Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/91EHVQHYoL57zwensPMVq02VUgI.roa
File: 91EHVQHYoL57zwensPMVq02VUgI.roa (raw, json)
Hash identifier: 1bxd4skhPBpZLWjfGxPx9obW/COoBEVaJl0okR3CRqw=
Subject key identifier: F7:51:07:55:01:D8:A0:BE:7B:CF:07:A7:B0:F3:15:AB:4D:95:52:02
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01857565274F3F6E0A8A9D5461F52ADCBAF9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/91EHVQHYoL57zwensPMVq02VUgI.roa
Signing time: Tue 03 Jan 2023 02:10:41 +0000
ROA not before: Tue 03 Jan 2023 02:10:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:75:65:27:4f:3f:6e:0a:8a:9d:54:61:f5:2a:dc:ba:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 3 02:10:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f751075501d8a0be7bcf07a7b0f315ab4d955202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:05:0f:54:6e:72:0f:51:93:98:75:91:fb:73:
b1:f7:b7:94:c4:01:53:7d:c1:e5:e0:57:86:b3:86:
79:35:94:54:47:29:ca:63:78:4c:66:02:d4:10:82:
e3:85:41:d8:46:6f:fa:99:02:83:c0:c5:29:58:6a:
14:2b:60:ef:7b:ad:79:3a:f4:61:6d:43:72:02:b8:
9a:ed:a1:98:62:ff:8c:f3:c6:3b:7c:c6:75:c2:ef:
12:30:87:88:9c:a8:a7:b9:17:1d:53:13:48:2b:a1:
56:28:51:d7:c6:17:c1:74:3c:14:d0:24:e1:24:ec:
33:9d:f8:75:2f:50:d2:e1:2e:e1:41:9d:5a:d4:95:
d7:13:1f:2a:f2:01:6e:d9:23:1a:60:20:48:91:38:
a8:9e:4d:46:ec:67:96:8a:37:82:80:de:d9:0e:f5:
4a:27:fc:b5:53:35:00:b9:da:46:f3:42:6b:1b:2e:
59:5c:e8:99:77:b5:b7:c2:30:fd:2e:1d:b6:6a:26:
fe:ca:30:dd:86:57:fd:ab:ad:e3:2e:da:97:2b:11:
f9:b1:9d:3b:7e:ec:b3:08:9b:81:7a:ac:55:ff:30:
b4:3f:61:a2:0c:d0:53:93:78:ca:87:30:db:6b:4a:
38:3b:aa:86:07:e2:78:0d:2b:a0:e9:60:89:84:7c:
40:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:51:07:55:01:D8:A0:BE:7B:CF:07:A7:B0:F3:15:AB:4D:95:52:02
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/91EHVQHYoL57zwensPMVq02VUgI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
82:85:38:8b:48:d0:6a:ec:2d:81:23:69:a9:dc:04:cc:17:95:
67:04:be:27:b1:fc:c2:b5:57:67:b1:9f:b1:6a:4f:92:ae:8d:
d4:64:f1:76:0d:ca:57:37:e0:1d:25:e3:45:52:6e:ed:4c:19:
e4:bc:72:d8:74:53:68:fb:51:85:17:66:3f:a6:88:e6:11:6c:
91:e5:5e:5e:07:8e:a9:a7:00:22:68:7a:d4:b5:ae:a1:b1:68:
c1:0b:c4:a7:2c:a7:bd:82:c4:d7:33:4b:b0:30:88:fd:94:9a:
b1:27:f0:f7:0b:ba:4c:0c:49:0e:aa:a8:96:e2:d2:1c:7a:c6:
41:ce:a0:6d:e9:d0:87:ad:a6:5d:2c:06:70:67:97:79:21:e5:
ea:58:d1:f5:76:fa:01:80:e9:e4:49:7e:eb:f6:a2:0a:57:43:
8d:9b:0e:29:82:3a:14:19:3c:d7:5c:48:5a:23:51:ce:3f:f6:
78:30:87:68:6b:4e:c1:38:80:fe:b2:99:9f:a0:55:93:42:98:
a9:ad:20:5b:e9:3d:d4:6d:5a:fc:c5:c9:e4:01:e8:f6:ad:78:
55:88:2b:3a:c1:a4:f2:96:1b:3a:51:1c:b6:7b:1b:05:d8:1a:
f1:0c:2b:79:43:34:74:12:50:4c:8e:05:d0:ab:70:ca:5c:14:
9b:70:6f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 08:23:51 2025 by rpki-client