Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1c_g-E437sr5KG3bkfI92tpfzhc.roa
File: 1c_g-E437sr5KG3bkfI92tpfzhc.roa (raw, json)
Hash identifier: 18Th4yE2cLAMbIZBzDsXOkJQXnPhjrSihwfvRsKSRHg=
Subject key identifier: D5:CF:E0:F8:4E:37:EE:CA:F9:28:6D:DB:91:F2:3D:DA:DA:5F:CE:17
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018559B529437A302D0154BDEFA3611753E6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1c_g-E437sr5KG3bkfI92tpfzhc.roa
Signing time: Wed 28 Dec 2022 17:08:42 +0000
ROA not before: Wed 28 Dec 2022 17:08:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:59:b5:29:43:7a:30:2d:01:54:bd:ef:a3:61:17:53:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 28 17:08:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d5cfe0f84e37eecaf9286ddb91f23ddada5fce17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:e4:1e:ed:49:3a:b4:81:bf:fa:1e:3a:32:d8:
1d:96:35:89:24:77:31:8e:ad:d7:28:64:dc:c3:26:
69:41:38:b3:49:51:cd:b3:89:8e:31:1c:59:53:bf:
71:b8:39:96:25:c9:e5:c9:47:40:71:94:e5:16:59:
16:30:d8:ff:6a:fc:a1:4b:37:6c:72:ac:96:9b:23:
ab:30:26:56:7f:2a:32:2e:72:0f:b8:83:43:c5:82:
f0:96:b3:d5:a5:d5:9d:a4:da:9c:d1:91:67:d9:62:
de:c7:7a:63:1f:3c:b2:cf:d8:b6:52:be:3e:1e:0c:
41:3a:60:42:24:77:7c:3f:1f:c9:94:30:97:13:43:
3f:41:f3:62:4e:ba:81:9a:b6:83:a7:ae:9a:44:ab:
ba:aa:ab:82:55:76:81:c7:bd:ab:f6:95:c7:be:bb:
41:a8:59:63:bf:f7:1e:ca:6d:79:eb:c3:8c:fb:9e:
9c:44:ea:be:1f:34:a1:f9:f6:5f:dd:74:d6:00:7a:
81:10:d0:b9:cc:0f:e4:36:27:b6:62:f5:08:b5:60:
60:35:fd:4f:99:3d:c9:6a:30:4a:fb:9e:74:ac:c6:
4b:2f:81:4b:6c:29:57:46:57:0e:b0:ce:65:9d:74:
7e:5a:70:50:cb:c1:87:f6:6d:67:28:04:11:d5:69:
dd:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:CF:E0:F8:4E:37:EE:CA:F9:28:6D:DB:91:F2:3D:DA:DA:5F:CE:17
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1c_g-E437sr5KG3bkfI92tpfzhc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
85:b9:6f:8e:7a:f7:90:c9:4b:b0:74:78:85:d4:b9:be:ca:fb:
8e:0f:57:8c:c0:3e:e3:82:ff:ca:5e:c8:65:03:1a:e2:31:90:
66:d8:af:0f:05:a4:8a:54:3e:51:c6:ef:f2:a3:e9:0a:52:ba:
27:b6:a4:a8:25:99:e5:1e:78:95:6e:21:15:64:d4:5c:6d:7f:
2d:fe:e3:23:b8:52:b1:73:a1:c1:52:93:91:ed:db:85:6e:03:
4d:07:75:c2:11:4a:a4:ee:8b:20:7c:a7:31:b7:e9:c8:da:4e:
2c:02:73:34:f2:c8:dc:0f:ec:5a:a0:8b:1e:a0:24:e6:98:84:
a9:ea:30:21:14:db:df:d8:bb:f8:e3:6c:28:70:9c:be:13:1e:
aa:d2:e1:44:2c:87:ff:2b:1a:0c:93:6f:9a:a4:a1:8c:21:0b:
17:5d:be:8e:4d:61:73:3e:d6:62:b9:e0:0c:4d:42:5c:0b:bd:
0f:3e:5d:b3:2b:e4:dc:df:cd:eb:0f:a6:58:30:6f:38:09:55:
df:e2:4c:99:55:0b:56:f8:ca:8a:98:72:73:37:bc:0a:e0:72:
2a:41:e9:03:93:40:ed:f2:40:c0:95:31:bc:f6:8f:23:9d:12:
46:77:c9:29:bc:81:be:e8:69:f1:ad:47:fe:4f:14:81:c9:4c:
e3:26:4d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:08:08 2025 by rpki-client