Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gE2KFs0YfxaOkSZ2Oj5zw8kdLi4.roa
File: gE2KFs0YfxaOkSZ2Oj5zw8kdLi4.roa (raw, json)
Hash identifier: BdxFbzQgtdjLl0pO6togbFo2gZsrsNo2xjLtJT34CU4=
Subject key identifier: 80:4D:8A:16:CD:18:7F:16:8E:91:26:76:3A:3E:73:C3:C9:1D:2E:2E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185D9D02F415E85E59B83831EF2BFF52298
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gE2KFs0YfxaOkSZ2Oj5zw8kdLi4.roa
Signing time: Sun 22 Jan 2023 14:09:37 +0000
ROA not before: Sun 22 Jan 2023 14:09:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:d9:d0:2f:41:5e:85:e5:9b:83:83:1e:f2:bf:f5:22:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 22 14:09:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=804d8a16cd187f168e9126763a3e73c3c91d2e2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:84:66:04:74:51:6b:97:85:e6:b5:75:ff:3e:
6d:fe:d0:3c:11:aa:73:90:e1:1a:90:3a:83:4c:49:
4a:c6:1e:bd:b9:51:ad:a1:85:33:0d:5a:ec:f3:0d:
29:c2:0b:4f:ff:0d:09:9a:78:b0:1f:2c:e5:ec:73:
4b:35:75:de:04:7f:d6:c8:12:5f:b3:2c:98:ba:9d:
4d:ad:a6:54:2e:9c:4d:50:cd:44:4f:b3:00:f3:2c:
86:69:a7:18:5a:bd:8a:4f:b3:33:ce:d4:15:6a:e1:
19:a9:d7:3b:45:3d:95:1f:dd:08:83:7a:72:16:51:
b2:73:fa:0f:ef:0a:15:e1:88:c1:7e:a2:30:d8:84:
ff:69:84:fe:71:a2:83:7c:e2:69:10:d8:25:55:8d:
72:8e:aa:be:a9:1c:06:cc:3b:49:4f:9f:5b:a7:b1:
b1:f6:bf:7a:fc:05:bf:7c:43:50:fc:44:cc:2c:2d:
18:00:5d:78:e7:7e:be:0d:3d:9d:6e:46:eb:6b:0f:
ff:5c:85:84:d2:f2:f3:1a:fa:b5:98:7b:b0:02:ae:
70:1f:8c:f3:c4:0d:08:08:bd:b4:23:07:ca:39:99:
63:8b:ec:77:30:17:5a:c2:c1:f4:f6:dd:89:62:be:
50:a8:a3:de:e1:8b:68:62:7a:55:eb:62:22:28:9e:
c5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:4D:8A:16:CD:18:7F:16:8E:91:26:76:3A:3E:73:C3:C9:1D:2E:2E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gE2KFs0YfxaOkSZ2Oj5zw8kdLi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
23:86:6a:55:78:4a:a4:da:70:bd:8b:5c:58:b8:8e:42:a7:db:
aa:22:dd:d8:2b:e9:d5:69:f3:96:3c:3b:97:92:2d:40:1a:92:
65:91:5b:b7:d1:15:0c:f9:a6:87:3d:cc:b2:fe:bf:7e:0b:a9:
0e:a6:63:49:b1:85:92:cf:7a:38:55:76:53:75:a2:9f:75:8e:
3c:05:0f:b7:b3:6f:89:3d:19:1f:c7:a0:94:81:9e:c7:b9:76:
fb:62:a1:bf:05:eb:0e:7b:ca:20:1a:a5:43:d3:9a:f0:d2:b1:
f7:71:65:0a:21:a5:3e:f6:7f:63:4f:e9:40:71:ce:92:58:2c:
ea:3b:84:80:a3:dd:85:93:8c:50:2d:61:3b:95:7b:5a:f7:7f:
b0:aa:96:ec:c2:5b:a8:53:60:79:a9:d8:5b:5a:75:36:dd:eb:
6b:08:49:72:53:e1:ef:14:97:e5:f7:31:a3:fc:12:ef:9b:e9:
c4:53:26:4a:20:31:43:1d:84:50:5b:7a:aa:09:56:ba:61:14:
6a:fb:64:d9:50:03:bc:9a:b0:bc:9c:4d:d9:e0:35:b1:52:86:
c7:aa:25:a7:0c:31:b3:79:5c:9a:4b:76:89:42:3e:50:e8:42:
b1:c1:e9:c7:63:32:c7:89:e3:75:55:2a:fc:62:23:ec:8f:6f:
77:04:4a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 03:21:06 2025 by rpki-client