Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/S2wiZvbQb4ZHIdvYM4eNx5wpnQk.roa
File: S2wiZvbQb4ZHIdvYM4eNx5wpnQk.roa (raw, json)
Hash identifier: Z9kpVVnxQB6RmNusOqeXIgI0sE8SUOAixzNWPm18XkQ=
Subject key identifier: 4B:6C:22:66:F6:D0:6F:86:47:21:DB:D8:33:87:8D:C7:9C:29:9D:09
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186499C0A2333EAB432D1571CE89867986C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/S2wiZvbQb4ZHIdvYM4eNx5wpnQk.roa
Signing time: Mon 13 Feb 2023 07:10:08 +0000
ROA not before: Mon 13 Feb 2023 07:10:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:49:9c:0a:23:33:ea:b4:32:d1:57:1c:e8:98:67:98:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 13 07:10:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4b6c2266f6d06f864721dbd833878dc79c299d09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:42:53:39:f8:19:ae:cd:3a:eb:33:8f:00:7a:
1b:05:17:8a:e5:8c:83:b1:25:49:fb:e2:8b:0f:2c:
60:e7:fe:b9:4d:af:c0:5c:60:17:e7:fc:69:52:df:
68:1e:05:df:59:6b:b4:e9:ef:d4:f3:4c:65:5f:7c:
04:7b:63:1c:dd:d7:5d:26:70:d3:f2:4f:13:3d:c4:
75:07:b7:c2:07:27:f9:d0:52:e2:06:12:86:2c:10:
d4:e8:8d:c5:79:e3:04:6c:10:6c:e9:a8:96:47:4e:
10:e4:91:49:82:b7:61:d4:28:44:5a:d8:0e:5b:75:
9c:bb:88:5a:21:20:7c:d0:a2:8f:ec:44:16:27:e8:
47:5f:59:1e:ba:1c:13:c6:d2:a9:ea:77:ee:c7:65:
1f:08:d3:78:ff:54:ed:0c:c5:2d:4f:ca:a8:f7:de:
84:33:91:1e:e1:ac:fa:ba:5e:f4:fd:32:cb:df:4c:
05:e7:35:f3:d6:ee:ce:95:be:3e:c7:12:ed:c8:0f:
cb:58:f7:2e:b0:76:45:05:a8:d7:27:7b:14:d2:78:
33:9a:31:78:2f:6c:8a:4d:c6:99:cd:ba:93:80:f2:
6a:2e:b3:c4:74:d6:7a:5c:2d:71:a1:f9:ca:84:74:
f5:a4:4c:e1:1c:40:7b:47:a5:97:de:49:24:e3:a2:
24:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:6C:22:66:F6:D0:6F:86:47:21:DB:D8:33:87:8D:C7:9C:29:9D:09
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/S2wiZvbQb4ZHIdvYM4eNx5wpnQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
93:a6:88:b9:41:34:d3:76:f1:de:4c:50:ba:f8:58:47:3f:45:
32:f1:b9:bd:65:85:5d:9b:27:90:5c:31:ef:d2:1d:5c:46:2f:
f8:ce:51:b2:45:3c:f3:65:99:42:50:14:c0:6c:45:cc:c4:63:
22:47:91:5b:7a:d0:c1:03:de:90:13:09:a6:f1:32:b2:52:1c:
e8:d4:49:cd:bc:9c:fa:20:25:a1:b8:79:6c:9c:2c:66:61:83:
fb:39:66:88:12:85:b2:ea:36:db:a0:5b:47:97:cd:68:f6:78:
4b:38:95:50:85:d7:cc:ab:03:3a:98:36:2b:03:90:41:38:92:
95:c4:e9:04:0c:4b:9b:20:8a:5c:02:a3:f9:b4:ff:4f:44:04:
6d:f2:b5:33:9b:f7:de:a4:8e:e4:12:52:b3:70:68:e3:8d:09:
7e:a5:6d:00:bf:9f:f8:97:0a:0d:b7:82:61:7a:6e:6d:ca:9e:
07:b8:2b:c2:e5:f9:2a:14:20:dd:40:95:3c:1b:23:31:00:d1:
dd:48:84:be:f6:ec:a4:2a:33:c7:99:28:4e:31:5e:dd:4d:3c:
e1:5b:09:79:48:99:4f:46:cc:d6:a6:da:37:c4:4e:d6:44:81:
0e:fc:62:55:44:09:f5:ac:8a:57:53:29:62:96:8f:7a:35:15:
4b:bd:4d:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 03:13:30 2025 by rpki-client