Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-sXjaRgoS3M3mfbpc4v5pYJpvoQ.roa
File: 1-sXjaRgoS3M3mfbpc4v5pYJpvoQ.roa (raw, json)
Hash identifier: 68E1JT/VwqIIR8XAcuttjWvuA1loK3HHvZDX2k63XrU=
Subject key identifier: FA:C5:E3:69:18:28:4B:73:37:99:F6:E9:73:8B:F9:A5:82:69:BE:84
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01851278A077E533463B54F0503FA518CE87
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-sXjaRgoS3M3mfbpc4v5pYJpvoQ.roa
Signing time: Wed 14 Dec 2022 21:09:33 +0000
ROA not before: Wed 14 Dec 2022 21:09:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:12:78:a0:77:e5:33:46:3b:54:f0:50:3f:a5:18:ce:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 14 21:09:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fac5e36918284b733799f6e9738bf9a58269be84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b0:23:af:50:4f:56:b5:78:55:bf:be:07:b1:
3b:77:01:f7:27:6f:af:fd:73:d0:fc:9d:e9:c5:76:
03:8c:6e:41:94:06:4c:a1:82:b5:71:0f:7a:62:9f:
20:3c:14:3d:99:b3:61:b7:7f:84:a7:b9:4c:40:a9:
6f:70:f5:8b:82:02:a7:90:00:09:97:20:9e:9a:86:
6b:bc:9d:08:82:89:8e:6e:d3:b5:dd:43:5a:16:fb:
85:f1:4d:33:37:7e:fe:93:c1:5b:56:dc:a0:b0:25:
70:4b:a3:ef:a1:8b:cf:6c:37:ff:13:60:4c:24:ad:
9f:ec:d3:5a:66:6b:bf:71:ad:4c:9a:a1:09:53:92:
4a:22:78:01:a7:d5:62:02:d9:87:c1:c6:06:15:23:
f3:1d:29:67:db:0e:0a:85:23:1f:99:5b:5e:60:27:
5a:13:d2:3f:9f:86:40:7d:b5:8b:a4:da:8b:8e:e2:
71:6f:50:b6:1a:2a:91:12:f9:5a:f3:78:6a:56:fb:
d0:b6:67:59:07:90:a3:8e:1a:0f:84:b0:3c:d7:5c:
87:ea:75:5e:4a:1f:9f:81:55:db:94:ec:0a:13:b2:
4b:7b:04:26:6a:38:69:cf:f0:c6:27:8f:a4:5d:36:
3a:ab:21:05:fe:8f:97:dd:53:29:42:60:7c:ac:a0:
f4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:C5:E3:69:18:28:4B:73:37:99:F6:E9:73:8B:F9:A5:82:69:BE:84
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-sXjaRgoS3M3mfbpc4v5pYJpvoQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8e:89:00:58:4f:29:9b:ec:45:8d:85:99:39:e6:fc:28:31:2c:
ad:a0:4b:29:0f:6a:ef:98:f9:17:98:b8:04:ff:fb:bd:f5:72:
a1:36:a1:c8:ce:67:d7:eb:8d:b2:25:96:04:63:25:f2:d3:e5:
1c:ba:47:14:ee:a0:69:41:4c:02:43:1a:fb:bc:45:fa:ca:23:
32:21:dc:90:de:f4:f4:aa:3d:85:e4:59:c0:99:81:c7:10:e0:
ae:a7:74:88:57:db:63:eb:dd:4a:e2:7e:ea:95:0b:cd:a1:b0:
e7:6a:88:6b:76:ab:6b:60:28:8c:a3:94:ec:6c:69:22:f1:1b:
28:cb:0d:ad:60:0f:67:f3:82:29:1c:ce:f9:bb:2b:6b:6f:90:
bd:56:4f:e0:95:32:58:51:1e:de:e8:5d:1a:b2:3a:a4:b1:a5:
df:fe:59:26:f1:5f:e4:cc:f0:aa:f0:9c:9e:0a:6e:71:8e:f1:
ab:07:02:c6:e7:1b:3c:a9:07:9a:29:ec:5c:3e:dc:3a:7e:bc:
9f:23:f6:46:ca:5a:85:5d:7c:46:6c:24:26:4f:22:ce:63:32:
2f:5c:e9:41:aa:06:ab:cc:b3:be:7c:17:01:14:11:0e:4d:6a:
9f:aa:59:0b:22:b4:3d:6b:6c:b4:9d:c9:e7:f6:67:47:0f:b8:
f8:52:40:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:31:54 2025 by rpki-client