Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/L2k3351ikZxqOlgq7t4vONMxMEQ.roa
File: L2k3351ikZxqOlgq7t4vONMxMEQ.roa (raw, json)
Hash identifier: 4vH5Bx0yMaUQlrCCspYXmiDF31EUlFQRl/5fefaFYIE=
Subject key identifier: 2F:69:37:DF:9D:62:91:9C:6A:3A:58:2A:EE:DE:2F:38:D3:31:30:44
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01859827208617C9040E57525E7B8080BA8F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/L2k3351ikZxqOlgq7t4vONMxMEQ.roa
Signing time: Mon 09 Jan 2023 20:09:39 +0000
ROA not before: Mon 09 Jan 2023 20:09:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:98:27:20:86:17:c9:04:0e:57:52:5e:7b:80:80:ba:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 9 20:09:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f6937df9d62919c6a3a582aeede2f38d3313044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1f:a7:2a:4f:43:5d:7b:79:e2:ef:f5:78:1d:
30:8e:86:89:98:e1:6b:ba:de:8d:a3:a2:e9:12:19:
76:35:ed:e4:56:0c:4a:c4:ed:2b:a3:f3:ec:24:e9:
37:c3:fd:85:e0:70:37:76:03:4f:b4:3e:f8:3a:63:
9b:35:04:a0:fe:3c:08:cb:37:1a:56:2a:9d:15:2f:
de:e1:5c:93:f1:96:b4:53:28:72:21:3d:ce:fd:bc:
82:8f:15:a1:ae:31:e7:43:fc:76:e2:2d:72:4c:8b:
f0:2f:de:36:12:4b:88:88:77:63:75:d7:51:9a:7d:
2a:53:15:6f:65:4d:73:56:37:be:46:79:85:0d:55:
6c:38:a4:a5:5e:8b:53:41:06:42:4e:ff:94:81:0b:
c7:42:b1:33:5e:d1:ac:1d:3c:ab:e8:d3:ec:54:d6:
0b:09:e2:16:fd:2c:a5:04:94:03:a0:42:8a:67:14:
71:cc:bf:fc:b0:18:16:37:b3:9e:bd:7a:ac:7c:63:
4e:f6:4a:ad:c2:3e:1e:c8:bb:93:69:c7:cc:2f:18:
72:a2:97:17:a0:83:19:d4:dd:19:d2:9a:3e:a5:5d:
dd:20:f8:37:42:18:af:e8:fc:1f:b8:16:2a:ec:6f:
f5:d9:56:83:8b:1f:66:1d:d1:9a:15:6c:7b:3b:b9:
60:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:69:37:DF:9D:62:91:9C:6A:3A:58:2A:EE:DE:2F:38:D3:31:30:44
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/L2k3351ikZxqOlgq7t4vONMxMEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
42:c9:38:2f:8b:45:c5:aa:4c:01:84:27:b7:9b:7a:91:c0:d9:
25:ee:b0:de:e9:93:ff:e8:8b:67:ec:e6:ee:2c:dc:2f:de:65:
37:55:40:b3:cd:ea:7c:65:c0:8b:3b:2b:fc:bb:5f:23:f3:4e:
13:0b:26:9f:62:c0:73:9f:6a:a7:2a:5a:b3:b8:9d:1b:50:28:
b0:9b:7f:0d:c2:4a:31:dc:35:06:1d:7e:e9:fd:1c:ea:a1:ea:
68:11:25:d8:6a:4f:b5:65:10:ee:57:79:e0:f2:7d:3c:7b:45:
36:ce:d2:a6:2d:a2:b6:52:c0:d5:58:ca:21:74:84:05:5c:89:
11:0f:8d:4f:68:7d:02:49:bf:53:0e:d6:f5:f3:95:33:84:0c:
9f:b9:df:78:ea:ff:05:2f:80:ae:bb:2e:81:69:c1:bd:38:1c:
2d:da:5c:3f:ac:83:22:8b:a9:db:fe:2d:87:0c:03:49:43:ba:
c9:5b:7e:21:63:4e:4c:13:bf:f5:b5:65:4f:0b:00:0b:58:f9:
f6:38:8b:d3:a5:d1:1b:39:19:9a:8a:a6:0a:23:90:ce:13:76:
cf:4d:39:c3:4f:a0:d3:17:f8:e0:95:18:70:77:f8:2b:e6:e8:
9b:8d:80:72:95:24:f4:e1:a0:57:fd:56:79:90:b5:1d:aa:62:
fa:bb:d1:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 02:17:01 2025 by rpki-client