Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SA6qm9E6MRhQLzXa3iB-xDJaAMc.roa
File: SA6qm9E6MRhQLzXa3iB-xDJaAMc.roa (raw, json)
Hash identifier: OinThYUbGaFUn1xT1qszoP4/lfiKxV16lUHK49Fu6Yc=
Subject key identifier: 48:0E:AA:9B:D1:3A:31:18:50:2F:35:DA:DE:20:7E:C4:32:5A:00:C7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018658A3281655AE8E0C4F31C88DF7BB6B2D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SA6qm9E6MRhQLzXa3iB-xDJaAMc.roa
Signing time: Thu 16 Feb 2023 05:12:12 +0000
ROA not before: Thu 16 Feb 2023 05:12:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:58:a3:28:16:55:ae:8e:0c:4f:31:c8:8d:f7:bb:6b:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 16 05:12:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=480eaa9bd13a3118502f35dade207ec4325a00c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:82:d4:67:18:64:0a:f1:73:2d:38:c0:f1:f2:
9d:a4:21:ba:fd:19:7d:59:5e:b4:cc:28:d7:b3:56:
e1:66:b7:71:e7:95:49:0b:ec:a5:7a:f1:2d:e0:a0:
09:56:b1:9c:3d:0e:48:5a:d9:e1:a6:15:d4:24:80:
c5:d7:89:21:e7:3c:30:57:17:72:24:86:fa:a8:ee:
72:5c:22:6e:f8:f2:2f:2e:22:88:17:6c:84:3f:62:
de:59:4e:06:58:3d:aa:47:76:54:d3:aa:56:f1:56:
43:6a:bd:93:04:60:0d:04:86:0a:ff:b8:9b:01:02:
3f:cd:66:b4:c9:fd:22:57:bc:f3:52:ad:f9:43:e5:
46:47:9f:e0:83:dc:3c:64:7c:76:77:a7:a6:84:e6:
88:4d:bb:a9:fc:ee:81:1f:51:dc:49:42:c3:2c:6a:
18:f0:8d:43:f4:66:05:02:b3:2e:46:63:80:af:0c:
56:13:99:60:77:1e:84:0a:8c:45:6e:be:7c:22:c7:
62:65:df:bb:84:c0:e5:dd:9c:a4:b7:e1:07:4b:96:
67:a4:86:90:ce:24:d7:40:8b:a6:15:3c:d5:1e:c3:
63:51:9e:9e:14:e4:8c:ca:68:d5:54:39:af:5e:96:
32:57:57:18:6d:4f:76:48:4b:6c:b0:54:c9:f4:27:
90:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:0E:AA:9B:D1:3A:31:18:50:2F:35:DA:DE:20:7E:C4:32:5A:00:C7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SA6qm9E6MRhQLzXa3iB-xDJaAMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
52:b9:85:11:1b:b0:d8:54:89:e6:5d:24:5a:77:60:52:f3:61:
3f:34:e0:99:18:58:73:c2:a4:02:3e:3e:c0:f5:30:6d:39:13:
03:83:76:5b:75:6b:0c:2c:7d:24:97:c5:8d:63:90:07:d1:f0:
53:72:08:04:56:14:77:eb:b6:99:93:c7:40:32:86:bf:aa:5e:
bb:00:89:1e:8a:e0:96:ed:e4:74:43:be:5d:24:99:8c:1e:41:
eb:9b:6a:20:ba:48:8c:ef:d8:e7:a9:d2:88:a9:6e:2b:df:fa:
ca:dd:2c:c6:ab:1e:1e:d9:f3:86:10:35:98:1a:04:c8:80:c1:
ae:2a:27:0d:6f:3b:a2:a8:e1:4e:aa:a4:da:7a:df:47:18:8b:
b5:33:16:ac:07:e6:7b:d8:e6:46:e5:65:2c:4e:d8:12:31:2e:
62:74:fc:b7:38:8d:87:6e:1d:e5:2e:7e:44:e8:07:36:5a:51:
da:2e:02:b6:a5:52:95:cf:a9:93:77:31:1a:b7:ef:0d:e3:c1:
3f:78:07:f5:3d:94:b1:d6:d1:62:3e:65:6c:2e:d4:6e:be:f5:
b5:ba:a3:b1:bb:e6:6c:0e:92:94:9e:28:2a:40:e7:b2:43:7c:
93:ad:14:e5:62:00:48:39:4a:d5:bf:48:a5:f7:4a:61:e0:e3:
3a:b0:d1:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:04:46 2025 by rpki-client