Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/I8RiYsQOPXBG-KJrKdb5DjtaSXk.roa
File: I8RiYsQOPXBG-KJrKdb5DjtaSXk.roa (raw, json)
Hash identifier: 3lQqENxBjgDkp7kfgfTrSvLMFuQsqEQ152jRzwxLmy0=
Subject key identifier: 23:C4:62:62:C4:0E:3D:70:46:F8:A2:6B:29:D6:F9:0E:3B:5A:49:79
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184255F44B8C54DBBC150445EC5AD07BE73
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/I8RiYsQOPXBG-KJrKdb5DjtaSXk.roa
Signing time: Sat 29 Oct 2022 20:11:51 +0000
ROA not before: Sat 29 Oct 2022 20:11:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:25:5f:44:b8:c5:4d:bb:c1:50:44:5e:c5:ad:07:be:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 29 20:11:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=23c46262c40e3d7046f8a26b29d6f90e3b5a4979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3e:34:cf:c8:bd:57:ce:c4:87:ce:21:8c:ef:
d3:71:e3:cc:86:05:0c:ed:09:59:98:18:43:2a:e6:
94:e5:9c:2b:89:0d:ed:36:7c:3d:63:e1:c3:ea:05:
84:cf:0d:2b:cd:95:0c:b9:f0:02:4c:df:b4:71:a6:
94:4a:22:9d:cc:6c:cd:45:2e:45:7c:58:f7:e4:56:
de:29:45:7b:57:1e:a4:b3:14:1f:5c:0a:e8:55:83:
9b:54:ad:5a:d1:0b:27:89:e9:f2:33:b7:ba:49:4d:
6e:ff:d2:17:dd:5e:de:bb:82:7a:d9:97:bd:14:79:
d4:b3:82:48:c9:49:2a:24:b1:9e:ac:b8:41:1e:d6:
08:90:65:42:3c:12:9e:5c:b7:e2:40:b9:8f:ac:ee:
99:0e:9e:8d:79:78:f7:72:08:b1:8d:d8:63:96:8d:
36:18:43:e1:ed:c6:72:5f:c2:b2:40:9b:d2:22:41:
be:c9:6f:4f:92:e5:b8:8d:aa:9f:2a:ae:28:8e:b2:
96:fd:ea:c4:ee:08:bc:f6:f6:88:f4:89:6c:8e:de:
b4:c5:e9:09:66:a3:03:13:99:47:f4:76:e9:76:e9:
cb:1a:30:ab:8a:26:f8:b4:9b:86:48:85:60:f0:88:
f0:b4:71:f6:62:7b:56:d0:fe:e0:b9:42:f9:b2:ef:
a7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C4:62:62:C4:0E:3D:70:46:F8:A2:6B:29:D6:F9:0E:3B:5A:49:79
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/I8RiYsQOPXBG-KJrKdb5DjtaSXk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3b:53:98:a8:d4:40:fe:20:47:12:64:d7:ec:f2:7e:67:10:74:
eb:fd:9d:70:7e:de:60:3e:b6:f5:ef:70:77:ac:88:be:05:ba:
26:ef:e0:e7:3d:46:c3:2d:f1:1b:7d:26:76:07:2c:95:f2:82:
16:df:48:4a:51:c5:d2:b1:25:49:9a:17:27:a8:76:ab:27:c2:
95:b7:b6:44:68:f0:0e:11:43:19:c7:46:01:c4:c6:43:bf:df:
42:1b:50:80:b6:d5:6d:d8:46:6a:ca:8d:f7:cc:43:b0:c8:e0:
ef:ce:eb:d4:3a:72:c6:d7:e9:a4:10:d8:26:f5:e4:1e:36:e5:
33:79:b9:fc:fb:63:b6:b5:21:0f:5c:bd:45:e7:14:7b:44:e4:
76:23:47:74:0e:1a:9a:2e:a7:6e:d0:ef:b4:03:fb:02:e9:90:
0d:9a:be:43:ed:36:45:05:27:8b:7e:d5:8f:69:66:58:4b:8a:
ed:bb:48:5c:ce:f0:b6:6f:17:33:52:9d:27:16:81:b3:e2:56:
9a:f3:ae:34:cb:74:46:dd:bf:f1:52:91:49:27:bc:f4:73:7e:
7f:d1:27:10:a6:67:68:ee:c9:f3:27:89:98:2a:b3:c8:ef:0e:
7b:da:93:b8:8b:a9:1e:fb:a2:de:18:d6:71:2c:e6:07:e0:09:
3a:e0:1a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 04:58:24 2025 by rpki-client