Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_iR6lQd--R6XAlqJ87ZNd_W2jfo.roa
File: _iR6lQd--R6XAlqJ87ZNd_W2jfo.roa (raw, json)
Hash identifier: iGjYDIQFvvOeOuNMokrwG3pUsEHXiUh+Fe22TaL8Vz4=
Subject key identifier: FE:24:7A:95:07:7E:F9:1E:97:02:5A:89:F3:B6:4D:77:F5:B6:8D:FA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186571C397FD496631F92326D306FA4A3AD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_iR6lQd--R6XAlqJ87ZNd_W2jfo.roa
Signing time: Wed 15 Feb 2023 22:05:12 +0000
ROA not before: Wed 15 Feb 2023 22:05:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:571b:5ca6/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:57:1c:39:7f:d4:96:63:1f:92:32:6d:30:6f:a4:a3:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 15 22:05:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe247a95077ef91e97025a89f3b64d77f5b68dfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:25:d8:09:2e:8e:59:17:2c:b7:7b:d3:c4:3f:
2f:63:0e:cc:75:47:f2:3c:3e:34:e1:43:f8:f4:19:
85:9b:03:f3:c3:41:36:4b:85:c7:c7:45:e5:d1:3d:
5a:96:42:26:3a:83:78:12:51:cc:33:02:35:5e:92:
1e:05:6b:9b:f9:47:0c:4a:22:69:84:10:cf:71:41:
ef:7f:a9:29:f5:de:0a:9a:af:02:ce:d9:e1:c1:dc:
bd:43:19:47:6d:a7:5c:20:54:f3:78:2d:c2:12:29:
ef:ff:c7:24:bc:ed:a6:c7:07:5e:d0:47:70:a2:2d:
e5:66:ad:9a:14:3e:27:f9:17:55:0c:41:cf:c7:0d:
27:09:6e:f0:7b:4d:4b:07:fd:c6:f4:0f:4e:bd:4f:
f3:81:c5:fe:c7:7d:4e:40:a4:2d:98:97:53:d4:bd:
7c:bd:86:4d:d8:c2:a9:a9:3d:f7:b1:81:02:a1:0a:
55:f8:9f:f0:25:24:ce:3a:cd:43:e0:8e:b6:f0:f2:
98:89:73:ff:3c:86:8e:05:96:bc:2a:94:94:e8:c2:
11:e4:ba:ac:62:60:cf:4c:fc:4b:b3:cf:2a:ee:cc:
56:a2:3f:7e:1d:0d:f9:1e:87:5a:54:11:14:2e:c4:
29:7f:d2:cb:c7:33:4c:e7:51:d5:e7:02:e5:09:af:
44:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:24:7A:95:07:7E:F9:1E:97:02:5A:89:F3:B6:4D:77:F5:B6:8D:FA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_iR6lQd--R6XAlqJ87ZNd_W2jfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
32:00:90:2f:27:30:e0:8e:6e:3b:c0:0c:0f:31:fc:29:12:1f:
2d:b0:8f:21:ed:3e:c0:37:6d:8c:57:b0:33:b2:1c:db:0a:ff:
61:c2:c0:2d:d3:3d:34:89:df:c7:a0:44:1c:83:5c:46:48:ad:
fc:d2:d3:41:49:b5:b2:8e:f8:96:d0:51:f5:f8:4e:ba:22:2a:
87:20:e2:cb:50:b9:f0:53:d6:38:79:77:2a:eb:42:d2:5c:7c:
c2:3f:f0:86:98:38:96:32:bd:d4:65:54:42:94:46:a4:81:ff:
22:db:ae:6e:ed:0e:86:f9:70:8e:56:a1:b5:9a:c1:32:4d:33:
a3:99:5d:3e:31:a1:c1:e4:88:03:04:e3:1b:fc:c3:f5:16:f1:
05:15:09:ac:85:1f:95:ee:dd:de:1e:59:3c:03:6f:ac:6e:8b:
af:7e:0d:21:3d:1e:d7:69:6a:2e:b8:a9:85:31:87:cf:5a:d3:
24:2e:96:67:6c:a9:7a:80:b6:eb:5c:7e:7c:4a:ad:33:1d:b1:
af:35:b9:a8:69:8d:40:12:d6:e1:a5:5c:55:22:e2:51:bb:6b:
0a:c8:e0:ac:0a:f6:0a:ce:5e:3f:1e:be:54:dc:77:e7:b1:39:
22:7d:38:f0:ce:f5:00:7a:f4:4e:92:63:36:3b:35:9c:d1:64:
f5:b7:b2:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:27:40 2025 by rpki-client