Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9XgkpBnCYxM4vkMkV4FDMUh8ZwU.roa
File: 9XgkpBnCYxM4vkMkV4FDMUh8ZwU.roa (raw, json)
Hash identifier: gcx6iSwQXcZHmu1YoSca1ESzUxOCIg/OgkPoGfBPi+U=
Subject key identifier: F5:78:24:A4:19:C2:63:13:38:BE:43:24:57:81:43:31:48:7C:67:05
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018526A4397400980EE98C6056CF57A9FDDF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9XgkpBnCYxM4vkMkV4FDMUh8ZwU.roa
Signing time: Sun 18 Dec 2022 19:09:34 +0000
ROA not before: Sun 18 Dec 2022 19:09:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:26:a4:39:74:00:98:0e:e9:8c:60:56:cf:57:a9:fd:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 18 19:09:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f57824a419c2631338be432457814331487c6705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:40:38:56:2e:7b:28:87:5f:11:31:d8:4f:1d:
67:d8:21:13:ec:ed:7a:01:b1:28:e3:b3:d0:53:79:
48:47:84:d7:ef:b1:01:fd:71:5c:b0:77:21:6c:dd:
70:cc:68:cf:40:a5:84:12:13:84:bb:58:ac:6b:c6:
62:21:20:83:8a:50:dd:9d:fe:2e:8a:93:d3:9e:e3:
30:0e:4a:47:ab:58:3c:d1:78:f4:42:a6:96:45:82:
7f:4f:b5:2d:17:57:97:1f:d6:e5:76:bb:47:00:c2:
29:01:df:27:66:8b:fe:85:ab:70:0a:82:d6:6a:e5:
3e:1e:cb:3a:89:24:82:a5:cd:89:6a:99:69:ec:52:
60:65:8d:b2:ae:b4:59:79:02:1a:9b:36:ac:6a:94:
1b:96:e6:39:89:e0:95:85:e6:41:a6:fe:d8:fc:0d:
2d:bf:d0:a9:f6:ef:6a:76:e3:e1:62:e5:6a:2c:4f:
11:9b:44:4f:54:fd:a0:32:d8:cb:32:07:85:4e:32:
b4:34:55:98:47:50:5d:f5:b1:3d:1b:90:1f:7e:80:
aa:95:2d:94:18:c5:85:e7:1b:de:5c:52:bd:91:a0:
ae:37:44:04:cd:e9:c2:61:a9:c0:29:de:42:02:d8:
38:55:66:72:62:52:c8:f2:12:f6:24:a7:21:84:5d:
1f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:78:24:A4:19:C2:63:13:38:BE:43:24:57:81:43:31:48:7C:67:05
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9XgkpBnCYxM4vkMkV4FDMUh8ZwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
19:88:3b:d5:58:69:6e:0e:52:5d:40:e5:1c:aa:54:ba:c1:a1:
2e:33:70:3c:8a:80:e3:90:37:7e:53:60:fc:3e:75:42:66:45:
81:03:37:5a:c8:f9:bc:f0:09:a4:87:ab:29:c8:13:70:30:21:
39:40:4c:7f:ae:fb:56:d0:05:93:80:3a:24:9c:47:df:7c:02:
e9:74:30:21:6a:eb:b7:c6:ce:99:3c:0d:52:ab:10:87:58:54:
4e:1a:49:3b:a3:97:70:39:3f:c7:34:92:ba:a5:a6:7e:38:fe:
d9:cd:7b:9c:e1:f3:58:27:e3:c3:00:a3:19:cf:4d:83:5e:32:
40:b3:5d:d3:d8:cf:23:e1:0e:6e:ec:e0:85:69:98:53:15:8f:
e5:53:01:26:c0:de:66:f4:01:c8:54:4a:27:1f:2e:ed:56:95:
9f:18:34:a3:81:a1:63:89:c0:1b:6d:52:d3:6d:98:c9:5a:b4:
f1:38:ef:b1:77:ad:84:45:44:4a:47:b2:ec:29:46:1a:10:b0:
cf:ba:ed:0f:a2:6c:a1:c7:08:4a:30:fe:6f:5b:0f:dc:1e:95:
6a:93:bf:10:b2:a4:64:f8:1f:86:55:4a:fc:b0:d9:31:4f:de:
2b:76:f8:f5:88:80:b2:b7:4d:1f:3f:69:83:05:d7:ff:72:52:
2b:4d:d0:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 10:58:12 2025 by rpki-client