Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KIpyU1IgZ9XMs1def6XXP58o31g.roa
File: KIpyU1IgZ9XMs1def6XXP58o31g.roa (raw, json)
Hash identifier: palKG7kXXgC8aomNRM9yJR37Purawu/x2MTF3wdw5UA=
Subject key identifier: 28:8A:72:53:52:20:67:D5:CC:B3:57:5E:7F:A5:D7:3F:9F:28:DF:58
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185FA6D090D8B3ABD5F66AD3D1B828FE619
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KIpyU1IgZ9XMs1def6XXP58o31g.roa
Signing time: Sat 28 Jan 2023 22:08:47 +0000
ROA not before: Sat 28 Jan 2023 22:08:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:fa:6d:09:0d:8b:3a:bd:5f:66:ad:3d:1b:82:8f:e6:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 28 22:08:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=288a7253522067d5ccb3575e7fa5d73f9f28df58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:45:93:e5:46:e9:8e:9b:df:f8:3a:18:92:a6:
43:79:5b:6d:23:29:82:4a:08:e9:0c:5c:cf:ef:ef:
f9:77:27:b2:8c:d5:4c:a4:37:02:92:8c:c4:5a:f4:
d7:08:69:24:0e:1f:89:0a:a8:3b:8e:b5:c9:4f:00:
e0:7e:23:33:98:33:41:04:a2:03:81:b4:d5:a6:3c:
82:c2:46:c9:1c:b6:e1:3a:60:ed:51:f1:1b:4d:5f:
78:32:58:3f:34:a7:cb:0a:64:ec:ff:d7:0a:f8:e6:
35:be:e4:a8:21:e0:ac:79:b9:0a:4d:4f:5c:96:25:
61:82:f5:3f:16:e1:4d:fd:bb:4e:6c:b8:42:0f:8e:
28:6d:90:7a:29:3d:80:09:09:a1:fc:f3:4b:26:b1:
45:d9:61:21:15:b9:24:38:30:b2:13:c7:02:86:43:
0b:39:bf:7c:db:d2:0f:ea:36:03:35:8f:b4:72:c7:
19:ee:fb:1f:22:20:ff:3d:7c:87:43:f3:e4:29:80:
b5:d9:a3:3d:8e:64:e5:cc:1e:51:55:ec:35:e7:53:
13:75:36:ff:a6:d0:49:3f:d0:1b:19:78:b2:67:0d:
61:d5:82:ef:4b:1b:95:a3:14:03:b4:8e:96:65:86:
41:de:b1:ec:d6:82:33:ee:31:bd:83:98:b6:fa:7d:
d5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:8A:72:53:52:20:67:D5:CC:B3:57:5E:7F:A5:D7:3F:9F:28:DF:58
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KIpyU1IgZ9XMs1def6XXP58o31g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
96:bf:ce:4c:5b:01:ce:55:f7:c3:07:86:fb:d9:02:05:2e:60:
15:b6:06:5d:1b:9f:dd:15:ab:a3:bd:a0:7f:f5:55:c5:48:86:
a8:29:ad:21:64:51:b8:58:c1:81:f7:38:71:78:41:2f:1b:e0:
fe:16:cd:3a:ee:7b:7a:5f:0b:5b:27:8c:3e:a9:8d:7f:01:bf:
c3:f7:5b:d0:1a:23:63:17:5e:eb:35:1e:2d:c9:64:3b:cf:7f:
05:d6:da:f3:6c:b7:38:c7:09:6c:90:65:03:dc:6c:54:23:68:
bf:1a:7d:68:f2:67:4b:49:2c:af:a4:65:d4:83:a7:e4:df:35:
8d:c7:18:7f:43:4b:bf:14:7b:79:89:7a:b1:2b:69:34:07:fc:
d3:1b:c0:67:93:0e:5d:91:10:2b:8b:79:f2:72:7b:ee:f8:f0:
f8:58:f9:4b:36:c6:08:1d:f7:d8:95:c6:cd:7c:c9:c6:64:57:
d6:4a:b5:67:37:ec:35:5c:ec:24:dc:71:f0:de:58:17:1a:6a:
d7:bf:2d:d5:10:58:fd:7d:e4:1e:65:64:9e:8d:7e:4d:3a:c1:
21:7b:84:27:db:38:72:8f:77:d4:e6:2d:e9:3c:21:55:59:b7:
37:cb:42:fe:3c:e2:2b:23:b0:66:b1:cb:9e:a3:87:f4:31:ab:
55:73:8d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:10:52 2025 by rpki-client