Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cLwn6ZExOT4AXRskzAePs4XiO5I.roa
File: cLwn6ZExOT4AXRskzAePs4XiO5I.roa (raw, json)
Hash identifier: nLlonKRDAOi/F7Gbu4L02c23gt315PsDW9xCY7QWhVA=
Subject key identifier: 70:BC:27:E9:91:31:39:3E:00:5D:1B:24:CC:07:8F:B3:85:E2:3B:92
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01853128F8D22734ECDDC21E50FF78E30D78
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cLwn6ZExOT4AXRskzAePs4XiO5I.roa
Signing time: Tue 20 Dec 2022 20:10:46 +0000
ROA not before: Tue 20 Dec 2022 20:10:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:31:28:f8:d2:27:34:ec:dd:c2:1e:50:ff:78:e3:0d:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 20 20:10:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=70bc27e99131393e005d1b24cc078fb385e23b92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f9:73:13:de:17:a3:b8:d6:9c:6b:50:f2:e7:
9d:6c:2c:4c:5f:f4:27:97:92:d5:33:19:9c:e6:4b:
ed:22:1e:a5:df:ed:3d:49:9a:d9:19:57:70:2d:ce:
96:75:ab:d7:8f:35:1e:6b:04:58:30:7d:3d:56:fd:
5a:9f:e1:a3:42:7a:f1:33:eb:a3:a9:5d:ec:00:8e:
cb:8c:ee:56:7c:cb:83:62:7f:9b:e1:80:ab:79:ca:
00:24:54:f1:ca:f9:71:af:a8:5e:92:ae:7d:e5:a3:
74:b2:e4:03:a8:a4:66:a3:b1:60:51:a7:91:7c:3a:
4e:67:39:63:fe:22:73:f3:68:de:84:d3:64:4d:41:
a8:d1:9d:5e:56:11:9b:3c:99:76:cb:0a:cd:12:e1:
82:9c:b8:b4:28:64:b5:28:ad:1d:28:55:c0:48:21:
3c:9e:bd:a5:61:49:28:03:c9:7d:0b:58:3b:fd:54:
19:22:37:5f:ce:05:4c:dd:98:3c:cb:ca:6a:64:10:
f0:b7:c3:10:e9:dc:a3:c0:30:65:d2:66:51:19:e1:
00:6d:9b:65:69:08:17:b4:2b:00:e8:5c:2d:5f:f2:
79:57:b1:1a:62:a0:47:80:c8:e9:f8:84:46:97:52:
61:b9:f7:dd:93:0c:8f:e4:82:77:3e:0e:26:2d:d7:
d2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:BC:27:E9:91:31:39:3E:00:5D:1B:24:CC:07:8F:B3:85:E2:3B:92
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cLwn6ZExOT4AXRskzAePs4XiO5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7b:e3:a2:dd:fa:10:90:04:4f:5d:1c:60:64:93:99:19:a5:29:
2e:da:c5:44:8a:f2:f4:12:ce:1c:3f:2b:23:e1:7a:30:b9:10:
8e:ae:e3:48:94:7a:3d:cb:fc:5c:53:4b:c0:6f:b7:84:bd:68:
48:a1:be:b1:f2:4c:4b:a3:cd:2b:83:bc:39:b2:8c:7a:0b:47:
01:1c:c2:68:6d:9f:6f:f6:8d:52:df:dd:05:97:db:e7:65:2a:
af:7c:3f:19:1f:b1:6e:87:73:8e:3c:d3:12:31:bb:48:1a:bc:
3b:60:34:65:a9:8f:85:31:77:08:90:38:41:2f:b5:2f:81:2d:
ef:cb:08:67:91:f7:13:e5:94:65:f9:74:30:28:ad:43:cb:af:
ab:fc:e3:34:f7:9d:5f:7a:44:60:78:81:f3:7d:39:27:2a:b1:
1a:b5:a7:53:4e:02:44:94:a5:dc:48:9d:d6:e3:d9:6c:90:3e:
54:86:62:27:2f:0a:77:bd:3c:f8:d3:80:2f:67:ed:65:2c:f5:
93:7f:1c:2c:e3:d8:6a:eb:17:56:78:60:cf:be:31:61:4a:2a:
38:bf:b9:ee:9f:18:e9:12:cd:7f:15:c0:38:34:5e:ae:07:50:
b9:38:c8:f1:74:af:08:7d:3c:1d:3d:9c:3d:96:62:b6:ac:47:
09:be:a1:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:39:17 2025 by rpki-client