Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SeLdoyRX4XI1UsOUNwS4oT3cZS0.roa
File: SeLdoyRX4XI1UsOUNwS4oT3cZS0.roa (raw, json)
Hash identifier: gr99qav5fQEubuEqRSAt91ODXSDTcw5OtfXU2khwkRE=
Subject key identifier: 49:E2:DD:A3:24:57:E1:72:35:52:C3:94:37:04:B8:A1:3D:DC:65:2D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184F47072BA448975BDE0256CF8F41250C9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SeLdoyRX4XI1UsOUNwS4oT3cZS0.roa
Signing time: Fri 09 Dec 2022 01:12:00 +0000
ROA not before: Fri 09 Dec 2022 01:12:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f4:70:72:ba:44:89:75:bd:e0:25:6c:f8:f4:12:50:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 9 01:12:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=49e2dda32457e1723552c3943704b8a13ddc652d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2b:29:94:94:b1:25:2b:5d:b9:dc:2a:f9:cc:
d8:28:bb:03:cb:9f:50:67:03:6f:bf:37:ec:1f:2f:
7e:9c:7d:cd:1f:74:f7:e1:b4:f8:c3:19:fd:a4:b3:
7e:97:b1:52:1a:52:60:d5:21:8f:ff:b2:cb:89:20:
99:f3:9e:6d:01:06:1d:1c:bc:c2:05:b3:4f:e5:ea:
ce:a0:15:fb:3a:98:c3:22:ef:25:1b:21:2b:f1:ca:
50:95:47:d2:0f:b0:c5:3f:b6:88:a5:6d:94:88:4d:
3e:f2:cc:f9:d5:8b:0e:cc:39:2a:9e:6f:59:dd:b4:
25:9e:18:8b:ce:99:48:00:6d:b6:d9:67:a0:14:72:
a1:f0:86:76:59:f7:24:e7:2a:70:ef:36:64:4f:7c:
d9:45:0c:a9:25:c0:e8:ba:fd:3e:58:6e:90:5b:ad:
d3:4f:bc:dc:be:d7:91:f0:db:b5:b4:75:fe:03:d2:
a7:7e:08:df:8d:b0:99:6c:37:09:45:99:c2:4e:1c:
61:2f:3e:fc:90:07:5a:e3:5f:3d:1a:fd:97:cf:15:
63:04:92:17:cb:dd:1c:9c:60:68:62:f5:d1:e6:b4:
d9:ee:87:ed:35:e1:cd:7b:58:60:8b:3e:66:47:50:
96:88:8a:58:3d:27:dc:fa:1b:c8:65:2f:d6:71:b7:
f8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:E2:DD:A3:24:57:E1:72:35:52:C3:94:37:04:B8:A1:3D:DC:65:2D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SeLdoyRX4XI1UsOUNwS4oT3cZS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
97:b1:cf:c2:15:b7:9e:ef:c2:17:0e:40:c9:ad:b6:d6:60:20:
f3:25:44:5f:53:64:d0:c0:5f:8c:2c:10:5a:ca:87:cf:df:50:
92:7b:03:cc:9e:f9:bb:0e:ce:60:cc:5a:16:00:0d:6a:dd:86:
0d:12:27:40:fd:3d:9b:a0:78:e3:ba:c3:14:99:2b:69:74:8b:
78:c7:eb:34:a9:5b:ac:6c:49:85:e8:dd:03:ed:b8:d7:18:4d:
ec:eb:ac:50:55:fd:3a:d2:8c:98:92:6b:d1:0e:ba:e1:b7:7b:
55:5e:98:b7:f3:6a:d5:c1:4e:5c:5d:c5:3e:49:f3:2b:c3:ce:
0f:ba:6c:0c:df:e1:92:ae:09:9c:c1:3c:a3:9e:62:fb:1f:3d:
a7:8e:77:28:b8:83:8e:eb:b7:bb:c9:6c:fd:3e:67:6a:ec:81:
3a:5d:22:04:68:33:8d:15:cd:3b:64:d4:46:37:aa:5b:e5:98:
ef:e3:c4:a2:58:94:b0:57:eb:15:7a:8a:92:5d:90:25:8b:b4:
9c:f5:3b:56:ac:90:23:a1:55:5c:70:00:9c:4c:fb:13:ac:4d:
a6:76:ac:d8:c8:bc:50:b2:aa:00:3f:29:b3:14:87:c5:aa:aa:
23:4a:a6:75:de:5f:d9:13:de:7a:9a:d1:ec:60:f6:09:c5:24:
d5:04:59:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:45:13 2025 by rpki-client