Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SOTkRGovap_MJ7z1xk3HjWgxUpY.roa
File: SOTkRGovap_MJ7z1xk3HjWgxUpY.roa (raw, json)
Hash identifier: tyG08//q2VPqJxqNJKGD0YvIlO6nmEdX/uwhBHJWThE=
Subject key identifier: 48:E4:E4:44:6A:2F:6A:9F:CC:27:BC:F5:C6:4D:C7:8D:68:31:52:96
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01863E01272F37BBF524E9AAC94F9F06CB06
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SOTkRGovap_MJ7z1xk3HjWgxUpY.roa
Signing time: Sat 11 Feb 2023 01:05:08 +0000
ROA not before: Sat 11 Feb 2023 01:05:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:3e00:5eea/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:3e:01:27:2f:37:bb:f5:24:e9:aa:c9:4f:9f:06:cb:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 11 01:05:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=48e4e4446a2f6a9fcc27bcf5c64dc78d68315296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:ec:45:da:60:b8:46:cd:c4:6a:14:da:b4:d5:
c7:db:c8:da:79:d4:67:1d:6f:42:7e:7b:4b:7f:67:
2c:b0:12:6c:41:a0:26:71:65:ec:18:0b:07:c3:04:
69:2e:c6:c3:cd:21:e8:36:af:b5:12:13:13:a6:25:
f5:23:c5:ba:84:3d:54:a6:66:59:0d:1d:fc:52:43:
25:28:ca:ab:78:18:15:c4:ff:b9:17:31:d5:8c:e0:
68:fd:b0:21:e6:46:08:2b:07:6f:df:8a:74:c0:aa:
16:85:ff:c7:7b:b4:69:cf:6b:e2:42:19:8a:d0:1a:
1e:86:88:e4:97:49:19:a3:ec:3b:06:e1:13:2e:ed:
2f:e4:0c:7a:51:cb:33:94:2d:69:2c:05:50:cc:f4:
0f:90:b9:8b:a9:5f:1b:1c:e3:3d:d6:b0:30:c0:13:
a4:cd:ef:03:01:21:fe:72:45:ba:d6:38:53:4e:b1:
1d:d6:fb:9e:a7:41:2c:66:e6:f9:00:8d:2f:1b:28:
2e:39:46:2e:cd:0d:8e:55:de:5d:8e:f6:ce:e8:e4:
4d:87:d0:95:fa:59:e8:86:6f:6f:56:32:1e:2c:fb:
fe:de:5d:38:d4:4e:ed:8f:a7:4b:b2:c2:29:70:41:
22:ef:c2:34:34:89:b8:b7:64:13:ee:cc:e4:37:6e:
1d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:E4:E4:44:6A:2F:6A:9F:CC:27:BC:F5:C6:4D:C7:8D:68:31:52:96
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SOTkRGovap_MJ7z1xk3HjWgxUpY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
86:90:00:23:f9:82:46:e6:52:6f:e5:42:73:db:1c:d0:b3:72:
e0:a7:7a:fa:ab:5a:0f:b9:2a:2a:04:4b:59:d8:60:d3:de:bb:
56:0b:e5:dc:43:8f:3c:1b:a0:62:3f:c4:76:d4:80:39:a7:58:
50:78:b9:3e:bf:1d:24:d5:f9:30:6a:d0:41:94:52:41:34:cf:
67:56:94:45:08:c3:f3:73:9c:7f:d2:52:a3:3b:02:9b:f3:1a:
af:59:07:99:33:f4:4b:76:3d:cf:f7:92:61:6c:ca:2b:44:1f:
cb:65:22:a4:a0:1f:4c:9a:b6:4b:00:92:43:e5:12:74:eb:27:
f5:39:e9:63:d5:64:22:a7:52:96:42:ef:79:1f:30:bd:3f:76:
cf:81:53:e0:e3:ae:16:2a:27:45:59:fc:b8:a8:b5:18:9b:09:
8d:91:18:5f:b7:2a:cd:17:d9:ee:a1:f1:04:46:c8:6b:17:42:
1e:74:ea:7f:45:a0:bd:72:cc:00:32:8b:93:da:84:c6:48:a1:
65:c2:e5:54:0c:f9:03:98:31:65:1b:3f:80:30:cf:80:7c:09:
62:b4:56:f0:a0:d4:16:b1:96:ab:f0:60:36:ee:f9:77:35:d5:
c6:94:bd:86:d0:c0:4c:36:35:c8:fd:49:ea:90:18:ea:8c:98:
fc:22:e5:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:45:44 2025 by rpki-client