Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/50YjuGtugXhSmvcFL7nRdGQY6Qg.roa
File: 50YjuGtugXhSmvcFL7nRdGQY6Qg.roa (raw, json)
Hash identifier: Ykt6jNdTm8+9bhLc1Ti+ZNbF2toEFlOb2V9+EuMW2w8=
Subject key identifier: E7:46:23:B8:6B:6E:81:78:52:9A:F7:05:2F:B9:D1:74:64:18:E9:08
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01861A6719B4A73B0DB5118946BEA23D3BBC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/50YjuGtugXhSmvcFL7nRdGQY6Qg.roa
Signing time: Sat 04 Feb 2023 03:10:09 +0000
ROA not before: Sat 04 Feb 2023 03:10:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:1a:67:19:b4:a7:3b:0d:b5:11:89:46:be:a2:3d:3b:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 4 03:10:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e74623b86b6e8178529af7052fb9d1746418e908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:61:d8:aa:e4:7a:8e:22:ab:a9:6b:75:13:04:
1e:75:74:65:dd:c5:80:43:a9:85:22:eb:89:24:8c:
e8:6a:2d:83:3f:21:e1:74:ea:ab:1b:ea:0d:af:2e:
61:3b:e9:db:92:0d:af:e8:f5:8f:3e:2a:b3:17:78:
87:95:55:06:2a:8e:90:d5:d2:63:8d:10:13:bf:c7:
5a:eb:07:7c:d0:1b:33:08:90:78:5a:86:68:91:5a:
4c:a8:4a:09:78:9e:55:fc:44:a0:e7:c8:9c:fb:c4:
d9:93:58:bc:f8:de:cc:0f:74:1f:b2:68:48:0b:fa:
26:b5:a0:79:2e:b7:ab:28:8b:f3:e7:fa:de:ec:ec:
91:fe:05:46:a8:85:65:8f:ad:22:81:68:b2:5d:10:
ba:88:d5:37:9e:9e:f7:0c:ba:45:20:5d:60:80:e0:
de:7e:be:69:2c:7f:8a:f5:f7:28:8e:1c:64:d0:3d:
97:9f:17:77:08:db:13:fc:d3:25:0f:c0:93:62:7a:
15:31:8c:a4:0f:b8:d6:32:57:69:e3:7c:a0:72:2c:
54:ba:98:44:cc:0c:2d:2e:ad:ef:2e:4c:bd:85:a0:
ac:21:cb:22:3f:c2:d9:41:63:61:10:79:17:c9:1f:
e9:50:81:55:f4:de:d9:08:72:4f:0b:4f:92:ff:05:
d9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:46:23:B8:6B:6E:81:78:52:9A:F7:05:2F:B9:D1:74:64:18:E9:08
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/50YjuGtugXhSmvcFL7nRdGQY6Qg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5b:fc:fd:d7:cf:9e:ff:7e:85:71:c6:e2:2d:05:09:1b:35:12:
0c:c7:30:ae:b9:09:35:48:25:50:39:bc:9c:6b:e1:f3:7f:ed:
3a:3e:86:fe:09:03:e4:61:bf:db:cf:67:29:84:3e:d5:e2:b4:
de:5f:aa:4a:48:08:90:82:3a:6f:bc:5b:64:72:f9:6c:f1:58:
9a:c6:4a:f2:ed:90:ac:bc:b9:b8:f9:0a:de:38:3b:c3:44:11:
01:26:f8:3a:33:f0:60:fe:f7:6e:f7:42:b0:7c:f9:88:22:17:
dc:2c:ce:d3:69:46:b1:c2:6c:f5:2f:6b:70:02:88:de:fd:5b:
70:16:6f:6e:34:f0:2b:45:29:a7:77:7e:dc:53:e6:2a:18:3f:
93:00:f2:0c:39:25:6e:30:a4:4b:6c:f4:61:a3:37:12:98:65:
4e:fc:f0:91:44:84:25:35:d7:c9:c2:2f:0d:f1:1d:44:eb:0a:
c7:88:b0:0b:85:d1:cb:91:02:25:0b:8d:83:4c:36:f1:80:e0:
43:f1:81:8b:a4:6e:fc:64:b3:5c:2f:68:95:0d:73:15:21:81:
00:eb:d2:c5:09:51:0a:7e:dc:54:fa:93:72:ec:b7:2c:de:9d:
9d:dd:2b:83:05:46:6b:65:9b:66:30:93:4f:ad:b7:6b:44:40:
e0:7a:a7:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:25 2025 by rpki-client