Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4XTKeQ-LJOTvguEnMQMIsapX3L4.roa
File: 4XTKeQ-LJOTvguEnMQMIsapX3L4.roa (raw, json)
Hash identifier: Ewf2F0cslfAWs0ngyAefbLDt7Ci9GirKn7KaVV6gWp8=
Subject key identifier: E1:74:CA:79:0F:8B:24:E4:EF:82:E1:27:31:03:08:B1:AA:57:DC:BE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018642F7E6F322C34576B830BB29CFE3D5EB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4XTKeQ-LJOTvguEnMQMIsapX3L4.roa
Signing time: Sun 12 Feb 2023 00:13:08 +0000
ROA not before: Sun 12 Feb 2023 00:13:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:42:f7:e6:f3:22:c3:45:76:b8:30:bb:29:cf:e3:d5:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 12 00:13:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e174ca790f8b24e4ef82e127310308b1aa57dcbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0d:23:38:42:fd:e1:23:94:09:d0:df:25:36:
4c:5b:4f:93:a1:d0:30:e1:ba:39:71:cb:21:8d:e4:
67:0e:4d:e3:20:d2:a4:f8:3a:4b:3d:cf:8a:42:f4:
11:31:ca:11:15:c8:38:9c:b5:bd:99:a6:90:26:97:
ff:d5:e7:14:9e:02:4b:6a:f9:a2:19:0d:87:4d:27:
30:a2:fd:d4:fa:5b:79:fd:c5:bc:f2:18:94:48:c9:
c7:b3:c1:89:f4:ef:a8:a9:5e:cb:f1:70:a4:3f:f1:
8f:07:d9:2b:61:d5:72:f1:17:3f:03:ba:ca:18:9c:
51:06:7b:2a:d6:ab:b6:ae:6c:ee:cb:2d:17:fc:52:
0d:90:9f:9c:34:af:3c:a7:05:03:31:7e:8e:af:45:
60:de:a9:79:b3:12:b5:a8:18:41:35:1e:0c:39:e2:
01:a7:50:e8:6b:59:15:85:03:91:87:8a:fc:79:5f:
b5:7d:c1:ec:52:f4:8a:0d:a0:f3:d8:c9:c2:81:11:
f7:66:f4:d1:1d:e9:bb:8f:0d:ce:cb:18:c1:66:b5:
cb:e7:42:3d:88:7c:46:ac:a1:26:46:23:25:a8:27:
96:96:eb:e4:ea:0a:df:a7:5f:aa:7f:5c:a7:30:57:
b9:06:05:ed:c2:53:89:a5:a8:0c:05:c9:9f:08:bf:
51:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:74:CA:79:0F:8B:24:E4:EF:82:E1:27:31:03:08:B1:AA:57:DC:BE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4XTKeQ-LJOTvguEnMQMIsapX3L4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
72:ed:ad:b0:95:5e:61:b2:78:71:89:2d:39:eb:f2:c6:f7:a2:
2d:55:d2:51:5b:b7:e4:f6:3a:f3:0f:74:05:df:5e:70:4e:fc:
73:7f:07:61:7d:2e:a8:97:a7:18:e2:f2:d4:fd:ec:8d:00:87:
72:29:af:94:30:10:00:7f:c0:8e:e4:15:28:54:c8:1d:34:e8:
9b:34:bd:1a:c8:6d:b8:40:f3:ed:4a:ae:5a:be:e9:4d:7d:10:
0a:f7:48:0a:5e:08:0e:52:5b:0f:de:a7:32:09:5f:1b:79:7b:
69:c4:6e:95:54:85:da:b5:22:e2:b2:73:ec:14:b0:41:7b:e5:
62:dc:9a:33:19:9c:84:32:5f:92:8b:f3:3e:f3:4a:6f:7d:49:
7a:33:fa:bb:61:12:d7:ef:27:ac:b1:a7:21:a1:32:e3:e5:fe:
a5:11:c1:1c:b1:81:40:f8:84:ef:42:bb:d2:48:3a:5b:d9:53:
bb:8d:66:a8:77:9e:c1:90:ce:17:af:dd:9c:e9:e1:8a:31:ed:
6c:66:19:d6:8f:92:8c:c1:45:c2:cf:48:60:24:b6:8b:76:49:
ab:7a:84:3e:44:59:7b:27:c9:06:c1:47:49:fd:73:8a:6f:6b:
f0:31:ab:1c:05:b8:24:3e:5f:23:dd:46:1d:d9:22:a2:06:4b:
03:af:7f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:51:31 2025 by rpki-client