Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/R91EpE8rBKv_6dzP9tz0e8NR3CQ.roa
File: R91EpE8rBKv_6dzP9tz0e8NR3CQ.roa (raw, json)
Hash identifier: yfmM6XyMXti8aqYah1Kv4Zx4ydFATfPfEusXyoKS/DU=
Subject key identifier: 47:DD:44:A4:4F:2B:04:AB:FF:E9:DC:CF:F6:DC:F4:7B:C3:51:DC:24
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A41A7E280DA3201B16EC78A42CCD8768E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/R91EpE8rBKv_6dzP9tz0e8NR3CQ.roa
Signing time: Tue 29 Aug 2023 14:17:16 +0000
ROA not before: Tue 29 Aug 2023 14:17:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:41:a7:e2:80:da:32:01:b1:6e:c7:8a:42:cc:d8:76:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 29 14:17:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=47dd44a44f2b04abffe9dccff6dcf47bc351dc24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3b:99:f9:dd:74:af:03:e4:41:f9:f5:61:c4:
b3:58:58:a6:6c:53:2a:77:1d:d3:1b:eb:24:18:d7:
4b:d1:83:8d:84:bf:ea:d4:e6:e2:d2:d7:b4:34:b5:
e0:63:2b:8f:0f:20:7e:78:29:a6:a2:a0:99:d4:4e:
b0:62:85:cb:e2:88:dd:01:a5:62:5f:81:8e:1a:55:
8b:76:8c:6c:de:b8:eb:33:09:d4:6e:33:80:1a:39:
5e:c2:38:83:8f:5e:f0:fb:dd:0b:5d:d4:cf:54:d9:
42:11:40:b1:44:0e:c8:40:42:32:e5:6f:96:dd:7f:
9d:2a:6e:ba:ec:f6:ee:77:fa:e7:ec:97:25:1a:7b:
d7:34:0b:37:bf:40:7f:d5:47:e8:88:e4:54:fe:68:
5c:04:25:50:6b:c0:3c:28:59:80:9f:f4:21:e1:ae:
26:6b:3e:be:fd:13:eb:8c:7e:5d:18:79:e7:48:f2:
64:91:e9:05:3a:e8:c0:51:63:67:f5:ed:4c:f6:30:
8b:15:c5:da:32:91:93:16:17:c6:f9:15:01:1d:f5:
4d:97:6a:61:cc:2d:eb:b1:bc:d5:43:21:0f:82:ae:
46:c5:e1:41:69:c0:94:cb:2e:dc:df:e3:68:b8:51:
48:50:3e:03:b0:5d:09:5f:60:a7:17:a0:45:6b:c4:
e5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:DD:44:A4:4F:2B:04:AB:FF:E9:DC:CF:F6:DC:F4:7B:C3:51:DC:24
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/R91EpE8rBKv_6dzP9tz0e8NR3CQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1f:d1:21:0f:74:4b:ca:43:5e:c0:16:92:f3:cc:37:5a:80:d9:
b2:99:44:5e:4d:14:6c:99:a2:aa:a0:8b:f3:28:e9:f8:e6:d2:
bf:c5:72:46:3c:c7:d8:97:65:7c:b4:c1:3a:62:1b:f8:67:e2:
79:fe:87:e5:cc:4c:87:c9:5c:c5:80:93:3c:12:08:77:6a:49:
6e:c9:bf:7b:4a:7d:87:e0:a9:25:dc:74:59:71:06:39:11:36:
66:0b:81:54:89:fe:a0:e7:5a:4f:98:a8:6c:92:9c:35:fd:92:
29:be:7f:39:bf:05:1f:dd:a4:2c:52:73:64:33:3b:81:87:40:
b7:dc:1e:db:ff:3a:f9:84:a3:0d:21:b9:b1:4b:60:8e:f9:90:
4d:af:d2:7d:7d:0c:b0:03:0b:39:bc:0d:fd:28:51:d6:03:97:
bf:56:7c:5f:e5:31:25:5a:f0:31:fa:54:45:3d:de:08:bb:ed:
7f:7c:5f:2a:ad:ee:f4:38:e8:61:3b:65:1c:a0:02:07:2b:f6:
43:3a:4e:9a:ff:bf:36:fc:28:dc:df:db:8a:35:38:b8:cc:63:
16:3c:e9:aa:66:83:83:69:f1:5b:c2:2b:1a:07:ec:80:2e:f8:
ab:4a:7d:cc:e7:e7:64:f1:fb:c6:7e:de:3c:ab:1d:fe:ac:1b:
cd:c1:58:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 14:27:13 2025 by rpki-client