Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/c88uM4uI4BGMKXXp72JDHf6LQv4.roa
File: c88uM4uI4BGMKXXp72JDHf6LQv4.roa (raw, json)
Hash identifier: nN/SS5COwA2KunbI1m6gQ0CZG3jvvx0CTyvbkAWB/Nk=
Subject key identifier: 73:CF:2E:33:8B:88:E0:11:8C:29:75:E9:EF:62:43:1D:FE:8B:42:FE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A3D9267CE3EA457D07461025CC8CD0D48
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/c88uM4uI4BGMKXXp72JDHf6LQv4.roa
Signing time: Mon 28 Aug 2023 19:15:19 +0000
ROA not before: Mon 28 Aug 2023 19:15:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:3d:92:67:ce:3e:a4:57:d0:74:61:02:5c:c8:cd:0d:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 28 19:15:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=73cf2e338b88e0118c2975e9ef62431dfe8b42fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:6c:56:84:5a:fe:0c:5a:6e:6f:a6:39:05:6e:
d4:30:a4:3f:1d:a5:8b:36:9d:e2:a2:b7:e1:7e:04:
7a:28:18:01:d5:a7:0e:12:3c:7a:73:fd:69:ca:85:
e4:63:2f:ed:a1:de:23:9a:96:62:db:29:89:bc:1e:
73:c3:14:f0:1f:81:bc:43:aa:cd:71:bb:a2:73:07:
27:8b:a5:dd:70:a7:10:54:db:8e:91:e6:a0:47:3c:
56:c3:42:1b:6a:b6:93:9f:e5:79:69:6e:33:8a:5a:
30:36:b0:bc:9e:1e:f4:e4:ff:c1:ff:7b:3c:44:ad:
05:4c:fb:10:1b:e7:9e:96:58:ca:60:4b:34:85:80:
a9:f2:12:48:b7:18:29:c4:dc:ab:8e:68:19:e7:76:
f7:5a:12:3c:26:e4:3e:30:e0:4c:50:e9:f3:a9:ac:
c6:8f:1d:90:6c:4c:8b:18:50:59:23:38:bb:24:e7:
db:bb:d7:95:39:a6:ad:a2:22:17:e2:92:3a:55:c0:
f1:00:c2:05:c6:43:a0:bb:e1:d5:df:97:ca:a0:08:
ab:e9:bb:0f:a5:bb:19:47:5e:75:b5:35:ad:bc:b7:
70:dc:b7:7c:a1:49:ca:3d:8c:fd:30:73:9e:75:2e:
69:1a:a2:97:61:a2:53:4e:c5:b5:71:84:c1:82:84:
40:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:CF:2E:33:8B:88:E0:11:8C:29:75:E9:EF:62:43:1D:FE:8B:42:FE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/c88uM4uI4BGMKXXp72JDHf6LQv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
28:d5:49:61:6c:fa:13:5d:b3:ba:47:24:2b:cb:74:0e:d8:02:
44:17:e6:7a:c6:d8:a7:95:e4:22:a6:f3:d4:9d:4d:d1:10:91:
44:b3:73:04:dc:dd:19:93:b7:a4:fc:34:6a:6f:75:1d:fb:6f:
8d:85:a3:82:95:00:af:d9:9f:71:c3:98:fa:4e:2e:c2:e6:b8:
19:72:27:19:02:b1:aa:3a:65:b9:6e:db:8f:c3:e3:16:fd:28:
99:73:65:53:c8:e4:42:d7:19:0d:b5:66:1b:de:ae:bc:bc:05:
0c:f8:b0:ae:b0:a9:52:35:ee:aa:47:4d:d4:13:16:d3:59:8d:
ac:6a:60:6d:b3:8a:9f:cf:77:7c:92:16:cc:ae:ee:a2:b1:71:
c5:f5:60:13:41:94:97:65:76:70:04:d4:eb:39:8d:d6:21:d3:
b0:d5:1c:2d:a0:88:38:be:eb:49:fe:cc:36:fa:69:33:f7:b5:
98:58:07:ad:ad:f7:69:52:2f:19:24:c3:81:6b:dd:47:22:2c:
6a:94:5a:be:b5:64:51:66:01:c9:cd:80:43:a7:da:d2:c8:af:
eb:8b:39:42:5c:a7:35:d8:17:33:32:a4:5b:b3:9f:91:ba:0e:
e7:fc:de:f6:07:82:9c:7f:27:0d:8e:7c:ba:54:aa:55:20:45:
10:5a:0a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:19:15 2025 by rpki-client