Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/L9yABTkse1vTGusD9EosF0UO3uw.roa
File: L9yABTkse1vTGusD9EosF0UO3uw.roa (raw, json)
Hash identifier: K6vtULobhMrTLOEqgEEjmQ2Dk1Z9RPkQbywi1qC5oG8=
Subject key identifier: 2F:DC:80:05:39:2C:7B:5B:D3:1A:EB:03:F4:4A:2C:17:45:0E:DE:EC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A408A4A886E0B6001A03DD1804DF7B195
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/L9yABTkse1vTGusD9EosF0UO3uw.roa
Signing time: Tue 29 Aug 2023 09:05:19 +0000
ROA not before: Tue 29 Aug 2023 09:05:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:4089:ec74/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:40:8a:4a:88:6e:0b:60:01:a0:3d:d1:80:4d:f7:b1:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 29 09:05:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2fdc8005392c7b5bd31aeb03f44a2c17450edeec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f3:12:ae:d3:65:61:d5:4e:68:44:0d:e8:3d:
76:d2:0f:02:de:93:bb:be:ce:c3:9c:1b:79:ce:49:
a1:6a:48:e4:6f:dc:ad:3d:4e:a1:56:fd:ff:4e:81:
2e:ea:76:93:35:c8:69:28:09:ad:2c:62:ff:10:ab:
78:3f:b3:f0:d2:8f:24:c7:11:dc:4e:5a:be:55:6f:
53:0f:b2:86:ee:52:f6:c4:5a:c4:a1:b7:fb:26:5d:
bb:1b:03:84:6b:ce:64:dc:a6:2f:dd:9e:b1:4b:45:
c0:b2:32:51:4e:90:99:b7:f9:91:7b:a8:b5:a2:f8:
fa:07:70:bf:7c:b6:59:d1:e9:e6:ce:52:7b:72:1c:
ab:50:62:56:c0:90:53:97:ee:9e:f6:1a:21:95:3d:
7b:3f:2a:99:a8:ac:17:c9:e1:8f:7a:de:f1:19:e9:
b4:93:35:ae:d3:3a:92:58:71:14:af:ad:c2:25:a2:
74:7a:b3:0e:72:13:65:91:95:71:37:ae:80:5f:bd:
38:ef:14:a4:d6:4a:c0:97:e5:cc:8e:a0:94:04:a8:
c8:50:df:32:2d:f3:51:59:54:87:8d:6b:6b:f4:21:
0f:b8:bb:06:49:f9:95:74:b5:9c:c1:16:aa:95:39:
9a:ea:3c:b6:47:d8:f4:8e:c8:17:84:8f:44:48:7b:
99:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:DC:80:05:39:2C:7B:5B:D3:1A:EB:03:F4:4A:2C:17:45:0E:DE:EC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/L9yABTkse1vTGusD9EosF0UO3uw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
04:c0:b4:4f:6f:97:40:de:c5:c0:c5:31:b4:a9:75:80:9c:f0:
fb:c8:71:a2:57:d7:36:24:0c:09:6e:8a:72:15:9f:2d:a2:13:
eb:bd:34:d0:2d:69:10:ac:b3:01:46:0e:57:bf:5a:34:3f:2a:
e1:3c:7c:c5:6c:87:85:ce:08:99:83:cb:72:cd:a9:df:ba:6c:
a7:39:69:70:f3:0a:d4:a0:a7:91:ee:32:b1:d4:23:bf:66:ea:
1c:28:01:0b:15:34:9e:1a:36:68:9c:0e:b4:30:ce:40:cb:b2:
cf:fe:b0:57:8a:ed:c4:26:02:82:e1:53:8f:5a:5b:41:6a:4a:
8c:fa:7c:a7:1a:06:c0:18:35:98:6e:9e:23:cb:cc:91:5f:27:
3b:a8:c1:84:e5:8f:95:d4:a9:b8:d8:50:e0:c1:81:6d:8f:ed:
41:e0:b6:9e:96:f9:58:d6:fa:39:63:be:ed:0e:b9:e9:4d:54:
c7:a5:f7:18:f9:51:fc:d2:2e:9c:70:48:4d:e0:0d:7b:8b:21:
57:61:9a:3e:ab:e8:b3:8d:31:fd:1f:8b:99:4d:64:d5:04:1b:
d3:1d:e5:3d:aa:1c:e0:c7:21:48:41:7d:25:18:39:c1:c4:a3:
0e:16:e7:bd:d7:93:e9:96:ad:b3:03:c9:d9:ca:65:f4:c4:ae:
a5:cc:0d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:28:06 2025 by rpki-client