Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CI9j77tCTYJos4y_rzbESHM8kWo.roa
File: CI9j77tCTYJos4y_rzbESHM8kWo.roa (raw, json)
Hash identifier: nBWtpnh8nVVnGokP6Fc9Y3E9nwrzS83t8Sl2+72vE5E=
Subject key identifier: 08:8F:63:EF:BB:42:4D:82:68:B3:8C:BF:AF:36:C4:48:73:3C:91:6A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01864EFB82F527CE04805BA0186DAD8050C9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CI9j77tCTYJos4y_rzbESHM8kWo.roa
Signing time: Tue 14 Feb 2023 08:12:31 +0000
ROA not before: Tue 14 Feb 2023 08:12:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:4e:fb:82:f5:27:ce:04:80:5b:a0:18:6d:ad:80:50:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 14 08:12:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=088f63efbb424d8268b38cbfaf36c448733c916a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:95:66:46:19:32:e1:68:61:e8:6e:f3:34:1a:
d3:aa:1f:92:a1:c6:3d:5a:ea:53:e9:76:63:97:3c:
3c:73:0b:2a:05:14:e0:04:73:c2:c0:95:be:8f:a7:
58:61:93:98:63:ae:94:04:5d:45:dd:32:b7:79:e6:
0d:f4:ce:06:71:23:fd:97:69:6b:ed:e7:fa:2f:5b:
99:e1:49:50:8e:56:c5:71:96:51:29:46:ec:4b:5f:
43:5e:a5:6e:3b:6f:ba:83:13:05:51:ec:c9:fc:71:
f3:aa:a8:21:6a:01:e2:8a:2d:9a:e7:89:34:81:f6:
5a:15:f9:6f:95:ce:3c:ef:ae:57:ff:3c:dd:06:17:
a8:00:9e:2b:82:36:3e:3e:c7:96:7a:11:d1:c6:ce:
2e:7e:aa:29:3e:02:6f:e2:47:5d:91:2b:7c:5a:7a:
ec:78:1f:d6:5e:cb:07:f2:4e:be:9f:e7:71:64:c4:
c6:c2:3e:73:33:ac:69:4b:b5:cc:7a:db:6e:4f:2f:
c3:e3:b5:5e:be:5e:ca:e6:7d:b1:fc:37:84:fc:0d:
94:24:97:3e:8e:1e:3e:86:aa:3b:4a:af:1c:a0:33:
0e:d0:13:56:2b:26:50:09:e8:54:6a:52:fe:fb:61:
f3:b7:51:01:50:91:65:b1:9c:e8:19:cf:77:02:a8:
be:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:8F:63:EF:BB:42:4D:82:68:B3:8C:BF:AF:36:C4:48:73:3C:91:6A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CI9j77tCTYJos4y_rzbESHM8kWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2c:d3:cf:c8:d3:0a:1f:bb:d3:c2:bf:25:e3:0c:ca:3f:a0:fc:
db:3c:be:91:ae:5c:ff:e6:1d:f5:3c:d6:79:35:72:64:6a:9e:
77:79:d7:ae:2d:41:80:f0:2d:08:15:d7:0c:31:aa:47:70:31:
05:fa:c4:ba:b0:a2:d4:f9:b5:dc:60:2b:cc:8a:09:21:31:b3:
a8:6f:3c:10:d5:d0:d4:2d:53:07:24:81:af:54:14:4c:2a:76:
43:95:d4:79:c7:b7:39:2f:a2:83:30:73:68:8b:d1:3b:93:a0:
f6:56:e5:b1:74:50:74:2f:25:b1:70:82:73:36:90:b0:9c:e7:
06:01:46:d6:41:c7:40:64:5a:4c:2c:7e:38:e4:b7:d1:cc:7a:
ab:3c:3b:c0:3f:06:c9:b3:1d:15:ff:19:24:7a:1e:15:b3:d8:
f2:4a:a7:5c:4d:10:7e:ba:ac:ff:0c:f0:d2:6b:f6:83:ab:e3:
19:50:e0:a9:76:11:b5:05:02:32:89:a8:3e:11:a9:ab:70:d6:
c1:4b:ce:30:55:76:e3:75:fe:3a:9d:2d:e4:c9:09:0d:ae:e8:
22:91:88:41:55:93:af:93:7b:61:8e:9d:49:bb:9f:a0:57:47:
f5:8e:e4:eb:14:5e:3a:b6:60:52:9f:5a:ed:53:f5:f9:0d:62:
13:d9:ce:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:47:23 2025 by rpki-client