Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YDovhT5adfY_zihtouG8StZC_rs.roa
File: YDovhT5adfY_zihtouG8StZC_rs.roa (raw, json)
Hash identifier: pUwRND/WLZBoxG2w3HPyxW4C7Qqff6F/xvd6+bgLmGg=
Subject key identifier: 60:3A:2F:85:3E:5A:75:F6:3F:CE:28:6D:A2:E1:BC:4A:D6:42:FE:BB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A386ECA22906FB9160F5388C7E518BBE7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YDovhT5adfY_zihtouG8StZC_rs.roa
Signing time: Sun 27 Aug 2023 19:18:19 +0000
ROA not before: Sun 27 Aug 2023 19:18:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:38:6e:ca:22:90:6f:b9:16:0f:53:88:c7:e5:18:bb:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 27 19:18:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=603a2f853e5a75f63fce286da2e1bc4ad642febb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:98:4f:36:04:73:d0:eb:51:2b:13:08:98:61:
7d:d0:92:30:1e:5d:c0:a8:68:4e:c5:97:53:8d:10:
19:7e:c2:5f:67:d0:dc:4e:0c:7c:3a:b2:43:e2:6c:
69:94:f8:2e:14:08:b3:cb:d0:89:89:88:cb:cd:1f:
eb:36:b8:cc:9f:76:7d:aa:f0:2a:ff:79:ef:a1:77:
72:4f:e7:03:52:40:60:df:bf:02:5a:33:82:7c:b9:
73:f0:41:2f:67:45:c1:2d:44:68:03:a0:dc:b9:23:
49:19:1f:47:05:2c:55:78:e3:71:b4:25:1f:eb:d9:
f8:46:cf:0e:53:22:59:44:29:05:e7:63:b5:18:8c:
da:35:c1:d7:b2:df:5e:c7:9d:46:9a:0c:40:69:10:
4c:10:30:80:c1:05:7c:92:64:cb:fd:a3:2b:6f:20:
ec:8e:2d:ca:21:ad:32:59:b7:e2:cb:d4:4f:25:b2:
0b:4d:95:35:e2:14:34:6c:11:0d:6e:fc:e5:44:e7:
7b:e6:05:5e:5b:e0:dd:df:62:67:cf:2a:48:87:ea:
33:e8:f9:23:0d:0b:ed:33:07:b4:8e:06:29:82:55:
17:07:36:67:87:5a:07:f3:c6:b8:69:57:97:40:75:
da:29:27:56:1a:89:47:46:fa:14:f8:27:0e:0a:1d:
4c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:3A:2F:85:3E:5A:75:F6:3F:CE:28:6D:A2:E1:BC:4A:D6:42:FE:BB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YDovhT5adfY_zihtouG8StZC_rs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
00:3b:3b:96:8b:29:62:fb:de:0d:1e:00:fc:63:75:75:ee:6b:
8d:c7:92:b4:12:cf:25:1e:79:87:45:36:63:4c:30:b9:b5:1d:
bc:25:07:79:5b:44:88:65:80:5d:4f:88:45:53:26:10:48:4e:
c3:35:e3:08:00:e4:bf:d8:6f:ff:3b:62:1d:d1:7f:3c:c8:bf:
88:f3:68:2d:48:0d:da:90:6b:de:f7:07:00:eb:67:ad:5b:af:
61:6f:dd:b9:e7:a6:ce:10:4b:b8:10:d4:21:08:78:79:b7:d7:
50:c0:45:ce:43:14:8b:23:02:51:03:f4:ec:bb:47:76:2f:48:
4a:85:e8:d0:bc:3b:ad:95:13:3e:bb:65:68:85:b1:f0:c0:17:
61:24:62:45:61:98:60:2c:47:2e:e4:2f:ce:54:dd:d1:76:25:
79:f7:89:fb:50:3b:61:84:10:af:4b:3d:f5:b8:4d:a0:d2:7d:
c1:48:ad:41:c8:63:79:e0:a2:7a:9b:c5:15:58:55:fb:7e:36:
d5:08:45:78:b1:67:c4:36:24:74:dc:20:c3:e9:dd:92:91:bd:
0c:80:f8:0d:d3:ef:6f:76:f4:8a:5b:12:63:d1:1e:6f:9b:2e:
ea:43:e6:39:f6:6b:e5:04:3d:20:4a:97:a8:f8:4b:34:1c:7a:
f2:f6:ff:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:20:40 2025 by rpki-client