Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ad47oXmaA46PovwND0TZ-kTcbfg.roa
File: Ad47oXmaA46PovwND0TZ-kTcbfg.roa (raw, json)
Hash identifier: MOpnuDy+JJ+hX4PVN4iKxFEcb7CgvGUbZxcTLCApryU=
Subject key identifier: 01:DE:3B:A1:79:9A:03:8E:8F:A2:FC:0D:0F:44:D9:FA:44:DC:6D:F8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01864DB1E9D0C31AB424F83B8362B5AC92AE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ad47oXmaA46PovwND0TZ-kTcbfg.roa
Signing time: Tue 14 Feb 2023 02:12:30 +0000
ROA not before: Tue 14 Feb 2023 02:12:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:4d:b1:e9:d0:c3:1a:b4:24:f8:3b:83:62:b5:ac:92:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 14 02:12:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=01de3ba1799a038e8fa2fc0d0f44d9fa44dc6df8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:33:72:2b:b7:bb:86:93:54:87:84:ff:fd:59:
ab:70:63:13:54:4a:b7:23:eb:11:a8:57:22:82:bc:
32:29:0d:0f:b9:97:62:9c:ce:e4:4c:e8:82:20:1a:
d9:54:be:03:9b:84:e2:1f:37:cd:0f:75:50:a9:e2:
d5:f3:b9:c1:fb:bc:d0:d1:02:c0:46:22:b0:89:21:
20:60:ec:38:c7:d6:72:a3:de:2f:cc:bc:12:b3:47:
15:b0:ee:75:69:df:3e:41:32:c8:5d:78:2a:ef:4f:
7d:c0:8b:92:02:86:f9:2b:15:a9:6e:bf:b7:0b:c4:
75:49:69:d2:6f:09:89:fd:f6:0a:a5:32:29:90:18:
44:d2:96:33:12:06:fd:72:4f:06:fc:c9:6e:d8:da:
8e:7e:08:c7:50:fc:34:37:05:f1:65:62:3a:3b:cc:
0d:0f:af:48:48:4f:04:12:3b:fa:42:35:a0:cc:fc:
ae:e0:24:a3:78:dd:68:0c:17:0b:2c:21:ec:ad:2b:
bc:d9:f9:c3:e8:3e:9c:0b:17:7d:48:a4:65:43:75:
52:90:82:fd:d1:2f:d6:76:d0:51:48:f1:88:9a:6e:
09:e5:cd:e1:2c:4f:16:aa:6d:86:5e:14:ff:ed:2a:
1c:c1:b2:57:79:29:a7:5a:8b:1d:aa:7b:f5:86:7f:
fd:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:DE:3B:A1:79:9A:03:8E:8F:A2:FC:0D:0F:44:D9:FA:44:DC:6D:F8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ad47oXmaA46PovwND0TZ-kTcbfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6f:10:e8:ef:c4:88:fb:44:96:e1:9f:e9:22:17:39:7b:13:aa:
b7:ea:a5:9f:3a:08:d9:54:80:92:36:a2:ee:33:21:55:d0:48:
7c:5a:a1:55:48:2f:7b:e9:e0:a5:a5:a5:85:6e:69:b7:18:2e:
50:dc:07:e4:5f:2f:03:41:36:1c:dd:30:bc:51:b3:11:56:8f:
e4:a4:40:f2:14:51:e9:57:3f:03:61:50:a8:fb:cb:22:92:a5:
1b:d6:92:30:39:8d:66:fc:8a:10:35:53:64:ca:e3:32:1d:b0:
17:96:4f:a4:b7:ca:6f:65:87:f7:8b:73:c1:bd:8f:74:f5:2a:
4e:aa:fc:5b:20:36:a7:3d:56:ab:4e:3d:21:13:67:28:85:c9:
52:cc:26:0d:33:f7:b2:a3:ad:9c:45:6b:e5:de:c2:25:70:26:
c2:3e:c0:52:29:02:c0:70:12:22:94:21:cc:0b:d2:88:9e:7d:
b6:e0:88:0d:88:ee:17:85:71:67:81:ce:b8:02:ea:c0:71:57:
4f:01:56:df:62:38:1c:d9:58:9a:0b:6f:5f:99:a0:ed:db:64:
64:79:9a:66:92:ec:ce:f6:58:3d:4d:97:1a:54:8f:25:8e:7c:
fb:1f:b6:4a:7c:4e:97:e2:f6:b4:ec:4f:6f:66:28:b0:c3:25:
3b:ad:05:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:37:12 2025 by rpki-client