e3:1c:c9:a0:73:f3:6a:3a:64:8c:88:da:
34:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:41:55:28:2C:B9:4D:9E:8E:84:4A:A9:B9:B6:64:97:5C:39:80:57
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-EFVKCy5TZ6OhEqpubZkl1w5gFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
53:7a:6d:ba:95:b6:74:76:ee:8f:01:6f:43:0e:ea:c3:db:46:
25:07:e2:74:f7:8d:f1:4e:e1:35:23:70:05:5b:c7:96:1d:ba:
73:93:1f:80:94:87:02:e5:c7:c6:96:85:4a:eb:6e:31:30:2d:
91:45:39:f4:b4:82:73:ea:b9:97:ef:6d:25:7e:9e:ef:ab:b0:
e6:6c:a0:b4:7e:ab:28:44:49:64:bc:90:ef:f9:d2:98:a6:95:
ad:0c:f2:8c:10:bc:9b:53:24:d8:7d:06:ea:de:ad:7d:57:5e:
73:07:a7:63:f4:31:26:64:8a:57:4e:00:22:b5:d5:42:71:0b:
9d:a5:13:e4:c9:fd:b2:e1:d8:5d:b0:8e:e0:41:af:9c:6e:e5:
da:bc:2c:f8:75:2d:2d:a2:35:33:ae:ac:dd:a1:4c:36:cb:e6:
f5:da:61:8d:b8:29:6f:3c:3e:92:d6:43:b6:b1:0e:b3:02:c0:
ac:82:3d:d6:e0:c1:b4:c5:42:46:98:50:83:69:ef:ea:fe:46:
15:de:90:ce:74:61:83:f0:ed:95:17:91:83:3f:4b:ff:d0:26:
5e:f0:28:71:28:cb:cd:dd:1f:e1:9e:87:83:13:04:49:d7:96:
88:2b:78:85:36:75:25:ff:15:a8:56:1b:b2:f8:a1:e6:43:83:
35:c0:5e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:48:11 2025 by rpki-client