Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/a-n4ichP2Plw5Owk2jOdsQ25DqM.roa
File: a-n4ichP2Plw5Owk2jOdsQ25DqM.roa (raw, json)
Hash identifier: KWUxvuyyVOBHOlTXwBwlhVJsl/OX45Ot+ZDvs+QkeFg=
Subject key identifier: 6B:E9:F8:89:C8:4F:D8:F9:70:E4:EC:24:DA:33:9D:B1:0D:B9:0E:A3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01863C4E47D0292A5862C8F0357D1D5F1D06
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/a-n4ichP2Plw5Owk2jOdsQ25DqM.roa
Signing time: Fri 10 Feb 2023 17:10:08 +0000
ROA not before: Fri 10 Feb 2023 17:10:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:3c:4e:47:d0:29:2a:58:62:c8:f0:35:7d:1d:5f:1d:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 10 17:10:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6be9f889c84fd8f970e4ec24da339db10db90ea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3b:2f:a6:02:8b:21:95:d2:88:7a:bb:58:65:
62:3a:47:bf:5c:bc:4e:68:0f:a9:b3:0e:35:26:40:
8f:c4:9a:ea:b6:c4:a3:d1:19:25:85:2d:9d:31:59:
b6:b3:0b:3b:99:66:39:9b:3f:98:a4:3b:c9:d8:98:
0b:80:2a:4b:50:f8:ed:b0:c6:41:49:ec:d6:fa:27:
ba:b8:73:77:e6:af:89:79:ba:f4:b6:c4:d7:24:af:
e7:7a:48:d7:2b:ef:4c:79:92:b6:45:d4:23:f6:07:
3c:21:33:4c:f5:5f:c7:0e:14:c7:e2:58:28:46:5f:
c6:6c:c1:5a:5f:2e:a1:08:ea:88:17:ea:89:a6:6e:
67:a8:1d:2b:ba:ed:24:da:f8:38:34:dd:ef:1a:68:
bb:48:d4:bd:1c:c1:bf:3f:ae:41:c8:b5:a6:d5:c6:
b7:ee:3a:50:f5:35:96:b0:70:8a:66:f9:70:59:40:
2d:97:03:36:8c:e3:ae:90:9b:20:61:08:f1:72:6f:
4c:84:6f:89:89:4d:aa:bc:50:c5:4e:fb:42:98:f7:
a1:55:c2:85:83:8c:6a:6c:ea:c7:25:56:5a:89:a6:
d0:a5:b7:c9:9e:bc:8a:9d:6d:0d:b6:34:9a:07:42:
a8:13:1b:dd:84:6e:7b:b3:f2:db:1b:08:02:10:54:
ad:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:E9:F8:89:C8:4F:D8:F9:70:E4:EC:24:DA:33:9D:B1:0D:B9:0E:A3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/a-n4ichP2Plw5Owk2jOdsQ25DqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
39:06:9a:66:8c:3d:fb:32:3f:36:a1:60:8b:3a:15:88:32:23:
ca:bb:e9:bd:af:0e:18:ab:6e:2d:07:87:0f:64:6e:c6:0f:63:
f2:b9:b9:10:0a:8e:0c:61:33:16:a4:69:50:60:cb:38:45:e1:
a6:90:75:93:a4:f4:2f:5d:c6:40:86:46:ba:17:3c:a3:a4:f1:
fe:cf:4c:c8:3d:08:4e:84:14:64:92:3a:06:0e:46:72:c7:e3:
62:2a:a4:25:00:71:13:0d:83:56:40:1b:db:8f:17:69:14:6f:
93:72:38:4d:85:5c:04:c0:d0:c0:42:ca:73:36:2b:60:57:1a:
48:98:fa:a1:0a:98:94:5e:d8:d1:09:72:75:31:ac:07:8c:7f:
8c:99:33:e5:04:cb:c3:b2:d0:6b:72:91:35:5e:1c:18:57:05:
ac:33:e8:b4:4d:5d:25:d8:6d:bf:47:72:20:17:02:0e:1f:91:
c0:1f:01:fd:6c:6c:72:ce:9f:98:26:73:38:b0:d2:f8:27:24:
c5:64:eb:a2:e2:5c:1b:31:90:91:29:85:1c:a4:1f:24:ba:8f:
c1:aa:18:75:9a:40:28:7b:d0:04:94:8b:d3:95:c2:72:22:c8:
85:c8:ec:1a:20:a8:15:7f:26:24:fc:23:97:c1:6e:87:87:f8:
3c:c1:93:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:34:49 2025 by rpki-client