Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cP9ReANgP_8eDv9GBC3Rs5PmAzc.roa
File: cP9ReANgP_8eDv9GBC3Rs5PmAzc.roa (raw, json)
Hash identifier: /0L0iib+L0hEFTzVgiD96ldEPnpLxvawWT8fB07zz6I=
Subject key identifier: 70:FF:51:78:03:60:3F:FF:1E:0E:FF:46:04:2D:D1:B3:93:E6:03:37
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01852F3C67A070E6D464A448727635A82756
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cP9ReANgP_8eDv9GBC3Rs5PmAzc.roa
Signing time: Tue 20 Dec 2022 11:12:45 +0000
ROA not before: Tue 20 Dec 2022 11:12:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2f:3c:67:a0:70:e6:d4:64:a4:48:72:76:35:a8:27:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 20 11:12:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=70ff517803603fff1e0eff46042dd1b393e60337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:38:cb:3b:76:08:56:09:8e:b6:d5:5a:a6:86:
59:18:3c:70:9a:90:1f:b7:ed:69:38:a9:5c:9e:f7:
05:5d:20:8c:36:10:c7:46:93:08:1f:3d:05:c6:a6:
67:dc:d5:09:a2:38:41:d4:44:c2:01:49:1a:76:78:
c8:f3:45:f2:7d:36:8a:d7:99:c7:91:4d:ae:8c:67:
0f:d0:7f:f3:46:47:03:4c:8f:51:d7:b4:62:fd:c5:
5d:d5:d4:c9:a5:e4:0c:c4:21:60:17:93:9b:2e:bb:
89:9e:24:da:2d:e4:00:bd:b5:97:8b:2e:4b:c6:d6:
67:6b:5c:bb:de:6e:fc:9f:cf:22:1d:fc:cc:61:37:
91:f1:38:59:11:b9:78:29:c9:f0:66:bf:13:0b:85:
13:8e:ae:1e:79:4e:69:26:b9:07:41:4f:de:1f:ac:
07:8a:e5:b7:b7:6e:fc:fa:5c:8d:01:0f:02:b4:32:
b1:bb:68:39:3c:61:5e:c6:7f:22:8b:e1:68:e2:a0:
8e:d5:66:8e:48:e0:24:36:21:21:01:01:e2:fa:f5:
95:1d:62:72:c6:4e:b0:01:e4:34:e4:4e:24:31:b2:
dd:6a:ea:3a:1f:0f:db:2f:07:da:b3:fa:27:68:3d:
f3:b2:1c:fc:ab:78:bf:f0:9c:d0:9a:e5:34:95:5e:
5e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:FF:51:78:03:60:3F:FF:1E:0E:FF:46:04:2D:D1:B3:93:E6:03:37
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cP9ReANgP_8eDv9GBC3Rs5PmAzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5a:16:3e:7b:4a:bf:67:a0:a6:c7:cc:81:92:14:df:c4:92:b2:
38:ec:9a:a9:24:d4:6f:66:eb:c6:09:65:a9:67:3e:4d:9d:18:
f0:eb:c6:a4:87:56:d8:34:37:8f:c1:da:dc:51:0d:19:ca:aa:
7f:c5:40:6d:c0:24:3f:fa:a6:15:0b:a1:8a:26:75:aa:e1:9b:
ee:9f:0f:79:4d:af:9e:9c:32:ef:52:39:9d:02:57:f4:e4:7e:
6f:e9:8f:0b:8e:26:d2:8d:4c:97:92:5e:bf:97:34:80:28:f6:
5b:d0:01:ae:a7:a7:77:3c:f8:78:98:d7:1b:6d:ea:17:34:04:
2b:16:db:e7:cc:a8:37:7a:b0:d0:c5:34:b6:1b:f4:99:d2:5f:
26:7e:5d:87:ce:ce:99:78:b2:28:34:71:dd:76:4a:14:e7:03:
05:e3:63:5a:fb:2c:af:d9:7f:1b:e3:03:e7:c0:71:5a:50:dc:
39:f4:06:4a:40:b1:b3:ec:39:5d:2a:7a:47:b3:8c:d1:08:29:
fa:2f:ba:a9:10:4f:02:7d:08:53:4d:03:26:c2:a1:3d:a9:f2:
fe:e5:fd:09:c8:d8:2a:66:e5:fb:7b:40:21:bf:94:3a:ae:5f:
c1:4c:86:51:0e:55:39:df:49:38:fd:da:90:da:74:9e:7a:a0:
7d:11:cf:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:41:40 2025 by rpki-client