Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-neJx4iEloxUP2dG58y5BLoC3Z4.roa
File: 1-neJx4iEloxUP2dG58y5BLoC3Z4.roa (raw, json)
Hash identifier: ofcKy5vu6K/hoaAgG0D5jhhxNSEhuNXh/EnJgGqYAKM=
Subject key identifier: FA:77:89:C7:88:84:96:8C:54:3F:67:46:E7:CC:B9:04:BA:02:DD:9E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185E18AA3A5576A651981F548AD85254DEF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-neJx4iEloxUP2dG58y5BLoC3Z4.roa
Signing time: Tue 24 Jan 2023 02:10:37 +0000
ROA not before: Tue 24 Jan 2023 02:10:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e1:8a:a3:a5:57:6a:65:19:81:f5:48:ad:85:25:4d:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 24 02:10:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa7789c78884968c543f6746e7ccb904ba02dd9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:38:31:08:9b:9a:07:d0:6e:a9:bc:c7:2e:3c:
34:8b:1e:b8:4f:d2:50:b6:ad:fb:4c:1e:ed:d3:92:
0e:1f:f6:31:e1:75:3a:87:84:99:e8:c0:bd:f1:b0:
f4:18:20:48:79:a4:48:d1:a7:28:fc:35:42:3e:85:
3e:aa:f6:42:76:98:8a:21:fb:31:81:86:92:90:ba:
8b:80:6f:ab:6b:ad:01:ef:f7:46:d7:25:57:8e:ad:
10:ff:05:f3:2a:f1:7d:49:c6:41:46:d6:0a:7e:f5:
ac:a6:a0:e9:7a:bd:b4:4b:6d:d4:48:3a:a0:cf:8f:
ee:53:d7:ad:6a:cb:9b:d9:11:a7:70:ab:81:bf:d8:
24:4d:6b:0b:79:be:f4:f4:7c:12:d1:0f:92:2a:fd:
d7:98:20:9d:1a:25:89:61:1a:16:2b:28:15:ee:6a:
c6:2c:b9:d1:c7:42:cf:95:35:4f:9e:3c:7d:d6:99:
c1:02:e0:20:7c:33:c3:08:70:7e:36:a1:13:8d:af:
fe:0a:0e:45:0f:b1:07:0c:18:95:34:9a:bd:12:1a:
60:75:8f:76:c4:20:80:89:3f:7b:2c:ad:fb:39:9f:
e0:7a:02:af:38:64:aa:c8:25:97:de:f4:49:c5:81:
58:57:4b:c5:94:3b:5c:26:cb:9a:89:7e:8e:17:8f:
54:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:77:89:C7:88:84:96:8C:54:3F:67:46:E7:CC:B9:04:BA:02:DD:9E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-neJx4iEloxUP2dG58y5BLoC3Z4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a3:a1:c0:4d:a5:c8:b6:79:56:36:20:74:49:20:c3:28:40:72:
9f:3f:47:b0:8a:b0:99:8c:c3:ab:66:c5:53:a7:bd:34:e2:b6:
e3:80:38:a4:3c:97:3d:c5:4a:a1:34:94:6d:f1:d9:4f:dd:45:
d9:79:f7:f1:e1:82:a4:e2:53:d2:36:84:34:08:2d:e2:d5:5f:
2f:ee:af:51:ef:5a:d3:e0:ce:67:dc:c5:89:cd:d5:26:88:eb:
c7:1c:26:90:7f:29:45:38:a1:15:fc:aa:f7:9f:0a:71:46:9b:
b2:16:3f:51:5f:5b:61:6e:16:6e:ce:22:14:34:a7:6e:d2:80:
f0:0f:7b:e9:ea:10:12:37:c5:8a:90:5a:a9:5f:3b:66:52:b0:
42:4c:00:54:fa:55:62:7f:e6:c0:91:71:10:91:01:51:b0:81:
c6:ca:78:e6:fe:13:29:90:e8:42:9e:2f:34:c3:76:17:9b:be:
0b:4c:33:64:ad:8e:fe:f1:b7:35:b0:09:66:09:c9:c4:2b:2c:
9f:48:2f:7d:99:02:97:63:87:d7:a9:a2:ac:33:31:30:86:3c:
db:42:cb:1f:bb:9a:2a:82:c9:3c:27:7c:0b:40:c0:4d:eb:b9:
e6:ef:af:14:e0:76:30:90:1c:95:30:e3:54:1c:d8:8c:12:6b:
f0:4e:ff:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:13:39 2025 by rpki-client