Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CTEpe9Vqd7Q-PvHssAdbqCTFXrQ.roa
File: CTEpe9Vqd7Q-PvHssAdbqCTFXrQ.roa (raw, json)
Hash identifier: +/OfpODANyc7LU6LZzuYYAl3meEF7bn7r2YBmzxxlqk=
Subject key identifier: 09:31:29:7B:D5:6A:77:B4:3E:3E:F1:EC:B0:07:5B:A8:24:C5:5E:B4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186529F5D49ECA0521880BFC439C8355538
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CTEpe9Vqd7Q-PvHssAdbqCTFXrQ.roa
Signing time: Wed 15 Feb 2023 01:10:21 +0000
ROA not before: Wed 15 Feb 2023 01:10:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:52:9f:5d:49:ec:a0:52:18:80:bf:c4:39:c8:35:55:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 15 01:10:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0931297bd56a77b43e3ef1ecb0075ba824c55eb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4c:28:1a:5a:98:97:71:c1:fe:98:e7:e4:c3:
89:6a:31:72:6e:b3:c7:c0:30:a4:1b:36:a8:84:f2:
6d:3c:51:ff:b9:27:b8:a7:a9:f8:fe:da:f7:d1:cd:
00:75:b8:67:d3:cf:45:7b:fa:02:20:bd:42:c7:e9:
86:80:18:71:09:eb:e4:62:f1:87:c3:36:7b:c4:89:
37:d5:bc:bc:4a:0f:bc:dc:44:37:f8:b7:3a:3d:36:
1e:24:13:d0:b4:6e:38:97:1f:62:cf:44:f1:94:02:
5a:30:90:34:2b:34:ec:a5:21:2a:f9:fa:0f:dd:fb:
75:d1:f5:f9:ee:ee:68:63:31:15:50:fb:dc:cf:cb:
32:db:b5:7f:2c:19:99:80:ee:ec:28:b7:ae:ed:cf:
66:ad:3d:e4:ce:ac:44:f0:a7:cb:be:73:ec:91:e2:
15:6a:4b:0c:2f:01:8c:8c:54:e4:c1:3f:7c:64:64:
d5:01:17:db:9b:33:f0:12:2c:2f:98:8d:9d:73:31:
0c:9a:3d:7c:77:11:f7:a1:fe:88:c6:e3:dd:b2:a1:
3e:61:85:b9:cb:77:ba:ed:87:b3:49:99:20:ee:72:
4a:b3:2f:b8:ed:fd:dc:29:82:a4:ad:e3:40:91:bf:
56:6c:90:5e:95:cb:04:eb:87:33:a8:bf:3c:e3:cd:
c9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:31:29:7B:D5:6A:77:B4:3E:3E:F1:EC:B0:07:5B:A8:24:C5:5E:B4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CTEpe9Vqd7Q-PvHssAdbqCTFXrQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b1:bf:b3:89:de:7e:db:b0:d6:e7:c0:91:97:18:40:bd:29:72:
80:94:8a:38:dd:19:6e:da:e6:9d:37:b5:6c:c2:9c:49:29:11:
fe:c2:6e:01:5b:39:56:f0:1a:71:a3:5e:0b:f9:40:79:a9:bb:
c3:69:f2:c3:bc:ee:36:b5:3c:31:b7:ba:53:1d:2e:1f:a0:1d:
ec:42:d1:c0:a8:f8:40:4f:7f:4e:7d:0a:1f:eb:a8:e1:46:12:
59:89:ee:56:8b:96:5b:9a:77:82:b1:d5:37:7b:3e:4a:a8:75:
a2:47:44:fe:39:ae:59:f2:ac:e1:f7:07:ab:e6:0a:b3:30:a6:
4e:a3:2f:4e:ef:18:88:06:85:15:2d:42:a6:6e:26:c5:40:09:
5d:f0:76:2a:a3:7b:6d:8d:e0:33:c6:e6:39:6b:c8:b5:34:61:
af:e1:fd:d6:bb:88:c0:0b:8c:10:94:01:e4:4c:44:ca:ce:a7:
85:67:dd:3f:fb:7c:ec:b2:d5:c8:51:ed:ee:f1:36:52:57:e6:
6c:3c:e2:a0:f1:94:8e:23:cb:50:d1:cb:c8:c3:58:9f:d3:4b:
08:d8:5b:94:14:e1:1b:45:ff:08:b5:06:65:2b:09:6c:0f:ce:
ee:8f:49:3d:bd:ce:4f:82:1b:70:06:ca:bc:bf:ee:19:bc:ae:
41:92:3d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 06:34:15 2025 by rpki-client