Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-iA9qQmuBVZekK-cjc5FlptSLZM.roa
File: 1-iA9qQmuBVZekK-cjc5FlptSLZM.roa (raw, json)
Hash identifier: 1gkkw9AazcueC5xi+hGOICpPG3j4U1vfiQAqbK6g8zU=
Subject key identifier: FA:20:3D:A9:09:AE:05:56:5E:90:AF:9C:8D:CE:45:96:9B:52:2D:93
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185CE7967EAC0477DCD434B57EC8F1DC5A4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-iA9qQmuBVZekK-cjc5FlptSLZM.roa
Signing time: Fri 20 Jan 2023 09:19:00 +0000
ROA not before: Fri 20 Jan 2023 09:19:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ce:79:67:ea:c0:47:7d:cd:43:4b:57:ec:8f:1d:c5:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 20 09:19:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa203da909ae05565e90af9c8dce45969b522d93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b1:a2:d4:31:4d:4c:6f:90:4e:d5:2d:ad:56:
13:1a:4e:09:69:d4:8b:ce:92:c9:14:ea:5d:fd:89:
b9:9a:76:74:08:5d:2f:b1:1f:80:03:48:1f:d3:ac:
e2:a3:2f:e9:8d:1d:ba:24:7a:af:db:c7:34:45:cf:
cb:01:66:b0:e2:7f:f0:d8:5c:b9:60:4b:77:54:ef:
95:39:6c:62:97:37:7d:f4:23:a8:17:d9:da:2a:17:
b1:54:5f:2c:83:c5:aa:b0:0d:b3:ce:b8:e3:8f:6b:
88:1a:74:ac:dc:65:80:fd:b5:96:ee:29:72:0c:69:
58:cb:b8:e2:a6:3f:83:73:52:02:f2:6b:80:2d:ef:
40:82:7c:85:61:2e:72:69:9e:6f:30:5c:8b:7e:e8:
f4:30:ed:d3:b6:eb:29:27:6e:08:4e:e6:b5:14:31:
66:f0:ab:76:e2:e3:4e:fc:44:db:7f:26:e1:84:51:
fc:51:fc:c3:d9:54:71:e2:96:1e:dc:db:e2:e0:8e:
f4:4c:8c:1e:eb:89:18:be:5d:60:54:88:5f:da:fc:
3a:83:59:28:5f:5b:58:15:41:39:61:7d:b5:05:7f:
d7:02:fe:d6:cb:46:ce:6a:78:b8:b7:34:60:cb:32:
df:67:7b:fe:39:d3:30:19:f0:68:22:71:11:c9:10:
3f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:20:3D:A9:09:AE:05:56:5E:90:AF:9C:8D:CE:45:96:9B:52:2D:93
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-iA9qQmuBVZekK-cjc5FlptSLZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
98:1e:2b:0b:4c:d9:c8:6e:ca:20:9b:eb:f8:34:75:78:f1:c0:
1a:3d:6a:5c:d9:74:87:94:58:9b:ce:37:46:92:d6:b8:c8:c2:
0a:e7:22:65:77:fa:43:be:31:18:2c:98:3d:6c:6b:5e:e8:12:
b1:a3:8f:6b:e2:30:42:41:02:d7:3d:a4:62:4a:c4:3f:5e:c7:
57:ca:89:c4:92:7f:22:20:66:35:00:11:a6:59:ce:dc:3a:10:
5f:42:f5:e3:02:8b:8d:bc:0c:0c:a4:c4:38:11:a8:e0:50:f6:
fc:be:c0:c2:4f:e1:47:04:8f:a6:66:da:68:ce:1d:8f:72:e9:
40:72:c2:21:6e:da:a1:57:8c:f9:5a:0b:46:af:c0:1e:14:dd:
46:24:54:78:da:e0:b8:54:3e:d2:7b:4a:f6:65:91:c2:f4:d9:
4c:66:d7:0a:bc:ea:c7:fa:04:e4:d6:7c:6a:74:a9:a2:a3:a4:
c3:92:f7:28:b8:29:a8:b2:8f:08:01:84:d0:8f:77:1f:f9:69:
6c:86:eb:88:74:cd:0a:b4:c2:9b:6c:97:71:d6:7a:c6:7b:bf:
07:b8:b9:24:8f:6d:05:86:a9:01:70:ee:7d:fe:94:a4:c3:e8:
54:5f:45:ef:04:e5:d7:bb:bc:61:ab:42:c4:63:fe:bb:eb:a7:
22:ef:2b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 09:51:27 2025 by rpki-client