Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Rksb8cWleccByEvP4GFIXsPyLLk.roa
File: Rksb8cWleccByEvP4GFIXsPyLLk.roa (raw, json)
Hash identifier: tI4RZ06ZaLUXvhiJXrAnK4q6Ct52ABiFqI8vzgMFnJY=
Subject key identifier: 46:4B:1B:F1:C5:A5:79:C7:01:C8:4B:CF:E0:61:48:5E:C3:F2:2C:B9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185616F982EAA3971900D6D3190F6FB80B2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Rksb8cWleccByEvP4GFIXsPyLLk.roa
Signing time: Fri 30 Dec 2022 05:09:41 +0000
ROA not before: Fri 30 Dec 2022 05:09:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:61:6f:98:2e:aa:39:71:90:0d:6d:31:90:f6:fb:80:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 30 05:09:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=464b1bf1c5a579c701c84bcfe061485ec3f22cb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:94:5b:0b:89:a0:99:58:5e:56:7d:9f:d7:b3:
d4:17:7e:64:2b:d3:be:5a:ee:3f:55:8a:c6:ad:85:
c7:85:a5:11:36:47:9a:6c:98:bc:ae:52:52:26:ba:
33:f4:2b:04:13:3e:0a:2e:c8:e3:b4:bc:04:b6:d9:
7e:2c:e8:9d:eb:f7:87:b7:e9:c5:e2:ab:95:4c:02:
0c:02:e9:98:65:c7:72:f3:d1:06:5c:6b:b2:e7:5d:
fa:1d:77:53:3e:2b:35:b9:18:1f:09:43:28:be:ce:
6f:b7:45:25:42:f5:f9:d6:ee:b1:41:4e:d2:8a:14:
a5:3f:26:d2:d6:55:b7:8e:bf:4b:ad:d9:be:40:29:
a6:f4:52:71:d5:a8:06:b6:67:28:e1:91:9b:91:47:
b7:a8:83:ea:4b:2d:64:bb:a8:dc:27:b4:d7:6a:18:
5d:d2:55:54:c9:99:56:03:55:90:7a:86:24:1d:a8:
24:5c:d5:dc:36:89:d7:9d:a8:df:f6:9c:10:29:7a:
59:18:30:a7:3f:cf:66:d5:5c:af:56:67:04:d7:b4:
08:5f:68:67:c6:75:61:52:b4:b0:93:1a:0d:62:37:
b5:29:0c:e5:e8:58:33:d3:29:3a:82:07:c9:41:50:
81:42:a7:e6:c9:dc:f5:39:e1:b2:65:01:e9:f0:5e:
ed:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:4B:1B:F1:C5:A5:79:C7:01:C8:4B:CF:E0:61:48:5E:C3:F2:2C:B9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Rksb8cWleccByEvP4GFIXsPyLLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
58:f2:34:ea:6e:2d:a7:62:3c:85:f7:c9:32:33:28:1c:9e:5a:
ee:44:af:32:6a:20:cd:60:65:7f:74:1d:32:a3:9f:0e:d1:9e:
38:89:41:9a:e8:21:1b:3b:bb:b9:d7:29:04:64:9b:f3:3d:9b:
03:83:e6:e6:b1:a3:34:6f:b5:2d:35:72:4d:a8:40:69:8d:e1:
24:b2:17:de:9e:f8:09:be:69:63:2a:06:1c:b9:0e:42:1f:3b:
55:6b:7b:4f:2b:b5:0a:38:be:1c:26:cb:17:6f:e5:91:9b:88:
2e:16:1b:9f:36:56:04:1e:0c:55:90:eb:56:3f:20:01:da:eb:
b2:04:69:a9:cb:e0:f7:a5:c8:c6:e4:ce:76:07:73:71:5d:73:
d1:6c:2c:81:c4:f3:80:4a:3c:b4:22:3e:0b:69:00:b4:16:18:
c9:6c:bd:39:82:85:37:a7:81:9e:57:8c:f0:41:92:a0:f5:d3:
eb:9b:f2:b8:d4:58:24:14:9d:6d:4c:6d:ba:8b:73:72:2e:43:
3b:7b:0a:ed:65:65:67:50:fc:f7:f7:9a:ff:69:6a:f7:18:65:
a7:02:f9:0f:2b:4c:43:14:4f:b5:ed:62:60:2a:ed:53:cc:e9:
67:99:4a:84:df:34:d7:7b:ab:05:a9:2e:44:95:7c:59:6a:05:
c5:60:cb:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:02:00 2025 by rpki-client