Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/33AF3LlYq5s3VEHMiUhOjRQRONk.roa
File: 33AF3LlYq5s3VEHMiUhOjRQRONk.roa (raw, json)
Hash identifier: hk6+SYY9kZgpqh0HiB9Iffo44VPRC8BsjFxvddbFJg8=
Subject key identifier: DF:70:05:DC:B9:58:AB:9B:37:54:41:CC:89:48:4E:8D:14:11:38:D9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185D13AEB1F8C1E9B363A27028E677722BC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/33AF3LlYq5s3VEHMiUhOjRQRONk.roa
Signing time: Fri 20 Jan 2023 22:09:37 +0000
ROA not before: Fri 20 Jan 2023 22:09:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:d1:3a:eb:1f:8c:1e:9b:36:3a:27:02:8e:67:77:22:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 20 22:09:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=df7005dcb958ab9b375441cc89484e8d141138d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:0e:56:c9:11:72:e8:b2:38:19:c9:6b:07:ad:
76:cf:9f:fb:46:71:75:72:b5:e7:da:04:bf:be:25:
a5:21:04:c7:a9:11:89:7b:21:07:77:be:6a:af:d9:
03:4d:ae:6c:af:49:3a:b9:d0:07:78:1c:7d:95:a8:
e6:d8:17:3b:2e:39:f7:4c:d9:67:fc:c8:9d:3c:c1:
09:54:e6:95:7c:ad:f7:bd:77:3f:10:3e:15:bd:32:
5e:04:19:6d:cc:2e:6c:1c:9b:53:73:6e:1f:0f:94:
56:e4:4e:9b:b6:a5:2a:52:30:d8:d3:d7:5c:38:ca:
c9:3d:48:ae:5a:ef:4f:84:13:99:ee:7f:0c:c9:e3:
d9:2a:a1:d9:fa:c5:e8:f8:d6:bb:23:41:2f:5a:ef:
13:9a:6c:1c:0b:5d:9b:ce:50:9c:82:d0:20:ae:b5:
38:e9:27:7b:a5:7f:01:21:37:00:f5:15:3d:d1:cc:
1a:bd:f8:24:69:22:c5:ac:49:e4:c9:66:22:1e:9f:
a3:6f:a3:cd:91:29:db:22:e3:bd:e1:fe:87:60:62:
ca:ab:93:18:83:62:52:bb:30:5f:2f:00:fc:ed:ae:
41:b2:fb:7b:34:d6:77:16:66:f9:f2:3c:94:c2:92:
ca:bf:1a:28:05:dd:dc:ee:69:51:6d:b6:01:27:12:
40:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:70:05:DC:B9:58:AB:9B:37:54:41:CC:89:48:4E:8D:14:11:38:D9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/33AF3LlYq5s3VEHMiUhOjRQRONk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
00:29:44:4f:07:1a:ae:4c:c5:f9:08:fc:5d:e4:1b:e8:2e:11:
cb:39:aa:49:31:2f:91:96:82:1d:21:f6:a1:b0:f7:d8:ef:d9:
00:b5:23:72:16:cc:a2:ec:f2:34:0a:e2:63:84:76:53:a3:bc:
f8:aa:1f:9a:eb:23:bb:25:9f:99:bd:fd:80:b4:f0:6f:72:3e:
46:5f:72:88:f9:d5:32:96:e6:a8:20:bd:df:b1:ed:b2:65:df:
8a:02:5a:f5:90:f2:de:a2:14:77:2c:4b:54:99:91:69:01:db:
7f:b9:42:2e:3b:2c:a1:ce:d1:7c:74:5f:9f:56:36:f6:ae:f1:
62:c9:5d:b4:33:11:59:08:d8:2f:3e:a8:c0:ca:80:74:47:de:
d9:c9:c7:b1:3b:8f:5d:8d:a3:3b:6f:f1:b9:6b:dd:3b:44:8c:
b4:be:05:6f:0d:80:ca:e3:1d:5b:77:cc:bc:29:e0:45:06:c5:
04:c9:f1:0c:11:13:11:6a:86:bf:82:9d:80:6b:e0:cc:9d:22:
1e:16:8a:cf:d2:48:c4:8a:e6:19:05:ba:1b:f1:f8:22:1f:4a:
f5:2b:34:a7:9e:4d:50:9d:60:2c:ee:60:7b:b5:41:e5:61:23:
0e:25:ec:36:80:f2:04:c6:36:14:fd:c8:8b:de:a3:cb:81:89:
19:8b:69:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:47:01 2025 by rpki-client