Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Exie764gVpGJsJg41NqZJC9p6u4.roa
File: Exie764gVpGJsJg41NqZJC9p6u4.roa (raw, json)
Hash identifier: 4J8j9h4YH7oFSs6DhUzRxMMT/ZDXN7mixCkIqK2Dxws=
Subject key identifier: 13:18:9E:EF:AE:20:56:91:89:B0:98:38:D4:DA:99:24:2F:69:EA:EE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184ED92A0E369C359BD4A637A75CC264D2E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Exie764gVpGJsJg41NqZJC9p6u4.roa
Signing time: Wed 07 Dec 2022 17:12:00 +0000
ROA not before: Wed 07 Dec 2022 17:12:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ed:92:a0:e3:69:c3:59:bd:4a:63:7a:75:cc:26:4d:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 7 17:12:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=13189eefae20569189b09838d4da99242f69eaee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a3:36:c4:5b:3b:ab:8c:a9:a4:9f:d0:b6:16:
48:e3:90:ac:08:3e:72:98:05:ad:30:43:54:6e:31:
48:4a:7b:82:ee:7e:dd:08:00:61:3f:9a:ba:6f:9a:
fc:0e:4b:75:3e:4b:c7:1a:4b:e5:d8:32:1b:52:67:
47:39:10:dd:74:b2:0e:a2:e3:37:b1:14:68:4b:94:
80:05:22:a1:3b:2d:01:9b:e2:77:ab:8a:56:fd:3e:
2e:39:6d:c9:66:85:9a:d1:b1:dd:89:24:bb:65:db:
ad:9b:0a:40:52:87:ba:2b:59:8e:fd:d1:4e:31:a7:
54:ae:52:b8:7c:83:c4:f3:50:27:69:0c:eb:78:25:
2b:fc:ac:ab:db:9e:b8:ac:16:ad:39:71:cc:61:5c:
e1:0b:dc:95:6e:9b:24:79:55:1f:3a:2f:41:1d:cc:
a3:7b:6d:5a:60:47:51:1d:06:00:83:b3:a3:46:76:
17:db:74:fc:84:e3:40:7e:54:96:b5:9e:65:3e:1e:
2b:c4:0b:96:ae:62:c3:3e:90:be:b7:a1:b8:67:f6:
f8:07:a9:03:9a:3e:2c:70:c1:54:01:7b:70:aa:97:
f3:8a:ff:fd:ed:e1:7d:3c:2c:62:b4:a5:2d:f8:56:
d4:6b:b0:c1:c5:87:ce:85:b1:b8:53:87:4f:94:56:
ce:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:18:9E:EF:AE:20:56:91:89:B0:98:38:D4:DA:99:24:2F:69:EA:EE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Exie764gVpGJsJg41NqZJC9p6u4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4c:5c:a2:46:82:ba:86:fb:21:e3:57:3b:6a:1b:8e:a3:0f:03:
75:c8:8a:20:5f:c9:de:f4:c8:77:85:71:e7:4f:2f:ff:e9:53:
85:6f:b3:73:46:44:2f:fe:aa:6b:07:f4:26:08:e0:fb:fb:0a:
57:50:dc:ee:16:ee:25:98:18:c8:30:84:f4:ed:be:c3:52:a1:
52:bb:f3:0e:1e:0e:75:69:1e:a1:fc:b1:a4:2a:cf:4a:61:7f:
68:0b:c3:a6:df:41:43:91:81:54:f7:88:c8:d8:14:c2:10:b3:
7f:3c:90:64:a4:3e:b7:81:1d:53:d0:80:84:2a:e6:62:5e:95:
49:9e:03:a6:b0:4e:75:fd:9f:6d:86:32:60:72:9a:a6:b8:b2:
b2:2f:ad:fa:c1:2b:e5:c9:bd:4a:38:ca:ed:ce:d1:46:e9:b1:
80:a7:6a:e6:9b:88:26:65:25:17:08:00:c1:34:c1:e1:38:ea:
6d:54:63:77:7f:4e:60:ea:82:a5:78:f0:20:af:57:20:c6:6d:
70:b7:92:ad:2b:cb:74:b2:16:ad:35:47:89:fd:ed:7f:0a:51:
ef:96:4e:c8:a1:5c:15:70:ef:9c:16:7f:0e:9e:1b:e8:62:48:
49:5d:75:49:4f:61:42:d8:99:e4:88:c6:eb:74:1d:fe:77:db:
f6:ce:38:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:50:57 2025 by rpki-client