Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_K39k3AdO_SpWCk8XB5LFBeODmw.roa
File: _K39k3AdO_SpWCk8XB5LFBeODmw.roa (raw, json)
Hash identifier: 09DV44AYaBHlmp8UeSyWB/a2gHlXYiNVQdxAEdyn9+E=
Subject key identifier: FC:AD:FD:93:70:1D:3B:F4:A9:58:29:3C:5C:1E:4B:14:17:8E:0E:6C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185E48AB4116F1F9E237A676512E2A0A034
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_K39k3AdO_SpWCk8XB5LFBeODmw.roa
Signing time: Tue 24 Jan 2023 16:09:33 +0000
ROA not before: Tue 24 Jan 2023 16:09:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e4:8a:b4:11:6f:1f:9e:23:7a:67:65:12:e2:a0:a0:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 24 16:09:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fcadfd93701d3bf4a958293c5c1e4b14178e0e6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:21:95:e4:63:fe:72:f2:71:99:44:bb:47:79:
7a:15:45:d8:51:61:d1:50:57:20:02:7d:d3:0f:a1:
34:5a:10:e8:d0:de:c3:6a:c3:2d:4d:66:d8:79:3c:
e3:ba:13:6a:e9:b5:77:79:b2:fe:e4:c1:ee:f4:c0:
de:95:b4:45:96:40:90:6b:2a:cb:fe:38:74:85:a4:
75:25:53:3b:9b:6e:75:a2:90:7a:bf:21:03:ab:f3:
d2:84:37:4b:e9:3a:db:68:c2:e7:6e:a3:8c:6b:8f:
77:2b:2f:b7:ff:ce:86:0a:c5:84:4d:ee:1a:dc:64:
e1:38:b7:34:2a:ae:3f:fc:9f:53:53:29:1e:df:ce:
63:e8:a8:64:bd:60:45:57:c7:29:d5:08:05:4b:65:
eb:26:a1:56:d7:88:d6:09:a0:10:e6:84:79:9c:a8:
11:4b:da:2e:0b:ef:32:2f:83:74:7d:a4:c2:1f:77:
ce:ca:7c:aa:9b:d2:21:db:bd:6c:1c:96:1e:53:53:
f4:3c:f2:06:03:c2:b7:29:f2:d7:52:98:2b:00:d0:
b5:d9:72:cd:05:12:71:be:7b:47:15:20:c0:13:26:
26:86:90:2a:a0:eb:e6:40:c3:ab:a0:f7:6a:5d:3e:
8a:10:e1:78:37:3b:18:1f:ec:00:7a:46:e9:74:dd:
1e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:AD:FD:93:70:1D:3B:F4:A9:58:29:3C:5C:1E:4B:14:17:8E:0E:6C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_K39k3AdO_SpWCk8XB5LFBeODmw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1c:9f:9a:b8:d8:c7:a0:a5:ff:f5:80:8f:08:ad:c6:af:ae:62:
b8:c2:3c:3c:4c:da:88:b7:07:77:1d:89:9c:eb:93:b7:62:67:
bc:05:2e:5f:af:5c:f4:3d:05:85:3b:37:fa:bc:a5:e3:b8:c8:
c9:d1:45:c9:8f:8a:dd:4c:5c:66:c4:c3:aa:a2:ea:e6:3e:55:
7f:49:08:a2:c9:81:d3:97:2b:40:6c:6e:21:3a:f4:d7:d4:e5:
0f:52:ad:60:5e:5e:b4:c7:9a:fc:b8:77:47:a7:d2:1e:76:ca:
f5:5a:5e:40:6d:fc:dc:e3:44:b3:c8:ca:ce:72:86:56:01:d6:
92:69:c9:41:92:fd:89:69:34:a7:62:b0:09:70:43:e7:45:b5:
2f:a5:e5:26:48:30:08:7b:3a:99:4e:94:09:78:50:3c:e9:83:
c5:77:e0:f5:82:d9:c5:8b:5f:f2:7e:e5:ab:a8:b1:de:13:17:
62:63:53:21:33:37:ed:3b:26:06:ea:51:fb:77:fb:d0:8c:45:
7d:21:cc:31:b2:e4:af:2f:b5:09:c4:4f:2e:ba:b9:68:17:08:
b9:68:75:84:78:2a:f6:6a:b6:52:12:a9:25:19:cd:b6:b2:b2:
36:55:89:e3:0f:e5:99:94:06:9a:c0:49:48:43:55:6f:01:19:
92:f4:8e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:46:16 2025 by rpki-client