Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eJ3QDPGAAXrg4dtjHivzlS-_3l4.roa
File: eJ3QDPGAAXrg4dtjHivzlS-_3l4.roa (raw, json)
Hash identifier: a70orJps8EWQPPto0J8yGg7IB917REDMaLINsWg/oQQ=
Subject key identifier: 78:9D:D0:0C:F1:80:01:7A:E0:E1:DB:63:1E:2B:F3:95:2F:BF:DE:5E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018613F8FB0B005A62E962C22BE2EBBBBAC8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eJ3QDPGAAXrg4dtjHivzlS-_3l4.roa
Signing time: Thu 02 Feb 2023 21:12:09 +0000
ROA not before: Thu 02 Feb 2023 21:12:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:13:f8:fb:0b:00:5a:62:e9:62:c2:2b:e2:eb:bb:ba:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 2 21:12:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=789dd00cf180017ae0e1db631e2bf3952fbfde5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f7:b8:0e:42:33:0b:30:1e:5b:56:02:1b:44:
d7:84:ab:41:33:c2:ee:20:44:5d:41:72:5e:eb:3e:
42:80:f0:e8:b1:4e:b0:a2:0f:5c:a0:40:6d:ae:61:
7d:c2:77:03:22:33:8e:d2:d2:d8:ff:4f:c2:b8:07:
72:f2:f3:0c:e2:b0:fc:59:57:28:9a:12:7a:d6:0b:
de:f8:06:97:09:ec:7d:4a:5a:58:41:ed:89:ff:e6:
70:5c:ca:d3:25:3a:9e:33:37:f7:6c:41:e2:8f:62:
80:59:54:68:38:fe:00:99:5c:41:31:23:65:50:12:
c1:d6:7c:eb:e6:09:72:21:fc:98:25:4e:87:71:41:
d8:b2:83:15:87:84:cf:e8:8a:07:ff:b8:c8:3b:fc:
04:c7:a7:db:d0:81:28:5d:99:66:29:03:66:35:df:
cf:6e:24:ca:0d:73:7d:e1:c1:8f:6b:bc:26:51:0e:
cc:62:ea:b0:cd:7b:60:0d:8d:98:38:45:c9:18:8b:
d6:a9:aa:de:91:f8:68:41:04:1d:98:1a:40:04:e3:
03:91:3f:90:e5:16:d2:86:d5:32:98:3d:f6:5b:da:
14:e4:7a:b6:8b:17:0d:95:1b:58:a0:60:47:0d:9e:
bf:92:2f:57:e6:3e:f2:33:07:98:6b:90:5f:06:ee:
9b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:9D:D0:0C:F1:80:01:7A:E0:E1:DB:63:1E:2B:F3:95:2F:BF:DE:5E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eJ3QDPGAAXrg4dtjHivzlS-_3l4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
10:ae:11:54:79:2b:d8:09:b6:0b:be:cf:c5:35:01:05:64:8e:
8e:cb:53:9e:b3:b1:65:24:21:70:54:dd:73:77:98:8f:6f:ea:
ff:fd:91:bf:24:62:85:da:72:fa:03:d8:ac:2b:69:d4:5d:69:
eb:18:3c:8a:97:27:32:7f:a1:2c:e4:a3:6d:88:33:89:3b:e4:
db:9f:1e:7e:c2:14:99:4d:9b:dd:30:10:09:35:81:d2:8f:91:
79:a8:e3:0d:1d:2a:1b:52:f6:66:25:48:98:61:fc:7e:cb:74:
b3:47:b2:a6:56:d9:b8:9f:10:cf:5d:10:ca:d7:7f:c5:c4:13:
6a:11:1d:e4:61:7d:87:b3:47:99:a0:2a:14:90:49:16:bf:12:
98:4e:7a:49:03:b3:10:e6:34:f6:d3:06:e3:2f:be:a8:32:40:
bb:09:59:ec:32:6c:1e:fb:71:9f:1a:1f:27:9c:8a:ae:fb:ac:
5d:77:5d:a7:1a:f8:b3:a7:f1:ae:4d:f5:d9:e3:79:e4:5f:87:
0d:00:04:52:88:d0:dd:73:29:0f:a3:80:8e:c9:42:da:ac:a0:
14:bd:f5:72:66:b3:1e:10:19:4d:0b:3b:14:a8:11:e3:ac:99:
b2:c9:15:bb:92:22:bf:27:92:66:f3:5e:17:b8:fb:c0:0c:8f:
32:8d:08:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 10:07:26 2025 by rpki-client