Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Xn14bUPP7oDQPM8OC2F0DVZfAis.roa
File: Xn14bUPP7oDQPM8OC2F0DVZfAis.roa (raw, json)
Hash identifier: nGJhyKvsU04/dEDflS9FF3LN6lc5TwXHL+K3q9haMaQ=
Subject key identifier: 5E:7D:78:6D:43:CF:EE:80:D0:3C:CF:0E:0B:61:74:0D:56:5F:02:2B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018518B1ABFBE967DFA15F999EA0C8FAF34F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Xn14bUPP7oDQPM8OC2F0DVZfAis.roa
Signing time: Fri 16 Dec 2022 02:09:35 +0000
ROA not before: Fri 16 Dec 2022 02:09:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:18:b1:ab:fb:e9:67:df:a1:5f:99:9e:a0:c8:fa:f3:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 16 02:09:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5e7d786d43cfee80d03ccf0e0b61740d565f022b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c8:db:da:39:0a:0e:c5:75:2c:59:c2:6b:12:
9e:5a:31:7e:43:6d:a2:bf:bd:b9:5b:20:c8:d7:3e:
ce:81:84:7c:11:c2:1c:77:94:79:df:a2:c4:bb:61:
0c:51:9b:f3:2b:b3:e5:92:8a:f7:ae:8c:03:3e:45:
da:69:5b:1b:be:fe:a7:0a:57:ff:9c:14:f3:81:49:
e4:bd:d6:b8:d9:b6:c4:16:d0:96:ec:ba:c4:8c:2a:
6b:bd:71:16:f3:30:24:8f:c8:fc:b0:03:0d:42:22:
19:7d:6b:a4:3e:ac:e1:07:4b:b6:a0:d0:66:6f:f4:
cd:a6:f2:df:fe:d0:85:d3:eb:d9:f4:81:45:43:9e:
db:a2:a1:dc:bd:07:d4:ff:c3:99:47:5b:a9:99:87:
a2:f0:18:64:e5:b5:9b:58:87:f1:45:69:15:1e:06:
83:b6:b8:27:7b:2b:79:79:a4:9b:ed:c0:0b:84:f6:
2d:c4:45:15:df:5f:fa:d8:5d:25:0b:ea:27:35:82:
b9:f8:0c:9e:ce:b3:67:9e:3d:ea:63:a5:4f:15:75:
cc:71:96:26:0f:6c:d3:55:33:85:31:67:e6:d0:04:
ed:1b:b5:2c:23:94:b7:84:83:e1:f5:be:5f:53:ed:
1a:bd:a5:83:be:4f:9b:f9:8d:28:98:0b:24:a3:37:
01:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:7D:78:6D:43:CF:EE:80:D0:3C:CF:0E:0B:61:74:0D:56:5F:02:2B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Xn14bUPP7oDQPM8OC2F0DVZfAis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
05:c7:c6:d8:92:18:d1:7c:d2:99:7c:dd:3a:d4:37:21:05:d8:
ba:1e:f8:d3:f3:9a:ca:78:5c:b8:b0:9a:52:56:23:ae:67:97:
ab:26:8c:8d:8c:15:9a:f5:e8:90:d9:fc:9c:15:4a:19:4a:24:
0d:53:a6:a4:d8:14:c1:1a:15:7a:d2:6f:06:fc:82:8d:48:41:
9b:9c:e9:35:cc:a7:da:07:37:46:17:7a:cc:ef:23:2c:44:a5:
e9:26:ea:c7:bc:73:41:a5:a8:d2:b1:75:ef:0d:fa:a7:ee:ef:
fd:45:77:82:e2:4e:de:d2:e3:08:60:d4:8a:1c:a8:a3:05:c0:
0f:87:ef:20:e2:a7:5f:eb:a2:62:a7:85:d7:55:87:48:7b:7f:
07:2a:fa:3d:9a:d3:56:eb:4d:8e:6b:3f:e9:f4:df:0e:36:ac:
53:2c:86:5a:bb:51:f6:df:7a:3f:11:cd:ee:f8:66:e0:ee:df:
2d:b4:e8:4f:ee:7d:7f:87:88:fb:c8:1e:ee:6e:f5:cd:c1:3c:
ec:c4:d6:17:7b:07:3c:d3:24:3b:c2:1c:c2:00:51:90:f7:25:
26:a6:ba:95:7a:28:51:67:43:df:b0:5a:4c:86:fb:34:35:00:
6e:f0:e0:d1:b4:40:e0:2b:6c:7e:c3:8f:83:44:d0:8a:63:a1:
61:df:e0:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:45:16 2025 by rpki-client