Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RXDiF5gzOUdpQDRDJDzkY3ZNNVs.roa
File: RXDiF5gzOUdpQDRDJDzkY3ZNNVs.roa (raw, json)
Hash identifier: qyb43s5QsIn44E5DPihlGYiki0U+dBy/JmUPdaN78oc=
Subject key identifier: 45:70:E2:17:98:33:39:47:69:40:34:43:24:3C:E4:63:76:4D:35:5B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A3DF71CDFAAE6F259078FB4FCF51D4232
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RXDiF5gzOUdpQDRDJDzkY3ZNNVs.roa
Signing time: Mon 28 Aug 2023 21:05:19 +0000
ROA not before: Mon 28 Aug 2023 21:05:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:3df6:38cd/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:3d:f7:1c:df:aa:e6:f2:59:07:8f:b4:fc:f5:1d:42:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 28 21:05:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4570e2179833394769403443243ce463764d355b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:dd:e3:e8:87:51:90:c1:6f:ab:ce:8f:f8:d7:
68:76:26:59:69:6f:67:78:df:ba:58:21:1c:7a:5a:
49:7f:0a:d4:02:15:fa:4f:8b:ed:70:f6:78:bb:fe:
16:86:5c:60:38:89:74:28:87:75:ef:1a:be:eb:c6:
2f:da:64:c0:8c:45:b8:b1:fb:73:f2:5e:e5:16:d1:
7c:a7:90:de:84:30:9f:17:8f:c1:d0:c7:60:73:fc:
c7:30:b6:34:cf:09:5c:59:de:9d:e0:e1:d5:f7:1a:
64:91:42:40:a4:66:0b:97:53:e5:20:00:e7:07:ec:
b7:90:e7:39:9b:22:47:b3:33:d8:a8:c6:bc:d7:a8:
09:c8:af:18:a0:9f:69:03:42:8a:c5:2c:3b:85:d7:
01:10:c9:48:64:71:72:1d:b8:e7:fb:f4:91:b1:06:
2d:20:5d:f3:dc:76:9e:76:25:99:49:c8:13:c6:5c:
89:ae:6a:79:91:63:e3:2e:42:5d:8e:b8:28:d1:63:
f1:63:8e:24:f4:34:86:a7:b5:8d:39:45:a0:01:05:
9f:de:03:c5:31:5a:e3:42:5e:2f:65:a5:e5:e2:11:
73:6d:f5:cb:2f:1d:5b:10:57:b0:cc:bd:bf:40:5a:
00:49:c1:67:96:7f:c0:be:04:21:97:86:c8:dd:1a:
4a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:70:E2:17:98:33:39:47:69:40:34:43:24:3C:E4:63:76:4D:35:5B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RXDiF5gzOUdpQDRDJDzkY3ZNNVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8c:66:2c:0d:e1:a1:2f:13:9d:05:77:26:41:9a:6c:a8:17:5a:
cc:52:79:87:60:39:73:0d:49:f6:4a:76:45:d5:05:e5:87:38:
2d:93:4d:ee:16:e3:16:51:49:77:d9:0f:9a:38:d2:ba:4c:31:
ad:cc:c6:78:62:0a:a2:52:93:6e:5f:46:d1:7d:ae:54:53:f0:
3d:c4:3c:bf:28:da:06:d9:f9:6f:10:7b:00:06:d5:67:f7:b1:
64:9d:55:55:92:b1:61:bc:76:ee:a6:82:db:26:4c:68:56:15:
08:af:d0:30:39:47:1f:9d:65:20:f2:d9:62:3c:da:a0:85:9b:
ca:fc:d0:9c:57:6b:2a:78:85:d9:54:0d:5e:aa:3c:9e:f8:60:
b6:b3:68:d5:1d:d6:57:b8:0c:1d:c8:d9:e3:e3:12:1e:7c:9c:
75:de:04:fb:4f:94:44:e5:9c:e6:3f:23:cc:bf:b9:f8:ec:32:
68:62:35:4d:fb:96:28:cf:2e:04:76:b4:66:c7:f8:10:f4:11:
9e:dd:03:43:7e:0b:1f:8f:4a:a4:c2:18:6d:2d:d4:7a:08:12:
8a:45:29:de:18:57:33:a5:d8:27:22:ab:14:ee:9a:d8:49:56:
62:db:d1:c9:fa:02:14:0e:0d:3e:bd:3f:ed:82:7f:bc:8b:41:
10:78:11:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:02:54 2025 by rpki-client