Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_llVYO-zlGPfmaPCP_yjLGezw0M.roa
File: _llVYO-zlGPfmaPCP_yjLGezw0M.roa (raw, json)
Hash identifier: +5pnKQ9ZOO4NX8+p84pQQxigdQiq019geFHOblkOXp4=
Subject key identifier: FE:59:55:60:EF:B3:94:63:DF:99:A3:C2:3F:FC:A3:2C:67:B3:C3:43
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01861C54E30957226D679416EBA78D35BA97
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_llVYO-zlGPfmaPCP_yjLGezw0M.roa
Signing time: Sat 04 Feb 2023 12:09:30 +0000
ROA not before: Sat 04 Feb 2023 12:09:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:1c:54:e3:09:57:22:6d:67:94:16:eb:a7:8d:35:ba:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 4 12:09:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe595560efb39463df99a3c23ffca32c67b3c343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c0:4c:cf:fb:ca:d6:09:c1:b6:d9:b5:b4:5c:
0e:c9:36:b8:f4:cf:0b:ec:02:6e:f5:a2:80:01:82:
49:90:98:2d:15:ff:fa:08:cb:4b:1f:e3:59:57:c6:
4d:27:55:0f:be:4f:73:d7:98:20:39:c7:99:26:1a:
29:19:67:bb:58:ba:8f:fc:75:73:3c:13:67:7e:57:
25:87:17:d4:fe:54:a1:11:21:d0:4c:ae:99:66:b8:
cf:95:20:73:99:2f:2a:79:e8:f0:9e:f8:3f:51:e7:
48:36:00:dd:5a:43:c0:63:80:d0:77:c9:8b:8d:f9:
c2:f3:d2:43:a6:09:1c:3e:72:29:0d:ba:8b:b6:a9:
a5:14:22:e8:86:30:3d:cd:38:9a:44:e6:af:1b:da:
ec:dd:b3:8d:86:21:96:b9:ec:99:f6:8d:47:49:08:
f5:54:35:c6:67:c9:e0:38:66:49:6a:f5:a9:09:67:
d6:b4:f9:11:bb:1f:bd:d6:14:fb:99:67:f8:d1:7d:
26:46:c0:b5:17:9b:80:48:a4:15:a0:48:09:2f:53:
2d:8c:e4:92:13:ab:87:99:ed:0c:fb:a1:dd:85:ad:
7b:d3:fa:64:b9:9a:bc:9a:18:68:ce:88:05:89:57:
24:ae:02:cb:02:e2:79:36:7c:21:21:49:69:08:3b:
02:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:59:55:60:EF:B3:94:63:DF:99:A3:C2:3F:FC:A3:2C:67:B3:C3:43
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_llVYO-zlGPfmaPCP_yjLGezw0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3f:e6:ba:46:e0:0a:02:d0:82:e0:4f:dd:72:e1:db:66:c0:39:
ec:e1:71:64:0d:ff:12:63:20:16:70:0d:5b:57:01:c1:2b:72:
ca:0e:57:ea:07:16:42:c1:82:b1:6c:90:b8:06:e2:c0:72:d7:
b4:bb:26:47:c7:da:30:53:67:18:09:f5:dc:94:01:17:8c:18:
87:de:cd:fe:13:a1:9d:96:94:b5:fc:60:2b:7a:39:06:43:4f:
04:f3:b6:21:62:89:07:61:b1:a5:d0:3e:e5:9a:4e:a7:af:5f:
ac:4f:44:78:38:f4:95:03:81:81:c8:f1:78:df:4d:df:d6:f9:
3e:1f:2c:d0:74:53:a8:40:8d:35:7c:ef:24:e0:99:d1:6b:7a:
69:1a:ce:1c:2e:21:0b:ac:a2:c8:a8:22:9b:41:b5:21:50:58:
07:7b:c0:31:34:ce:6b:dd:bf:54:60:27:d9:41:07:c7:7b:78:
a0:08:e8:4a:28:3d:93:46:20:99:ae:c3:48:e6:c7:d0:79:4a:
0e:56:b4:26:ac:95:a9:eb:18:3b:ef:8e:c4:a4:01:7b:9d:e9:
00:34:40:aa:57:88:5b:aa:fe:94:39:49:39:b0:b8:7f:c3:32:
b5:2c:37:c7:9c:8c:61:0b:27:77:f1:5c:ef:ee:54:e9:52:5d:
47:fb:cf:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:17:14 2025 by rpki-client