Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ISpF7yfFZ7E-wdgWKAK8wWMJ88w.roa
File: ISpF7yfFZ7E-wdgWKAK8wWMJ88w.roa (raw, json)
Hash identifier: Beu2NfloDUQ4YO7G+gKGxLGUzbMC4MTvRqd2l0WAeYM=
Subject key identifier: 21:2A:45:EF:27:C5:67:B1:3E:C1:D8:16:28:02:BC:C1:63:09:F3:CC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A3FBC4BF8568C5962F951A2ED1142306B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ISpF7yfFZ7E-wdgWKAK8wWMJ88w.roa
Signing time: Tue 29 Aug 2023 05:20:19 +0000
ROA not before: Tue 29 Aug 2023 05:20:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:3f:bc:4b:f8:56:8c:59:62:f9:51:a2:ed:11:42:30:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 29 05:20:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=212a45ef27c567b13ec1d8162802bcc16309f3cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d0:13:b5:6f:f1:78:6e:e7:13:08:52:e6:fa:
50:84:39:83:ca:2c:21:3b:e5:73:53:84:06:a4:48:
f6:67:e5:42:07:c8:f5:82:0d:d9:3b:b0:4a:36:49:
27:5b:75:56:22:f1:d7:ee:5b:4e:35:6f:86:dd:f9:
e2:f3:3f:05:5f:2a:86:3f:ef:fb:1d:a7:b2:9f:56:
6e:e3:66:8c:3e:2a:87:a2:15:82:e4:b5:f8:fe:b6:
e6:30:12:69:be:96:1b:c5:73:5f:30:f5:64:38:78:
7a:78:d5:ff:aa:53:6e:70:8c:ef:8e:8c:6d:39:18:
ed:9e:ab:c4:1b:0a:3a:29:97:9a:2b:bd:a2:56:65:
3f:4b:0c:ed:e3:75:90:6d:33:7a:aa:d1:fa:8c:5b:
bf:8c:25:23:c1:aa:36:9c:11:e7:4c:f3:48:4a:c0:
ef:19:90:59:7b:cd:60:77:c2:ef:ee:79:6c:7f:97:
cb:b3:52:e6:f2:cb:c9:1b:5c:dc:6e:fd:1d:af:9e:
02:94:99:fe:35:8a:59:d6:62:5f:23:1e:7a:03:95:
8e:c9:17:cb:aa:8d:ba:ca:26:4e:39:08:34:ad:f4:
f1:41:43:6a:c8:1a:47:5c:25:e5:d0:5b:51:00:0a:
66:c9:98:af:1a:5e:28:bd:83:a6:e3:54:e1:e4:de:
05:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:2A:45:EF:27:C5:67:B1:3E:C1:D8:16:28:02:BC:C1:63:09:F3:CC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ISpF7yfFZ7E-wdgWKAK8wWMJ88w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
54:3e:8d:09:5e:4c:8b:84:52:68:4e:3b:08:35:1b:5d:99:bd:
90:47:fe:a8:94:79:d1:29:61:c0:58:b3:c8:03:5a:2d:89:52:
53:c3:26:10:fd:0b:87:c9:a6:58:1a:8d:65:ef:41:59:44:ec:
56:ed:4f:89:01:4e:ea:a0:3e:45:35:2e:8a:53:5d:d2:05:2d:
0f:88:ab:0a:ae:7e:e1:c6:60:41:a8:54:cc:87:dd:d2:0f:5c:
c6:42:b6:51:7b:86:85:eb:e8:3e:de:92:44:0f:d5:fe:f5:48:
d3:ac:62:65:5c:6a:b1:b0:7b:10:34:9c:9e:7f:64:46:0e:14:
13:4a:83:ee:1c:2b:91:67:37:fc:bd:f7:90:22:1f:2a:23:15:
eb:75:9c:23:51:a5:b1:15:1c:2a:5f:56:12:bc:b8:6e:f6:34:
ba:e6:ae:1f:25:1d:18:12:e2:89:bc:34:f2:90:c6:2a:a3:b4:
bd:5a:74:b5:2f:49:bc:c4:7a:d3:14:a5:34:70:d5:df:2e:23:
d5:3c:b3:99:7b:ae:06:0d:38:21:8d:53:81:5f:e7:5a:9a:d4:
fd:bf:93:b8:53:5c:36:73:87:9e:9c:a1:fb:33:b0:8b:af:30:
84:16:53:86:ab:08:aa:33:6d:dc:a1:33:99:0b:f7:b8:29:c2:
4f:92:81:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:38:10 2025 by rpki-client