Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/69N-U-v02XZzSPMP9Pi2xxp2rFs.roa
File: 69N-U-v02XZzSPMP9Pi2xxp2rFs.roa (raw, json)
Hash identifier: abbnQdG6oH46E/PERzdEneFUufvPZ1930+iZz2Wpr/k=
Subject key identifier: EB:D3:7E:53:EB:F4:D9:76:73:48:F3:0F:F4:F8:B6:C7:1A:76:AC:5B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01848E86E57C453E06D4ABDA4EDC4B375F72
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/69N-U-v02XZzSPMP9Pi2xxp2rFs.roa
Signing time: Sat 19 Nov 2022 06:15:16 +0000
ROA not before: Sat 19 Nov 2022 06:15:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:8e:86:e5:7c:45:3e:06:d4:ab:da:4e:dc:4b:37:5f:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 19 06:15:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ebd37e53ebf4d9767348f30ff4f8b6c71a76ac5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ad:f0:3e:2c:36:b9:76:e5:be:07:1a:1e:6d:
78:35:c2:25:65:93:6c:6b:02:9f:30:4b:33:7b:db:
63:b9:60:ab:ff:df:17:3f:fc:dc:0d:9d:92:f0:04:
69:7b:62:fa:81:cf:9d:dc:20:19:1f:34:ec:35:d3:
9e:3b:59:e0:86:4b:cf:bc:ec:e1:b9:9f:52:28:41:
1d:af:a2:0f:9c:a2:50:d6:db:b0:98:5f:66:b3:93:
13:f8:cd:cb:5c:a9:75:2d:0b:70:3d:fb:70:20:e6:
46:68:8c:de:e7:82:c6:62:f1:89:10:2d:e9:e8:76:
ba:72:0f:a0:57:01:00:89:63:37:28:2d:24:cf:a6:
aa:97:f9:ec:e5:0a:61:d5:69:9a:71:56:e1:15:42:
55:3a:89:5c:34:50:a2:ac:25:c4:36:43:3e:87:0f:
d5:de:e9:6d:25:ac:2e:84:4a:dd:ed:0f:e3:28:c3:
63:7d:15:cc:b1:52:05:69:a6:77:59:a9:79:5c:02:
26:03:d5:84:6f:31:a6:8f:9e:5c:0f:7b:59:66:29:
77:e7:25:9d:a1:a8:d0:52:32:86:24:9d:da:a9:e6:
58:48:78:0e:c1:9f:5b:0f:e2:1e:93:dd:6e:fb:f0:
a1:5a:c7:41:01:0d:85:d1:ef:74:75:6d:53:b2:b6:
8a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:D3:7E:53:EB:F4:D9:76:73:48:F3:0F:F4:F8:B6:C7:1A:76:AC:5B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/69N-U-v02XZzSPMP9Pi2xxp2rFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b1:3b:fc:a2:fc:5b:81:fe:67:c6:5b:42:35:5b:b6:03:d5:94:
19:f1:b3:8d:6e:89:b7:5a:be:9d:67:dc:94:d4:c2:db:2d:cd:
c7:7c:0a:54:18:d3:1c:70:16:55:56:4d:b1:69:8b:20:ec:79:
d9:52:dc:92:65:71:88:85:73:22:9a:64:98:bb:bc:f3:4c:23:
2a:5f:50:24:b0:27:57:f9:57:b1:26:d8:c5:11:fe:90:49:e8:
46:34:76:58:e2:51:87:44:0f:a3:e6:27:1b:64:3d:74:15:9b:
46:65:f2:48:6b:b7:5e:1e:9f:41:6f:8c:40:07:0b:55:d3:d8:
23:3b:95:0d:c9:df:2e:83:8d:a4:f0:98:10:7e:cd:a5:c7:56:
26:f7:45:a8:0b:31:c9:48:8c:c2:05:84:60:e2:18:97:a6:7d:
03:06:fd:48:04:4c:e4:75:61:ee:42:c3:cb:69:b1:bc:95:9a:
23:16:a7:bd:9d:b3:5b:64:cb:35:ff:05:0c:20:e9:65:2f:1b:
85:91:cf:9f:c2:2d:0b:96:f9:50:d5:11:3c:a3:4e:1a:d7:4c:
15:05:5b:43:5c:80:f0:ab:d0:76:95:8b:cd:7e:0f:f7:a0:b9:
a6:82:b4:e8:b5:cc:67:03:22:5c:10:30:ba:c4:b8:73:7e:e5:
bc:c1:a3:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:14:26 2025 by rpki-client