Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_YzXLsZSlkajSZfYvZa0RciCwAs.roa
File: _YzXLsZSlkajSZfYvZa0RciCwAs.roa (raw, json)
Hash identifier: a5Emecxf9DcemZetwZ1yv0Jk1htLawx6w3XxWnwepVU=
Subject key identifier: FD:8C:D7:2E:C6:52:96:46:A3:49:97:D8:BD:96:B4:45:C8:82:C0:0B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185FCCA32BE9C327AD59281AE0E9F7A5B5B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_YzXLsZSlkajSZfYvZa0RciCwAs.roa
Signing time: Sun 29 Jan 2023 09:09:47 +0000
ROA not before: Sun 29 Jan 2023 09:09:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:fc:ca:32:be:9c:32:7a:d5:92:81:ae:0e:9f:7a:5b:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 29 09:09:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd8cd72ec6529646a34997d8bd96b445c882c00b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f1:fc:34:d2:af:d9:03:6f:ef:9e:00:9a:c5:
f2:3d:c5:55:d7:af:ab:2b:90:a7:b6:61:48:2a:de:
90:d8:88:14:8c:8e:57:f7:9f:92:ba:15:92:14:e5:
31:4a:13:1e:8c:71:15:6d:01:f9:5f:1c:05:dd:15:
ff:4d:6a:f0:ff:02:8b:8e:8a:c4:58:ac:b1:38:97:
5c:3d:03:66:af:66:e9:9d:84:7b:78:3d:32:60:e1:
15:d8:80:fd:d8:57:cc:3a:56:4b:a7:84:da:96:c6:
bb:19:86:8d:87:ee:2e:97:64:69:c0:1f:75:59:d4:
5d:58:43:6e:fb:bc:07:0b:21:09:b2:78:fc:50:13:
9a:e4:ab:97:27:2d:16:f3:b4:ff:e9:cd:aa:4d:f5:
8f:b9:59:c8:98:72:44:49:e1:fa:9b:d3:bf:c3:87:
6c:d4:52:ff:df:1b:fa:a4:0f:35:72:07:d5:ca:48:
3b:7a:05:ca:5b:a9:96:08:d3:7f:1e:ba:4a:ec:c2:
a2:3e:d7:f4:4a:46:16:34:43:09:a2:30:90:66:23:
e6:53:23:a8:c8:ba:20:08:5f:01:9b:6d:75:27:04:
a4:c1:d5:f3:4d:8f:b5:46:3d:f1:f5:30:1f:44:e2:
5f:91:0b:6a:6d:9b:b2:69:2c:3a:5e:2d:36:98:85:
a5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:8C:D7:2E:C6:52:96:46:A3:49:97:D8:BD:96:B4:45:C8:82:C0:0B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_YzXLsZSlkajSZfYvZa0RciCwAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a1:49:12:27:02:ec:c0:4c:d3:5d:5b:fe:b2:c8:3e:3e:e8:90:
bb:d3:98:31:d8:59:8f:b9:4f:21:35:7a:b7:e1:5a:64:b2:b3:
62:7a:47:93:c5:be:7a:d6:20:57:e0:d8:44:a9:8c:be:15:a6:
17:1a:0f:73:6c:45:06:e9:1f:fb:f6:15:e6:ba:e2:12:c0:14:
11:af:18:5a:02:e5:d5:55:ae:1e:87:78:01:c5:7c:d2:54:30:
76:53:40:5f:e9:a1:b6:5d:4d:f9:d1:dc:08:9c:67:9a:3d:ca:
a1:14:56:b7:42:a4:2f:53:2d:ac:8f:de:84:df:5b:16:9f:eb:
45:14:e8:42:b6:9d:9e:32:91:d4:fe:cd:9c:03:ac:03:77:2c:
bf:c5:db:1a:e2:be:15:36:f7:53:0b:00:53:c9:2b:5d:62:a6:
ef:5e:8f:0f:2a:c7:56:5e:29:19:d1:e7:1f:f3:48:96:11:ca:
75:34:17:2f:8b:06:de:2d:0f:56:a2:55:7d:24:20:3d:79:40:
f7:ee:9f:27:7a:34:6b:7a:3e:50:6b:b9:91:c2:f8:a6:f0:fd:
ad:b4:e0:18:c0:ba:37:84:1a:19:32:52:60:b1:b1:44:5b:83:
36:4d:bd:a9:12:36:34:53:72:3b:a6:44:2e:50:7c:c5:7e:75:
30:12:85:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:28:01 2025 by rpki-client