Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2DyeVJAeBFPCwWeKWdFfjOTOGik.roa
File: 2DyeVJAeBFPCwWeKWdFfjOTOGik.roa (raw, json)
Hash identifier: hwJH0cTsSp+pC7BEXusDLb7HfIEPqokIQ8K8GRw8xj0=
Subject key identifier: D8:3C:9E:54:90:1E:04:53:C2:C1:67:8A:59:D1:5F:8C:E4:CE:1A:29
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A2C050B2CEDF89BE9DA8A52BBA71E629C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2DyeVJAeBFPCwWeKWdFfjOTOGik.roa
Signing time: Fri 25 Aug 2023 09:27:22 +0000
ROA not before: Fri 25 Aug 2023 09:27:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:2c:05:0b:2c:ed:f8:9b:e9:da:8a:52:bb:a7:1e:62:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 25 09:27:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d83c9e54901e0453c2c1678a59d15f8ce4ce1a29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:bd:17:04:3e:7d:10:8e:2a:0a:c2:a7:d3:ac:
86:52:37:d2:c7:10:ab:ac:2d:35:17:02:7e:01:5c:
92:e7:ec:a0:df:1d:d9:e5:9c:80:1e:ef:53:fb:c1:
17:25:1b:75:55:65:41:49:a3:df:26:a7:b4:17:df:
46:5a:4f:dc:2d:57:3f:b2:85:36:9b:22:af:6c:45:
a8:66:5b:3f:1e:1c:93:80:ae:ad:88:7a:8e:e2:d2:
3a:8c:55:9b:10:e2:1a:cd:86:12:fe:7e:f4:25:93:
de:48:a0:9b:24:08:f9:4a:37:cd:dd:d0:be:18:b8:
f0:20:97:2c:48:94:86:dd:cc:89:27:8d:23:b5:de:
27:a3:7b:d3:83:50:af:37:4a:4a:62:0d:b3:ea:ec:
88:b1:cf:6a:47:d0:18:14:b3:a8:2b:a2:a4:6a:8e:
92:cf:09:18:b9:a2:e6:75:28:d5:0f:96:bf:e1:e8:
f6:89:f6:cf:77:92:ad:21:d8:0d:ff:54:34:54:16:
d0:57:5d:f6:0f:67:2a:7d:10:a4:e3:21:5d:1a:76:
9b:f0:ad:e0:b0:f3:40:9c:47:1a:e4:aa:d6:1a:33:
17:b8:1d:88:33:52:e7:52:dc:a0:e8:4c:2a:7b:d4:
f7:18:37:0b:a4:71:d1:ff:08:25:f2:86:e7:63:32:
13:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:3C:9E:54:90:1E:04:53:C2:C1:67:8A:59:D1:5F:8C:E4:CE:1A:29
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2DyeVJAeBFPCwWeKWdFfjOTOGik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
06:9f:9c:04:f5:0b:7a:52:63:e7:d3:e1:88:e9:33:b2:85:3e:
04:1f:ad:20:3e:bf:45:db:07:2b:e9:7c:32:e4:76:16:97:7f:
18:14:13:ee:be:8f:68:7b:39:ed:fa:dc:d7:66:52:83:4a:68:
28:44:1b:a1:9d:06:43:b3:34:b5:eb:b9:a1:70:24:d7:5a:0d:
15:a1:a9:e9:c7:fc:3d:18:a6:75:55:fc:a4:ff:94:2d:b5:d2:
a2:7f:e2:f2:bc:9e:e6:bf:ec:e6:5b:93:f4:7e:d1:00:77:af:
c2:0c:46:62:f8:fe:b5:7a:7f:00:dc:56:94:b5:0b:75:7b:38:
93:27:31:00:4c:f2:d5:66:55:a9:7e:6c:80:f0:d7:a6:ec:bc:
c5:27:90:c6:2d:f4:0f:53:dc:39:7b:f9:d6:0a:5f:69:29:85:
6a:7d:0a:fa:2e:13:14:52:48:99:53:55:75:ee:72:97:69:e6:
01:30:23:10:a6:ff:24:80:c9:3e:49:04:3b:25:12:4c:d5:cd:
8a:d1:fc:ec:6b:9b:44:32:8d:94:60:49:7b:3f:cc:75:df:16:
be:cc:aa:1a:98:26:ac:f7:e2:af:f2:5b:c8:df:0c:c4:ec:d8:
4f:b5:74:6e:49:88:47:0f:64:74:0a:cc:36:5d:8d:a0:68:24:
1e:43:74:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:35:58 2025 by rpki-client