Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/54PgHqEnGZ0niwpmOioD4uVcW4w.roa
File: 54PgHqEnGZ0niwpmOioD4uVcW4w.roa (raw, json)
Hash identifier: tW/e5aTeysOPL0cY5UU3uvcs37VVDAO1fzYiHVJRfD0=
Subject key identifier: E7:83:E0:1E:A1:27:19:9D:27:8B:0A:66:3A:2A:03:E2:E5:5C:5B:8C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A2C69B44D95C8950C4E630921E30FACF3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/54PgHqEnGZ0niwpmOioD4uVcW4w.roa
Signing time: Fri 25 Aug 2023 11:17:19 +0000
ROA not before: Fri 25 Aug 2023 11:17:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:2c:69:b4:4d:95:c8:95:0c:4e:63:09:21:e3:0f:ac:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 25 11:17:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e783e01ea127199d278b0a663a2a03e2e55c5b8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:51:f9:65:40:16:a0:74:b5:d7:ca:c4:24:4e:
8e:b9:21:fa:75:cb:ee:c6:38:54:92:c0:c3:5e:ca:
23:76:d5:5b:06:e1:40:f0:32:14:01:82:2e:e1:20:
4a:dc:18:d7:3c:14:fa:8d:c1:20:4b:96:05:7c:72:
4a:09:fc:65:63:61:2a:23:d8:76:8b:1d:22:75:ef:
79:7e:9d:3b:7a:50:ba:65:0b:5a:4a:4f:fa:20:23:
ef:a3:0c:02:5b:60:d2:28:eb:13:d1:b7:da:f6:43:
59:5d:ae:6a:7b:4f:c1:f1:79:93:f2:16:d3:ba:26:
22:9d:56:e6:6d:8e:a7:ca:09:96:8d:57:1a:2b:d8:
8d:14:9a:c4:68:dd:91:b2:88:5f:8f:13:82:95:c5:
26:f4:01:92:18:bf:4d:6a:77:ec:4b:bc:ba:d7:ba:
c9:c5:f4:39:b4:f0:2d:13:e8:b4:e9:57:81:cd:5d:
b2:f3:4d:09:b0:40:ea:7f:f5:f5:95:81:00:f3:2e:
28:00:20:10:d2:43:bb:6e:e6:7a:c4:11:41:23:99:
77:17:96:5b:42:4a:90:7f:17:da:47:1f:8f:42:ee:
88:92:40:62:1b:28:30:f8:4b:0a:ea:d8:a0:3c:c3:
a0:b0:6b:62:8e:ed:2d:32:21:c8:c4:b8:37:7e:0d:
77:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:83:E0:1E:A1:27:19:9D:27:8B:0A:66:3A:2A:03:E2:E5:5C:5B:8C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/54PgHqEnGZ0niwpmOioD4uVcW4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
48:45:85:d0:3d:ee:b1:57:fe:e3:d4:b3:8d:90:05:b4:18:84:
fd:c6:0a:58:f5:6b:ac:a9:7e:32:93:91:97:50:ff:67:32:73:
4a:91:65:eb:a4:66:8d:27:58:db:fb:38:b0:2c:23:81:bb:23:
4e:cb:6d:ad:83:3c:68:4e:b5:8a:dd:77:6a:05:67:aa:50:2f:
7d:1a:b8:ff:00:40:04:2f:c5:dc:57:4e:00:8b:1f:c7:46:5a:
2b:f8:a3:54:79:b4:e3:20:5e:8a:b4:c2:aa:28:8f:59:89:a0:
98:16:39:4f:e2:61:ea:83:b7:5c:d4:4a:b1:fd:de:d9:66:62:
0b:4c:03:8f:37:74:81:64:4a:1c:fb:3b:c3:1f:ff:7d:6c:3c:
83:2d:eb:9c:4f:9e:79:35:c7:ad:f5:5b:98:ad:bd:b0:2b:61:
12:df:55:31:0f:5e:7a:eb:86:09:33:5a:5d:9b:d1:5c:66:2f:
52:3b:03:6f:f3:aa:50:67:3e:e1:23:ff:25:da:2f:60:47:46:
c2:92:9d:a2:a3:e4:63:b0:ca:bb:84:9e:11:13:a4:69:46:ef:
d9:05:87:cf:4e:56:30:b3:9a:72:2a:82:01:3d:fc:6e:fc:71:
25:b6:2c:ee:7d:c5:5c:66:8a:51:8a:f0:95:cf:b8:ff:d0:23:
81:76:72:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:43:05 2025 by rpki-client