Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4YjeUpEGwyq3bfcolZQkM5XIG7c.roa
File: 4YjeUpEGwyq3bfcolZQkM5XIG7c.roa (raw, json)
Hash identifier: bhC4UfJKlLC8yl6EANynpehV5PGcoYbJExmuVM3JcT4=
Subject key identifier: E1:88:DE:52:91:06:C3:2A:B7:6D:F7:28:95:94:24:33:95:C8:1B:B7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01864B54C04AE99EB85738F2F04DC617F886
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4YjeUpEGwyq3bfcolZQkM5XIG7c.roa
Signing time: Mon 13 Feb 2023 15:11:30 +0000
ROA not before: Mon 13 Feb 2023 15:11:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:4b:54:c0:4a:e9:9e:b8:57:38:f2:f0:4d:c6:17:f8:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 13 15:11:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e188de529106c32ab76df7289594243395c81bb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:6f:87:54:c3:60:ab:14:85:0f:ee:d1:67:57:
7e:f8:da:0c:81:3b:6a:64:9f:c8:c2:a5:3c:8e:31:
04:53:a0:85:e0:3f:23:8f:9c:96:2d:9a:e3:85:34:
69:d2:1e:db:4a:8d:01:00:a7:51:35:b2:2a:72:bb:
ce:64:38:5d:9f:ab:cc:08:45:27:4d:bf:1e:b5:83:
3f:99:8e:8a:5e:84:8e:db:7f:c6:0b:84:98:19:d4:
5e:02:fe:aa:77:39:4d:2c:2a:45:bc:a4:37:09:bb:
2d:18:09:a1:8c:bb:5f:ed:c7:2b:ea:36:4c:ff:d5:
8d:50:06:c1:f2:cb:76:e6:f7:7e:9c:6a:6f:9e:ca:
73:de:83:ad:34:52:f2:fa:fe:51:64:48:da:09:eb:
8a:e5:1e:7d:0a:72:b4:1a:ec:b6:fa:a9:5e:33:35:
bd:3c:70:b5:e6:59:5a:ca:a3:15:42:fc:a9:3f:c8:
07:ee:b2:ef:09:03:78:3d:46:a9:4a:c1:f7:13:6b:
6e:35:18:ee:9b:b9:c3:c4:bc:63:d5:43:4b:93:ef:
9a:de:7a:8b:4b:b6:be:66:70:d6:38:7a:0a:a2:39:
aa:d4:be:2b:e1:e0:8f:ed:5d:dc:ed:ec:db:3d:bc:
10:ee:23:d9:57:93:d1:74:b2:73:b0:b6:10:20:59:
ec:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:88:DE:52:91:06:C3:2A:B7:6D:F7:28:95:94:24:33:95:C8:1B:B7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4YjeUpEGwyq3bfcolZQkM5XIG7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b3:57:e5:a8:40:da:b3:a4:06:3c:3d:ae:8e:de:12:e6:0a:a3:
1f:41:63:82:fb:fe:0c:44:fd:a9:91:52:fe:00:cf:60:22:53:
da:1c:c9:ad:b0:99:8f:c9:48:87:8f:07:b9:d1:bb:dd:57:91:
4b:01:ae:e1:37:cc:fc:15:75:0e:70:fb:53:b7:4d:4c:85:36:
6d:db:ef:ce:9e:19:b7:b0:a1:1a:95:f8:95:30:12:a6:18:5c:
f8:3f:78:cf:12:fb:ee:3e:e9:4f:ff:61:32:3b:29:80:4b:d9:
a8:ca:6c:4b:f2:6d:99:44:e4:ac:2e:3a:36:45:e2:ab:49:fa:
a3:b2:d8:29:b9:95:b7:f9:ad:83:f5:4a:e7:56:d9:1a:76:91:
41:0f:b7:bf:a6:9d:61:8f:f9:b2:98:a9:d7:d8:34:ec:60:fb:
c9:61:38:08:6d:4e:f3:bb:43:9c:9e:99:f4:3d:9c:45:79:83:
64:06:3b:ae:30:ad:36:9c:9a:fa:a2:1c:50:22:c4:1f:d8:8c:
01:8e:d7:47:8b:82:af:04:ab:3e:ce:6b:21:3f:3b:9d:04:61:
e1:d2:af:4c:12:f0:7b:38:f0:c7:b0:42:23:92:cc:a8:d6:90:
fb:5e:5c:e1:72:be:04:ee:50:37:3a:58:ac:a6:39:3f:a2:f2:
3d:21:63:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 03:58:37 2025 by rpki-client