Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RCplobu_GkfV3xUQFZe51wCSynw.roa
File: RCplobu_GkfV3xUQFZe51wCSynw.roa (raw, json)
Hash identifier: QPt5KQcn+ktYDzOzEmmxZvZmwYDTer2TF70uaVTES04=
Subject key identifier: 44:2A:65:A1:BB:BF:1A:47:D5:DF:15:10:15:97:B9:D7:00:92:CA:7C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183BFACE3600743E036824A9E0BC143A74C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RCplobu_GkfV3xUQFZe51wCSynw.roa
Signing time: Mon 10 Oct 2022 02:15:22 +0000
ROA not before: Mon 10 Oct 2022 02:15:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:bf:ac:e3:60:07:43:e0:36:82:4a:9e:0b:c1:43:a7:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 10 02:15:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=442a65a1bbbf1a47d5df15101597b9d70092ca7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:21:2b:67:03:52:1e:10:8e:ff:37:4a:24:7d:
a0:18:94:8f:43:ea:22:79:4b:37:d9:e4:98:98:0c:
ab:ed:77:42:0c:7c:3c:cf:1f:ab:b5:24:37:fc:35:
3f:97:40:3a:4d:37:2c:04:a3:a3:24:5e:52:f6:ff:
a6:c3:a0:2b:9d:8c:39:6c:82:f0:d2:02:be:bf:3e:
85:72:2a:b8:c4:54:13:6d:f8:16:0e:93:af:29:f3:
e0:de:50:c8:f8:2d:5e:85:95:c4:d2:bc:b6:77:24:
d2:77:08:8e:5c:24:99:d9:e5:f0:38:c9:b1:c6:37:
f2:32:7f:9c:7e:cf:57:d2:5e:24:d9:55:6a:85:4b:
14:23:12:13:84:e9:6e:0f:a9:d0:1f:32:2f:9e:26:
ee:de:8f:cf:48:06:75:36:ac:44:86:85:a0:72:d2:
b2:f8:fe:8b:c2:ad:25:75:26:60:2e:35:c2:83:13:
86:eb:6b:7e:30:0a:79:00:a2:38:46:17:b8:f0:69:
05:99:9c:6f:70:8d:df:4b:be:f6:0c:bd:e0:29:10:
c0:47:b5:1c:fe:b3:3f:33:0c:00:fe:63:0b:fe:fc:
db:b6:d8:02:2a:d3:3a:df:dc:7d:3e:5e:0d:5c:a5:
b0:ae:5f:44:c6:7e:8b:c1:0a:21:f5:c9:97:20:8e:
a6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:2A:65:A1:BB:BF:1A:47:D5:DF:15:10:15:97:B9:D7:00:92:CA:7C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RCplobu_GkfV3xUQFZe51wCSynw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4a:33:e1:ac:12:73:45:e0:6e:10:1c:0e:c5:b3:8b:2d:aa:9d:
02:39:45:3d:c7:4f:cc:9d:2a:31:9d:9f:f2:7c:fc:4d:67:c1:
fb:2b:a6:52:b8:8c:d8:1d:f2:a9:48:c7:d3:7a:fc:58:e6:84:
9a:7f:ee:fb:dd:84:9a:0a:08:ac:50:e5:ff:8c:cf:9a:b5:df:
c8:0a:3a:96:00:6e:4d:95:44:4b:c1:a9:5e:cc:2d:e0:89:c8:
77:91:94:d4:4e:22:21:b4:2b:0d:85:c2:50:b3:e7:e2:8f:63:
1c:20:ac:40:35:2f:f7:7d:95:0b:c7:29:4a:99:12:ec:9f:bd:
94:cd:e7:4f:01:be:ee:d1:dd:0d:78:a3:9b:5c:a0:e9:c1:a3:
69:3f:41:e6:3f:27:8f:df:49:e3:ed:42:18:16:78:f2:52:9a:
89:2b:31:bf:90:15:43:4d:e4:56:be:8f:17:e5:58:a7:1c:eb:
ae:d5:b5:89:d1:09:35:98:4a:30:f9:92:b2:15:4c:08:c6:b1:
af:fe:b8:5a:25:45:a9:31:69:1a:17:9f:49:33:10:3a:2c:78:
ef:63:e8:0e:76:85:c8:2a:d6:8b:6b:3d:e6:8a:14:bb:6a:a6:
4a:26:cb:db:88:c2:ac:e7:b1:6c:d0:35:38:86:56:d9:35:b5:
d6:c3:56:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:11:25 2025 by rpki-client