Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/R5WSxeYS1C5dIfmrXW6YEIbFWXM.roa
File: R5WSxeYS1C5dIfmrXW6YEIbFWXM.roa (raw, json)
Hash identifier: clXb/B3Bym+R37J+LgNo3zfXbAQhlTtIsUA6UkwlJC8=
Subject key identifier: 47:95:92:C5:E6:12:D4:2E:5D:21:F9:AB:5D:6E:98:10:86:C5:59:73
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185C23742D898645C8951AD25EE8AC4321A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/R5WSxeYS1C5dIfmrXW6YEIbFWXM.roa
Signing time: Wed 18 Jan 2023 00:11:19 +0000
ROA not before: Wed 18 Jan 2023 00:11:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c2:37:42:d8:98:64:5c:89:51:ad:25:ee:8a:c4:32:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 18 00:11:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=479592c5e612d42e5d21f9ab5d6e981086c55973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e3:17:ee:8d:d9:72:58:6a:52:d9:b4:cd:54:
88:9f:ed:8c:1d:9d:57:7a:df:a6:d3:f7:0b:4e:69:
fd:5f:1f:6f:db:3b:bc:11:55:5c:27:39:c7:4e:2a:
90:d2:a9:3a:70:26:a8:6d:40:da:2a:28:b7:de:65:
ea:97:14:2b:19:7d:02:ec:71:f9:4f:e0:33:ec:8c:
d5:31:98:dd:36:2d:3e:03:95:fc:8f:27:2a:48:4c:
d9:c4:56:04:58:86:4b:31:10:e1:eb:22:81:c7:c0:
fe:1f:db:dd:55:bd:25:82:60:55:fd:9e:65:30:10:
28:85:e6:6a:7a:32:20:33:b9:cf:6a:8a:e8:26:08:
58:e5:7a:c7:78:e4:d2:cb:ab:29:75:78:30:39:55:
a9:b1:53:64:34:9b:ec:ef:f3:2f:79:06:54:2e:a1:
a8:a8:0b:e2:2f:e0:29:3f:d8:ca:ca:a5:bb:1a:7e:
ab:64:97:24:93:57:27:87:aa:32:7b:2b:a1:06:37:
1f:ff:62:15:87:f2:f2:1f:79:77:71:47:90:50:49:
40:36:2b:2b:8f:02:be:17:fe:01:ed:7f:c5:d0:3e:
d1:40:80:69:37:3d:ce:12:8f:1f:a4:35:23:79:c9:
b6:23:76:c2:6a:d8:2f:cf:00:1a:0c:80:ae:79:85:
79:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:95:92:C5:E6:12:D4:2E:5D:21:F9:AB:5D:6E:98:10:86:C5:59:73
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/R5WSxeYS1C5dIfmrXW6YEIbFWXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
73:2b:1d:a3:41:06:9d:d7:92:02:b4:6b:7c:ee:6d:6c:9b:b0:
13:bf:0f:87:f9:ca:9a:ec:b2:cd:fc:70:fe:c8:a1:2c:08:c6:
15:91:96:80:d4:ca:ca:d3:1d:c2:e7:02:a0:c1:ba:5a:b7:a3:
e7:f6:84:e5:da:ea:05:9b:b8:c3:8f:46:e7:6f:df:dc:74:94:
41:6c:d4:d0:db:4a:5b:f8:c2:ce:35:61:86:d9:45:8d:a7:7b:
c6:5e:3f:90:b4:47:a8:8a:b0:9d:04:8d:73:75:94:38:f2:2c:
35:e8:4a:b7:d6:b4:9b:91:d2:c8:84:02:72:af:b4:87:73:f2:
e7:f6:bb:ce:92:3c:94:45:6d:aa:c4:8b:00:88:d3:79:fb:4e:
9e:17:3d:83:08:0a:da:c8:e0:89:1f:4e:02:aa:dc:8d:c9:05:
c8:c3:02:bd:a7:06:f1:3a:0e:0a:c1:92:3b:90:2e:98:c4:6b:
3d:7d:f1:6b:1b:2f:60:da:37:90:cd:e5:26:88:f1:3f:51:38:
cb:8e:32:27:21:c7:7d:ec:f8:75:90:86:8a:9b:47:bc:0c:fd:
ab:89:b3:00:43:37:cd:17:42:bf:11:62:23:52:7e:f6:03:f1:
ce:a0:98:e3:00:60:1e:a5:de:eb:2f:a7:46:ed:21:b6:8c:30:
a4:be:de:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:49:54 2025 by rpki-client