Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/44xypw3peMjY5FDO55VSd_mKVy0.roa
File: 44xypw3peMjY5FDO55VSd_mKVy0.roa (raw, json)
Hash identifier: 7dqNh5RA19fMWsjCszFljfufaDJxLuES+5WCyineU2Q=
Subject key identifier: E3:8C:72:A7:0D:E9:78:C8:D8:E4:50:CE:E7:95:52:77:F9:8A:57:2D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185CCEF762EDC6AFE1A3B669A9FA660A368
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/44xypw3peMjY5FDO55VSd_mKVy0.roa
Signing time: Fri 20 Jan 2023 02:08:43 +0000
ROA not before: Fri 20 Jan 2023 02:08:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:cc:ef:76:2e:dc:6a:fe:1a:3b:66:9a:9f:a6:60:a3:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 20 02:08:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e38c72a70de978c8d8e450cee7955277f98a572d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:10:e3:fa:ee:be:d2:a9:05:5a:c3:9f:de:b1:
ca:42:92:03:62:73:87:94:2f:b3:86:34:4f:37:f7:
8b:1b:6f:00:91:2e:b4:9d:f5:bc:29:65:a2:53:99:
16:0d:b1:d6:31:83:6b:25:23:39:a5:f9:75:ab:27:
71:f6:5e:6f:50:bf:15:c9:4e:79:3c:0b:0d:44:a1:
8d:80:3b:61:d3:e1:cf:96:bf:6b:69:23:b2:8e:39:
61:97:70:f7:45:e3:f1:af:ec:41:fb:b7:d4:93:74:
f1:d2:b4:18:c4:49:d8:c3:99:dc:61:e6:97:58:3c:
22:d8:52:88:49:8e:51:cb:9c:56:fb:f9:db:ea:a6:
e1:99:3d:72:32:db:40:91:85:52:98:b1:eb:07:ef:
1d:38:45:2f:97:7f:1e:4d:c9:17:37:25:10:55:5c:
1d:ff:81:c2:8c:09:7c:a3:3c:9e:a4:90:5a:fd:90:
dc:77:04:66:c1:ef:3f:72:44:6e:e8:ed:9b:c6:26:
a1:12:15:3c:18:cc:5d:72:fd:c6:2c:ea:3c:6a:6c:
02:35:9a:2b:04:3d:02:33:34:19:4e:a5:a9:b1:2d:
64:eb:8f:c9:eb:b5:c8:48:24:42:92:ca:c7:c2:70:
b4:ad:45:5d:29:d4:95:39:30:64:cc:df:45:3e:1e:
98:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:8C:72:A7:0D:E9:78:C8:D8:E4:50:CE:E7:95:52:77:F9:8A:57:2D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/44xypw3peMjY5FDO55VSd_mKVy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
07:93:0c:e5:f2:7b:db:4b:e1:d4:32:ba:f8:a2:88:97:3c:8d:
f6:e8:c6:64:0d:f1:90:e1:7d:c7:d2:7d:da:25:cb:ff:09:96:
96:39:7f:4e:b0:fa:d4:fd:79:d8:e9:77:ec:0e:57:d4:f3:13:
52:9b:03:2c:b3:0c:e4:f4:56:77:0b:31:c3:98:24:30:60:b3:
9a:2b:a1:85:02:96:93:a3:f8:d3:df:ca:c3:81:e5:7d:a2:39:
6a:8d:3c:2f:32:44:ec:4f:bb:3d:f5:1d:04:93:25:87:63:59:
1d:c5:b0:19:ff:67:51:ae:9f:29:1a:85:77:2b:67:0a:8a:6a:
a1:a2:02:eb:b8:85:1c:1e:da:c8:8e:01:ec:45:29:7f:c4:d1:
51:01:ea:4f:26:fd:3a:e8:0b:41:90:23:5a:5f:8f:89:4f:4b:
59:b8:ee:91:b7:94:dd:b4:94:e3:c0:03:6b:8e:23:2d:18:6e:
08:36:a1:a0:69:9b:55:ae:42:1b:fe:ff:8b:34:61:a2:12:8b:
34:7b:d6:59:e4:3c:cf:2a:03:f8:2b:fe:4b:fa:e1:b5:4a:b4:
f5:65:1d:75:b7:9d:cc:77:a4:27:9a:0a:ed:1b:42:bf:6b:4e:
7c:b0:39:94:8a:44:67:c4:d4:33:7e:7f:6d:87:6e:f5:93:dc:
cc:43:81:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:27:28 2025 by rpki-client