Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/54kF1qM7fzK6KsfJxAfRICRSPho.roa
File: 54kF1qM7fzK6KsfJxAfRICRSPho.roa (raw, json)
Hash identifier: D4SeUWpcQZkRfcNzAu/zi+vuh1VBVi0v9rTN2RcI5Cc=
Subject key identifier: E7:89:05:D6:A3:3B:7F:32:BA:2A:C7:C9:C4:07:D1:20:24:52:3E:1A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A330EC056F53C6A900D637708FB884BD0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/54kF1qM7fzK6KsfJxAfRICRSPho.roa
Signing time: Sat 26 Aug 2023 18:15:19 +0000
ROA not before: Sat 26 Aug 2023 18:15:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:33:0e:c0:56:f5:3c:6a:90:0d:63:77:08:fb:88:4b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 26 18:15:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e78905d6a33b7f32ba2ac7c9c407d12024523e1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4c:48:34:05:00:04:4b:4c:ba:86:a8:72:cd:
79:1e:e9:49:11:2a:bc:8e:bb:ab:80:3e:14:6a:ef:
79:1c:66:ef:2a:c1:e1:67:82:42:38:52:10:cb:92:
1a:82:63:1e:13:1f:27:16:4a:46:75:15:28:50:32:
c8:40:85:83:17:9b:d5:8b:ef:ef:07:85:2b:fb:79:
b4:49:33:a3:fe:b0:9d:b5:19:52:93:37:66:80:82:
84:2a:a7:a7:71:6f:86:de:01:d6:e2:12:04:b3:c4:
eb:cd:92:fe:48:54:a8:de:57:74:b3:8b:32:81:40:
9a:87:22:fd:96:6d:90:ab:c5:ab:7f:21:16:f8:86:
a0:5d:16:4b:b2:4d:e1:6b:3f:89:32:57:da:76:3a:
51:b5:7f:1c:2a:dd:06:94:19:de:1a:b8:a0:ce:74:
91:a1:d4:c6:44:4d:a9:ee:c0:ba:9b:7d:cf:13:75:
ff:9b:00:c1:74:fe:20:2c:70:b4:99:9c:4d:96:77:
59:c2:06:f5:56:fe:77:22:98:7a:bb:37:e9:77:ce:
c6:5e:ce:96:f3:aa:c1:6b:08:a6:2a:ba:9e:56:ec:
5f:e7:38:49:05:c6:b9:02:97:01:a8:62:98:fa:cf:
bb:dc:80:89:18:cc:bc:db:f9:9a:64:1e:50:c2:bb:
80:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:89:05:D6:A3:3B:7F:32:BA:2A:C7:C9:C4:07:D1:20:24:52:3E:1A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/54kF1qM7fzK6KsfJxAfRICRSPho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
73:3c:0f:59:68:d8:0e:97:3d:0d:4e:46:a6:b3:bf:36:cf:0d:
8a:0a:ac:b4:4a:e1:61:4a:3c:c9:5d:67:c5:89:64:37:f5:83:
b0:82:c7:37:7a:8f:94:8f:e8:7e:74:a1:b9:fa:be:96:2c:bd:
be:2d:23:fe:39:7c:41:75:b1:4c:ed:08:60:03:bc:f7:2e:7a:
12:a8:5a:c7:6b:b6:45:d7:ce:d3:34:16:e8:be:e0:e1:4a:a2:
df:76:98:0b:8c:0e:8f:b4:f4:79:8b:66:81:0c:6f:a1:4b:c8:
33:a9:a4:d2:c3:98:03:5a:30:99:95:b2:a8:43:30:12:2c:2d:
9c:26:7d:52:92:8c:47:58:42:83:01:c6:8d:8b:f6:4c:53:fb:
d7:6f:80:61:0c:fa:4a:e8:2c:e9:8e:cb:ef:a4:1f:0e:f4:36:
ce:3c:33:39:23:8a:f3:ee:f1:1f:e5:4d:55:5d:77:da:86:bf:
8b:28:74:4c:7c:42:81:a6:ab:ee:04:5c:11:a9:a9:03:35:72:
e5:e3:64:16:a6:aa:0b:6c:f0:24:1c:dc:64:32:30:de:45:54:
35:7d:5f:57:b2:05:a8:37:45:16:65:b9:0e:ad:93:a6:0d:fd:
38:c9:c9:7e:73:77:de:76:4e:d6:75:66:a5:aa:fe:0d:0c:4b:
bf:71:82:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 03:05:37 2025 by rpki-client