Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SHg7jpTe0MXMEXwjxfei4NdijOE.roa
File: SHg7jpTe0MXMEXwjxfei4NdijOE.roa (raw, json)
Hash identifier: 0HxUGP+HBAwJBVGchz+PrinbnEgZn7PToWu3y4lK1dw=
Subject key identifier: 48:78:3B:8E:94:DE:D0:C5:CC:11:7C:23:C5:F7:A2:E0:D7:62:8C:E1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A44AA950087071CB62663BA75317E50E2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SHg7jpTe0MXMEXwjxfei4NdijOE.roa
Signing time: Wed 30 Aug 2023 04:19:04 +0000
ROA not before: Wed 30 Aug 2023 04:19:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:44:aa:95:00:87:07:1c:b6:26:63:ba:75:31:7e:50:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 30 04:19:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=48783b8e94ded0c5cc117c23c5f7a2e0d7628ce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:a6:82:7d:1f:0e:83:f0:31:51:7b:27:23:1d:
f1:b4:db:a2:95:d7:d1:6a:9f:88:5c:3b:95:9d:98:
fe:a2:e1:94:e6:78:c9:d7:c7:87:ae:62:c3:c8:d3:
b5:79:46:e1:f9:d1:3e:b8:51:4e:c5:3a:43:15:d1:
19:25:53:24:3b:d8:51:b5:8a:6b:89:33:31:45:6a:
fa:34:c8:40:79:20:90:5c:c7:66:b4:ae:6b:c1:35:
e4:a7:2e:88:8d:5d:21:77:55:74:83:45:3e:00:37:
ca:35:36:c4:35:91:58:92:60:f1:9c:f2:e7:25:ef:
f9:d0:8c:88:c4:74:48:5d:ac:85:0d:8f:f7:10:26:
49:12:3c:de:7c:97:cd:f8:4b:97:aa:36:9a:7b:07:
38:95:4f:d1:ac:b7:1b:04:53:80:8c:9c:9a:61:96:
58:2e:35:ff:7a:89:d3:d7:28:b3:73:2d:ef:2c:37:
f0:c2:bb:1d:17:72:0d:19:68:cf:cf:4b:77:05:f0:
7b:62:87:07:d5:67:e8:7a:21:92:8d:c5:02:d5:d5:
dd:c2:4d:17:d4:cc:d1:49:de:b1:30:f8:dc:11:77:
a5:39:12:e1:0d:36:b7:1b:42:14:a4:a8:01:49:d7:
4c:33:aa:47:e8:29:8c:67:dc:63:ec:2f:a4:f7:1c:
3d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:78:3B:8E:94:DE:D0:C5:CC:11:7C:23:C5:F7:A2:E0:D7:62:8C:E1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SHg7jpTe0MXMEXwjxfei4NdijOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
39:21:6b:d5:22:da:7f:0e:2b:bb:e7:60:9c:c1:1e:cf:18:a8:
f9:56:89:be:67:f2:19:28:f5:99:5f:22:b5:73:e6:36:7e:7a:
32:f1:80:b1:e7:fa:b3:7a:d0:a5:e4:7b:51:45:7e:04:4e:88:
94:3e:7d:7b:a8:73:07:e8:ec:0a:91:2d:1b:3c:0c:a4:89:22:
2d:bb:6a:17:ad:5f:29:5e:21:ea:bc:7a:86:bd:c1:ce:c5:14:
f9:a4:84:1f:4a:0b:55:d9:fa:58:33:ed:c7:b7:d9:df:fe:45:
fb:ff:26:0c:aa:f6:b5:f7:91:23:99:ae:34:f7:e6:cd:b3:27:
80:c6:f4:04:4c:9c:c0:e9:41:5c:b6:1e:ba:a0:6d:38:6b:43:
86:9e:9b:66:8d:d7:1f:4a:fc:a7:30:c0:16:f9:6b:fa:c3:60:
68:df:36:05:95:39:6b:21:c2:19:2c:f0:cf:a7:f3:1e:02:dd:
2c:fa:87:e7:00:1e:4c:b8:52:df:dc:c9:c4:cb:a1:62:88:44:
01:c5:ec:e8:04:3e:90:91:e9:5b:6d:1c:d2:98:99:65:b6:5f:
77:09:3a:8e:f6:45:a7:62:4a:c5:73:39:44:4a:d8:2e:36:b2:
60:8e:1e:6c:f8:ef:e5:81:58:44:d8:69:c8:71:4e:a9:c9:21:
4f:14:07:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 09:49:28 2025 by rpki-client