Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RxfzuPHQ6wPkWrG8MLoq6yJstDQ.roa
File: RxfzuPHQ6wPkWrG8MLoq6yJstDQ.roa (raw, json)
Hash identifier: b2hRNIrOX/V7KZMm3k0NQ34E8ZmPNsXLzL03PjdqCew=
Subject key identifier: 47:17:F3:B8:F1:D0:EB:03:E4:5A:B1:BC:30:BA:2A:EB:22:6C:B4:34
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A29A16C264EDF136F79CAE4C4EA0CB8A5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RxfzuPHQ6wPkWrG8MLoq6yJstDQ.roa
Signing time: Thu 24 Aug 2023 22:19:19 +0000
ROA not before: Thu 24 Aug 2023 22:19:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:29:a1:6c:26:4e:df:13:6f:79:ca:e4:c4:ea:0c:b8:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 24 22:19:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4717f3b8f1d0eb03e45ab1bc30ba2aeb226cb434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:55:6a:30:5b:8e:69:ba:19:f9:18:a3:3c:09:
cb:f1:b2:ef:5d:44:d1:4a:a0:de:0c:59:84:41:29:
04:1e:2f:ba:1a:4a:ad:af:11:0a:e7:6d:8b:a4:f5:
77:04:07:6d:e1:ef:b8:78:dd:0f:e1:32:ad:af:ff:
f9:51:e1:d9:49:84:53:19:28:b1:5f:99:30:86:32:
ad:b1:2d:1a:7c:5f:cc:a0:fe:35:ee:13:9c:33:44:
79:e7:15:7a:7b:88:f0:90:ba:6c:06:9b:a9:0f:c3:
d9:42:28:88:7e:06:25:ac:15:94:cd:1a:97:28:15:
ad:aa:82:a8:73:9b:1c:8e:73:46:ff:22:6b:4b:55:
2c:20:42:57:52:0b:bc:14:da:c4:ee:96:86:8c:7f:
02:9b:f9:66:ec:36:0a:f8:58:dd:9b:be:a3:29:f6:
bf:1e:89:40:04:c8:cf:6c:35:7e:87:99:ef:48:05:
e3:27:51:1f:4a:29:88:fe:f4:f1:8d:92:e7:6c:8b:
c8:da:10:0e:6f:c0:76:04:7b:cf:2b:57:ce:36:ef:
c6:1d:a5:44:48:e9:4a:49:c8:51:b2:07:65:07:fc:
c8:c4:e3:65:06:4c:b4:0f:b7:3c:87:66:e9:15:ef:
db:c4:44:27:b6:d0:b7:76:cf:68:5e:60:cf:76:e0:
2c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:17:F3:B8:F1:D0:EB:03:E4:5A:B1:BC:30:BA:2A:EB:22:6C:B4:34
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RxfzuPHQ6wPkWrG8MLoq6yJstDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8a:94:10:d5:11:df:11:b5:8b:87:3b:b7:23:32:dd:a4:61:a1:
93:5d:24:00:99:cf:0e:cb:94:33:36:52:a4:75:33:ad:8b:b2:
50:f2:d8:1b:41:5f:8f:04:40:0b:42:c4:71:90:66:e4:43:60:
6c:47:eb:33:cb:00:f1:88:48:1d:d3:8d:38:ab:b0:0b:86:c8:
67:90:e4:22:be:fa:05:25:86:8b:54:c6:0d:7e:43:f7:fa:fe:
36:cc:db:3c:bf:ea:1c:e8:ce:08:5a:fd:1a:68:f4:76:13:ae:
d8:d8:be:d2:06:19:86:16:94:70:f5:cd:f7:82:24:e3:52:35:
1f:4b:c3:23:17:06:1f:d5:a7:25:d4:9b:3b:91:f5:f1:13:cc:
66:14:60:af:dd:e5:18:e0:ff:6f:96:86:a8:b0:af:5c:f8:be:
16:e0:32:a4:5d:6e:15:6a:76:0a:9f:a1:14:cb:2a:24:9a:3e:
f2:39:4a:aa:7b:c8:03:13:69:1f:bb:b5:a6:79:1c:c8:79:08:
a3:2c:c8:a5:c2:be:0c:aa:7b:f5:16:c4:ba:90:b0:30:4b:aa:
27:ff:28:48:ba:c2:07:ef:db:02:82:d5:d9:09:d7:57:6f:20:
c9:de:92:20:c8:90:5e:7f:bf:9a:31:db:2a:e0:09:a8:cd:c5:
99:71:79:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 19:49:17 2025 by rpki-client