Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1OLxcTphuZktQ2XnNNE6O0IRQDg.roa
File: 1OLxcTphuZktQ2XnNNE6O0IRQDg.roa (raw, json)
Hash identifier: BFmyuLm8M9Wg/+hG4n9XJJxCGOSOo0igJLlrdcIYWsk=
Subject key identifier: D4:E2:F1:71:3A:61:B9:99:2D:43:65:E7:34:D1:3A:3B:42:11:40:38
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A315AF6EBF913B6C9118B46B07F9D3511
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1OLxcTphuZktQ2XnNNE6O0IRQDg.roa
Signing time: Sat 26 Aug 2023 10:19:19 +0000
ROA not before: Sat 26 Aug 2023 10:19:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:31:5a:f6:eb:f9:13:b6:c9:11:8b:46:b0:7f:9d:35:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 26 10:19:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d4e2f1713a61b9992d4365e734d13a3b42114038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ee:ad:51:8e:97:0f:6e:93:17:b3:fd:e1:f8:
95:2c:6f:00:43:53:84:90:2d:d5:66:da:73:12:5b:
a3:54:8f:12:d0:18:1b:b6:fc:c6:32:d1:a0:db:ca:
2d:d9:ef:31:63:3b:44:9c:10:b8:38:68:0c:60:be:
4a:b8:c7:ce:bb:af:ff:55:a7:2c:d2:44:5d:8b:c6:
b0:87:97:f7:2b:42:76:a4:30:e6:fb:44:ac:9b:2d:
4e:33:f1:65:96:9c:84:9c:5a:08:b1:86:3a:56:1c:
84:b4:4c:f3:a6:65:c5:a7:32:fc:f0:5e:94:6d:bc:
58:7f:96:88:a0:95:33:31:8c:fb:36:0a:20:44:8d:
42:d7:e2:05:46:07:44:65:e2:bc:ee:25:76:0e:7a:
d2:f6:1e:37:9e:16:ef:6a:87:39:85:8d:e4:99:09:
1d:0e:da:32:2b:87:fc:6a:a7:95:e9:81:17:29:d2:
d2:5d:06:fb:01:ce:9c:fa:b7:64:8f:8b:a5:77:d6:
c5:99:3b:51:3b:01:fb:a7:ba:fb:4a:e0:c4:f6:41:
e5:bb:b8:5b:85:10:c4:7a:08:05:1f:74:45:3e:fe:
75:6f:5b:07:29:20:2b:8d:24:c0:18:de:aa:13:d2:
53:e0:85:7d:73:b6:c6:56:09:0a:13:0c:a4:4b:3d:
a6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:E2:F1:71:3A:61:B9:99:2D:43:65:E7:34:D1:3A:3B:42:11:40:38
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1OLxcTphuZktQ2XnNNE6O0IRQDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
81:f0:ce:c7:d3:0f:d1:63:03:a8:34:06:a9:f4:45:b6:0e:40:
ce:57:ec:99:df:75:04:bd:e0:ef:0c:1a:a4:42:92:ac:2c:1c:
07:f5:e0:b5:a2:95:12:31:f7:43:8d:c4:68:8d:07:1f:14:1c:
04:21:4e:e8:c9:f4:a5:c8:a4:f3:18:49:d5:59:f2:35:3a:72:
bd:bf:9e:a9:54:01:86:c8:0d:56:1d:d9:db:fe:77:5e:ed:a3:
20:45:0b:5e:14:22:eb:76:88:59:a0:75:c3:74:43:0f:cb:85:
e2:18:bb:68:63:95:6f:12:af:31:2e:ac:58:90:cf:d6:e8:30:
61:71:70:df:52:c6:c6:66:79:8d:97:c0:c7:77:52:95:7f:91:
c2:e0:c4:84:d2:54:96:c4:e2:60:6f:2e:a1:cb:22:7f:a7:db:
d6:0b:0a:a2:d4:97:84:97:82:1c:dd:2d:1c:43:2f:0f:52:0f:
58:2c:a9:1d:4f:3c:f0:89:4f:34:2b:80:30:fa:9d:9b:b0:c1:
6a:e7:9e:df:af:83:4d:d2:e5:5a:f5:cc:67:e9:ef:36:e1:01:
ad:0c:cd:e6:47:f3:fa:41:8e:ba:08:0a:48:7a:f2:ea:80:6a:
5b:5a:9d:98:0a:ae:37:97:0f:b6:71:fd:bd:48:a3:c7:c6:e0:
e0:0a:de:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:26:27 2025 by rpki-client