Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1RzxSjxUiskYkariKep0IWh6YnA.roa
File: 1RzxSjxUiskYkariKep0IWh6YnA.roa (raw, json)
Hash identifier: yRdIfEOEQnb0XE+U4pMmTxulRKh4y4/IFzMnozTaVOo=
Subject key identifier: D5:1C:F1:4A:3C:54:8A:C9:18:91:AA:E2:29:EA:74:21:68:7A:62:70
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184DBC5D9C21C751C2F5805FB34CE47533D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1RzxSjxUiskYkariKep0IWh6YnA.roa
Signing time: Sun 04 Dec 2022 06:14:47 +0000
ROA not before: Sun 04 Dec 2022 06:14:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:db:c5:d9:c2:1c:75:1c:2f:58:05:fb:34:ce:47:53:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 4 06:14:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d51cf14a3c548ac91891aae229ea7421687a6270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f2:20:f3:09:36:b7:1f:70:16:ed:7d:5d:43:
ce:e1:24:43:15:f0:20:c0:b4:b8:33:ba:82:52:ed:
e4:6b:66:fa:dd:96:44:55:50:db:5e:32:9c:6d:a3:
6a:cb:8a:de:27:ea:f1:45:25:f8:77:43:0a:d9:5c:
ab:26:be:0d:b1:a6:ae:fa:bd:20:d5:83:5d:e1:f0:
98:f5:3e:45:98:dd:12:af:62:94:e8:68:14:f7:bc:
3f:9b:c9:67:b0:54:1e:ba:91:90:51:05:e1:41:22:
6e:80:30:b5:33:39:16:8e:9d:22:10:5d:35:2d:3e:
f7:ec:e3:7e:8f:2c:ae:27:de:86:49:1e:81:d9:9f:
b6:d2:83:98:65:bc:6b:e8:03:27:84:1f:bb:f4:47:
f0:d3:86:1d:c9:78:5a:79:1a:c9:2e:71:89:9c:39:
79:e7:48:7e:f0:76:02:a1:a2:df:65:b2:08:e2:eb:
c8:0b:0c:6f:1b:b5:46:dc:5a:e6:13:df:53:b9:2b:
b3:43:95:4e:c5:f0:c7:a0:a8:bf:2a:6a:bc:c9:8f:
5f:b3:72:7d:a2:e5:58:84:4b:36:18:94:c5:91:17:
63:ce:ac:16:1a:a8:85:8c:c6:fc:eb:f4:3f:f5:2c:
12:a8:58:82:ae:ef:a8:de:b9:6c:ca:e2:6b:44:08:
12:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:1C:F1:4A:3C:54:8A:C9:18:91:AA:E2:29:EA:74:21:68:7A:62:70
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1RzxSjxUiskYkariKep0IWh6YnA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
00:5b:8e:b8:4f:4e:ec:14:d1:0b:fd:84:df:aa:73:f7:b9:fe:
29:2a:bb:b0:a4:6d:48:d6:5e:5c:11:07:b3:d0:64:56:28:5c:
b8:b8:35:fb:27:af:e9:43:95:cc:ad:34:d2:e6:d8:88:f0:bc:
17:57:b2:78:1a:df:da:f3:47:f3:d8:c0:5e:4f:26:5e:8d:23:
94:a9:6b:de:74:65:4e:5e:4a:3e:a8:02:b2:c7:3e:77:4e:69:
ba:64:3e:76:71:08:85:5b:89:a2:28:14:3c:ad:12:b4:93:b8:
0e:a0:f5:c2:ca:fa:aa:2d:97:a4:0e:1d:3d:d8:38:3c:c1:45:
01:06:34:f7:e1:cb:e6:17:90:89:5c:24:bd:d9:1c:5c:5f:4f:
0b:8e:ca:c8:39:0b:9b:04:70:c0:c2:2d:55:2d:20:0c:a7:c9:
a3:b5:c7:02:96:e9:1e:da:ef:93:aa:19:50:04:0a:b6:87:bd:
b9:94:bb:d6:63:a5:25:d8:e4:1b:b5:73:ce:23:12:64:fd:e7:
e3:b1:2f:47:f0:27:24:0f:3b:cb:57:62:d7:cf:3b:dc:82:c9:
a4:e0:31:ea:94:bb:16:7d:92:33:e0:14:30:d9:9b:47:18:2c:
e9:3e:84:47:ba:37:4f:42:77:00:3b:e5:4a:73:a7:83:02:cd:
51:80:e2:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 21:36:39 2025 by rpki-client