Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iPYXFwpZd4LgqAB1yBE3EAlG1as.roa
File: iPYXFwpZd4LgqAB1yBE3EAlG1as.roa (raw, json)
Hash identifier: +g6rr3uyR/GsjKCNYmQFk2KJM93da1MgLiuROv8wiD0=
Subject key identifier: 88:F6:17:17:0A:59:77:82:E0:A8:00:75:C8:11:37:10:09:46:D5:AB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018615E49EF70EFABED4EE28AAFEE3BBA343
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iPYXFwpZd4LgqAB1yBE3EAlG1as.roa
Signing time: Fri 03 Feb 2023 06:09:09 +0000
ROA not before: Fri 03 Feb 2023 06:09:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:15:e4:9e:f7:0e:fa:be:d4:ee:28:aa:fe:e3:bb:a3:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 3 06:09:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=88f617170a597782e0a80075c81137100946d5ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:99:de:27:f8:f1:35:48:5b:6e:87:cb:0d:8b:
3e:df:bf:65:ae:52:0f:c8:82:37:44:72:e6:83:62:
3f:28:89:50:72:c2:f8:82:46:68:fd:85:e0:93:0b:
1c:fd:d0:d9:5e:0b:dc:1c:23:c0:4b:78:f6:9c:4b:
66:72:cd:b7:d2:ae:c1:d4:26:b7:0e:f5:d0:6d:34:
f2:a5:29:ce:a1:ba:8c:4e:76:7f:a8:87:18:5c:c5:
08:f0:72:8c:55:e8:af:4e:a6:69:44:53:0b:02:17:
42:8e:85:96:df:ca:bd:26:c4:b7:a6:60:19:51:d7:
89:e9:a1:89:f0:4f:46:71:60:89:38:51:90:5d:bb:
4d:51:91:62:f3:d4:1b:9f:c4:df:c2:ba:fa:df:40:
e8:43:ea:ce:e9:d1:b2:90:51:94:45:30:5a:72:52:
27:06:54:08:3d:32:20:02:d2:60:f0:78:99:9c:f3:
a0:fa:38:4e:bf:8e:0d:58:3f:b5:3e:e0:d8:22:aa:
08:34:f6:ae:ee:84:9b:f2:f8:85:76:a5:4f:cf:dd:
06:76:4f:81:cd:a5:ca:59:7d:46:4a:74:88:a5:35:
39:c1:73:68:4e:91:50:dc:f0:eb:58:1f:49:83:a1:
84:f5:d6:69:5e:16:e2:1c:95:f4:49:c1:3c:12:bb:
b5:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:F6:17:17:0A:59:77:82:E0:A8:00:75:C8:11:37:10:09:46:D5:AB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iPYXFwpZd4LgqAB1yBE3EAlG1as.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
23:f9:e5:12:83:48:c4:22:4d:76:c2:c9:bb:95:5e:cc:e6:7e:
7e:d2:7e:56:41:51:e5:ff:2b:f3:60:66:ed:8f:b3:9a:ce:f0:
da:aa:63:c3:72:56:9f:0e:3f:3d:9e:e1:e3:23:87:14:7b:f9:
67:85:18:fb:98:93:a3:32:b7:57:3c:17:92:fc:2c:41:a1:d7:
e3:5c:44:a8:58:63:0e:d8:30:79:1c:ab:0a:e4:26:7f:e0:a1:
1f:bb:20:d3:85:3c:8d:bd:14:89:dd:28:0f:e0:91:fe:46:08:
99:ac:f7:5e:41:33:c1:d9:db:4f:50:25:9a:4d:5d:39:fd:08:
38:79:e2:a3:17:b5:a1:ff:82:5f:34:6e:dc:88:f6:4b:78:ae:
9f:54:ad:35:5f:d0:d2:f5:30:cc:ce:c2:39:74:09:44:21:59:
ad:49:84:aa:75:60:27:b4:dc:40:fe:e0:9a:04:dc:8f:67:34:
45:36:0a:78:60:34:8e:da:4e:f9:ff:11:6c:10:1c:2d:16:45:
6b:2c:d8:ea:2e:d9:e7:48:31:9b:5b:db:c6:14:a5:80:ab:9b:
71:b5:bc:9a:d0:8e:6c:ed:3e:7e:cc:5c:60:4c:32:32:ed:e9:
27:37:42:79:70:02:4c:0f:4d:30:04:8a:ad:86:58:37:93:8a:
91:66:bf:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:31:08 2025 by rpki-client