Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UnL91ilBIr_uo406HU3YZtL6vnI.roa
File: UnL91ilBIr_uo406HU3YZtL6vnI.roa (raw, json)
Hash identifier: jzhmYRtjNsOb5oinxoHNqzAfnLU6Hy+OHd8RGwZinFQ=
Subject key identifier: 52:72:FD:D6:29:41:22:BF:EE:A3:8D:3A:1D:4D:D8:66:D2:FA:BE:72
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018653EAA9C909838781EEAF6FB41814616C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UnL91ilBIr_uo406HU3YZtL6vnI.roa
Signing time: Wed 15 Feb 2023 07:12:12 +0000
ROA not before: Wed 15 Feb 2023 07:12:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:53:ea:a9:c9:09:83:87:81:ee:af:6f:b4:18:14:61:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 15 07:12:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5272fdd6294122bfeea38d3a1d4dd866d2fabe72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:52:b4:fa:00:8c:7d:66:9c:28:f9:d7:76:b6:
02:e3:fd:cf:25:d8:e4:70:4a:6a:3b:7a:a1:78:bd:
e0:eb:5e:b1:4a:67:76:75:0f:86:bf:54:e5:fa:63:
43:4c:9e:45:f4:92:6a:f3:97:91:2c:1e:41:89:6e:
3b:07:f8:30:8c:1c:34:d0:d3:df:1f:4c:76:bf:23:
9c:0a:81:82:66:67:f2:dd:e3:e5:e2:49:2a:fd:63:
e0:59:a5:b6:26:24:de:9f:aa:36:0e:0e:a3:bc:81:
21:26:80:b5:2a:06:c4:7d:86:c6:b0:12:1d:1b:61:
ae:11:41:41:08:b6:0b:76:19:6d:89:7b:a8:bb:f7:
3e:e7:ec:05:c6:71:f7:72:28:a3:1a:4f:f3:91:2b:
cd:6a:34:06:a5:83:1b:b9:a5:68:ba:e5:1b:b8:ef:
cb:a3:87:67:07:86:76:f8:f7:32:76:bd:84:a4:ad:
e1:5e:ed:b8:44:7f:54:1e:08:73:a0:5b:c1:d9:ad:
12:7b:0d:1c:41:60:aa:bc:00:53:bf:b8:2d:d2:41:
a3:be:53:12:5a:21:c2:34:b5:f7:b9:d1:df:ed:7d:
f6:97:24:19:2f:3e:56:26:48:0b:1b:a8:3a:8d:7d:
54:76:05:4a:c5:22:ee:ab:63:63:35:e0:72:b5:c5:
6f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:72:FD:D6:29:41:22:BF:EE:A3:8D:3A:1D:4D:D8:66:D2:FA:BE:72
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UnL91ilBIr_uo406HU3YZtL6vnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8a:b8:33:6b:34:fb:ca:49:7f:b8:c3:c9:70:14:06:b6:93:25:
2c:a7:6c:83:a1:58:fe:dd:fe:79:29:c1:9e:92:e2:93:9a:ba:
ce:e1:91:ea:63:6f:b5:a0:c4:cb:80:60:c1:8a:14:aa:fc:28:
3d:60:27:a9:f0:31:7e:51:8d:23:b6:db:e2:ee:fe:80:0d:2d:
71:2c:0d:ad:e4:e4:3b:0b:3d:5c:ff:30:3a:31:5c:8e:7c:3b:
ce:b6:c5:53:b4:4d:90:b2:f9:9d:71:01:9b:85:6c:35:9f:4c:
08:0d:cd:4f:7c:be:0a:b1:3a:89:ce:62:f4:9a:09:c7:ac:ee:
ce:e1:f1:64:b3:0d:0f:49:71:ad:0f:12:e8:8a:38:a6:7e:47:
ca:6b:6e:ca:99:73:f1:7f:a8:ce:d4:b9:37:0b:bf:59:02:93:
4b:1c:66:03:14:f3:a7:98:9d:b8:a2:dd:eb:d7:a5:15:72:2c:
34:d4:1e:60:10:4b:03:05:22:0e:50:f7:0f:7f:5f:6e:89:9e:
56:2c:cf:06:03:65:d9:e9:c3:b4:5d:49:b8:27:ef:ce:6e:9b:
cc:cd:e1:e9:3b:df:c2:17:4e:23:31:f5:bb:07:f3:c3:af:08:
20:de:7e:20:7f:a9:c5:5f:fd:bf:10:44:4a:36:be:55:12:c5:
86:41:17:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:28:28 2025 by rpki-client