Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4C9CE9yu1J5VzX7eRZUry0Fwt3Y.roa
File: 4C9CE9yu1J5VzX7eRZUry0Fwt3Y.roa (raw, json)
Hash identifier: gdd+bcf8jshprMgMDr2HgpOo2EF0Q4ZR2gsw5TnE5oA=
Subject key identifier: E0:2F:42:13:DC:AE:D4:9E:55:CD:7E:DE:45:95:2B:CB:41:70:B7:76
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018599A97AC135D587D7D284BC70EBA524A0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4C9CE9yu1J5VzX7eRZUry0Fwt3Y.roa
Signing time: Tue 10 Jan 2023 03:11:39 +0000
ROA not before: Tue 10 Jan 2023 03:11:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:99:a9:7a:c1:35:d5:87:d7:d2:84:bc:70:eb:a5:24:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 10 03:11:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e02f4213dcaed49e55cd7ede45952bcb4170b776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:52:e1:ab:96:6c:92:a4:e0:2f:4c:da:b5:43:
e0:84:43:d4:be:de:2e:2a:83:4c:d6:74:fb:d5:af:
bd:6b:56:99:4e:57:76:78:9b:d7:d3:0a:6d:7d:32:
ae:5d:2a:c6:d4:ec:0b:34:99:e6:cb:2f:e8:55:16:
f2:86:35:3c:a8:7c:c6:8e:6f:23:c4:02:9a:7e:0e:
b0:97:55:2c:81:c5:51:d3:87:eb:7a:50:c7:67:df:
41:91:42:37:da:25:d1:a9:1f:c3:5e:df:c2:a9:06:
1e:15:05:a1:26:ca:96:a7:ac:08:1d:b1:f6:73:35:
2e:51:97:85:58:30:5e:8e:0f:52:a1:fd:e6:13:07:
86:4c:e2:62:40:e9:b7:be:0b:e3:bc:3b:45:6b:05:
04:f9:58:7a:0d:6e:a7:f4:44:4d:51:c2:d3:78:25:
04:41:04:63:4e:a2:7a:ba:bc:65:44:6d:70:1b:f8:
4f:57:34:dd:be:a5:0a:e5:e2:ad:4f:51:82:db:c6:
18:76:b6:c9:ee:8f:f4:1f:e8:d7:a5:a3:9c:7b:13:
70:21:f0:49:66:d1:f6:1d:aa:aa:12:9b:4e:86:da:
95:5a:3e:69:64:a3:86:56:c0:88:e7:c0:1c:de:fd:
b5:ff:29:7e:66:ec:00:46:16:29:fa:a5:4a:81:0f:
a4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:2F:42:13:DC:AE:D4:9E:55:CD:7E:DE:45:95:2B:CB:41:70:B7:76
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4C9CE9yu1J5VzX7eRZUry0Fwt3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0d:7c:2f:ef:92:c8:64:fe:bb:22:2c:b9:6d:66:2c:de:d6:1c:
60:90:54:73:f5:d2:8a:c5:87:29:f9:1e:df:b4:a3:c9:4a:f4:
32:5b:6d:02:25:48:cb:94:33:c7:22:ba:82:46:19:61:9d:c1:
c1:60:64:0b:85:e0:7f:2a:f3:8d:ab:49:79:6b:c6:be:75:3f:
55:08:aa:c7:c9:40:05:0c:a8:79:73:98:19:44:8f:02:ea:7e:
5f:1c:7c:e0:25:41:36:aa:88:cc:6d:41:d4:2e:e8:f0:7f:c5:
ea:a4:ce:af:9e:9e:db:df:3a:3a:17:b3:ac:a0:e6:e1:e9:c8:
23:ad:ba:ae:cd:bc:b4:76:b6:d7:9a:ae:b0:b3:41:31:61:30:
6c:c2:bb:df:01:1c:cc:8d:b9:4d:be:95:70:8e:4c:99:6e:fc:
c5:c2:76:38:b9:5a:7c:d5:3c:26:61:ca:40:68:18:b8:70:e4:
4a:95:ae:b7:92:ee:e3:7a:b0:30:54:29:e5:95:eb:01:30:bd:
12:45:83:ad:bb:07:00:0b:0e:65:7e:25:70:fc:1c:98:71:f8:
96:eb:62:23:94:bf:5a:5f:ec:ee:ae:e7:ab:d9:11:ca:af:da:
5b:2d:a9:8f:0c:83:3f:51:b7:91:53:40:6b:a1:29:4b:1c:01:
11:04:87:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 23:40:03 2025 by rpki-client