Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/57PzLfqY9oQqNsoPRN27lvFU5z4.roa
File: 57PzLfqY9oQqNsoPRN27lvFU5z4.roa (raw, json)
Hash identifier: PqNLNmdAdrjV6aIfhrY3BOUbg0fHANzG4bNECOprYow=
Subject key identifier: E7:B3:F3:2D:FA:98:F6:84:2A:36:CA:0F:44:DD:BB:96:F1:54:E7:3E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A1BE7B5260746F9DB8EF1A3B4B54730CE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/57PzLfqY9oQqNsoPRN27lvFU5z4.roa
Signing time: Tue 22 Aug 2023 06:21:24 +0000
ROA not before: Tue 22 Aug 2023 06:21:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:178d:7ed9/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:1b:e7:b5:26:07:46:f9:db:8e:f1:a3:b4:b5:47:30:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 22 06:21:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e7b3f32dfa98f6842a36ca0f44ddbb96f154e73e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:73:7f:d8:b1:5a:b7:58:17:4d:9b:89:cf:eb:
c7:de:de:b9:fc:24:86:66:b0:44:c9:b2:1b:0a:c5:
84:ea:9b:f8:4a:93:62:bc:8d:86:9d:b9:d3:6b:3f:
f0:cb:72:3e:24:2f:0d:45:7e:2b:fb:a5:56:4d:6e:
f0:f5:a9:2f:a2:67:4f:65:88:b0:ac:5b:21:e5:e2:
e5:cb:79:9d:36:32:16:d1:c0:f0:0d:5d:e5:bb:b6:
b5:e3:3e:21:8e:b2:8f:42:67:d0:89:63:94:f5:72:
ed:0e:b6:32:6e:eb:12:06:ea:fb:95:b5:ef:7e:15:
3d:ed:40:d9:1b:f8:41:10:07:d4:2f:94:35:48:a4:
c4:ad:05:09:40:8b:63:5b:58:cd:e4:60:0f:87:ce:
7b:bb:af:d1:52:a4:b6:fb:84:df:18:0e:38:e9:b7:
ad:db:73:12:98:1d:35:1f:34:0a:41:23:2b:4a:e9:
54:37:b9:45:40:62:e9:92:a0:63:dd:be:97:c7:cc:
32:f4:07:a6:26:7a:db:38:94:70:05:90:2b:77:bd:
6a:02:04:ba:cb:89:8d:4f:ac:db:7c:d2:5e:9d:35:
8a:f4:ba:0f:6f:01:c2:f6:14:e4:e8:cf:60:73:08:
c7:d3:41:00:60:74:72:ed:2e:78:53:85:f8:6e:99:
a1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:B3:F3:2D:FA:98:F6:84:2A:36:CA:0F:44:DD:BB:96:F1:54:E7:3E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/57PzLfqY9oQqNsoPRN27lvFU5z4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
78:ab:89:45:b6:cb:e3:55:84:68:d1:da:a9:39:6d:5e:72:40:
63:19:f3:92:a0:67:61:1a:da:0e:b7:e0:17:23:49:a1:f7:c6:
c5:68:3b:7c:94:9e:82:33:33:57:eb:80:f3:37:05:b4:a5:29:
3b:02:87:cf:62:67:ec:f4:3a:2b:f1:b7:c3:e9:aa:27:d6:62:
e4:57:d5:0e:a2:c8:fc:fc:ad:ea:15:1b:ae:93:10:0f:83:0d:
f0:2a:dc:79:48:d6:48:56:8f:68:5c:91:aa:8e:8c:22:db:3b:
25:3d:11:26:e2:e0:94:89:86:70:b2:17:9b:9c:4d:a2:15:65:
5a:ca:66:f8:0a:6e:ed:47:9d:50:3d:17:34:46:6f:0e:fe:90:
03:ed:c6:e6:2b:d7:26:d8:f3:4c:0b:19:61:d1:47:1a:cb:0a:
b2:29:d5:77:fd:8e:e9:3f:eb:32:de:7a:46:7c:95:71:3b:5f:
a3:7f:72:f3:1f:60:1c:a1:0c:19:f2:d8:f8:2e:79:7a:b8:3f:
0d:78:2f:2b:0c:1d:0c:08:21:2b:da:79:fc:f8:4e:af:4c:af:
50:c0:3f:45:44:92:b4:7e:22:09:f7:03:e5:d9:8a:de:dc:bb:
ea:4d:11:0d:50:d7:5e:4c:39:da:73:ee:92:e8:e7:a3:9a:c2:
9b:a6:e3:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 19:49:22 2025 by rpki-client