Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iV9nqjXOed7tZkAZle72JRISmig.roa
File: iV9nqjXOed7tZkAZle72JRISmig.roa (raw, json)
Hash identifier: W8UMNufK5ktbBzUYGpyIHzvMyTEab7TycyofLwkqXCI=
Subject key identifier: 89:5F:67:AA:35:CE:79:DE:ED:66:40:19:95:EE:F6:25:12:12:9A:28
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01843DDB42D989256937C152091347D0E9C9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iV9nqjXOed7tZkAZle72JRISmig.roa
Signing time: Thu 03 Nov 2022 14:18:10 +0000
ROA not before: Thu 03 Nov 2022 14:18:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:3d:db:42:d9:89:25:69:37:c1:52:09:13:47:d0:e9:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 3 14:18:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=895f67aa35ce79deed66401995eef62512129a28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e1:8c:48:e0:0b:77:20:52:49:19:20:e6:23:
0b:97:e2:39:6c:af:2e:b4:4c:0a:5d:5d:9e:4a:72:
9a:86:e0:7b:04:76:6c:1e:87:68:e9:ac:1e:3e:d3:
3d:ae:51:f2:64:64:1b:11:1b:41:c4:a3:0c:9d:0e:
a4:43:a5:1f:f0:71:b4:58:c0:b6:a0:be:87:aa:b7:
02:a4:86:cd:b0:cf:bc:13:17:cc:db:d3:e2:48:0c:
50:af:fc:91:8a:a5:c2:f3:c9:ec:b2:20:d4:e9:df:
5e:ca:03:9c:be:0d:bc:6c:57:c4:b2:43:23:2f:16:
f7:98:6d:18:d1:2d:13:8f:d2:61:e4:8a:07:3a:87:
38:b8:dd:84:06:2b:da:ca:07:81:ad:00:f8:f2:a8:
d0:ad:70:74:36:7e:e0:ec:40:69:95:26:18:99:ef:
29:82:12:fc:68:2a:03:df:46:3b:25:7d:f4:4e:99:
b1:ae:ab:3a:4a:e3:d3:bc:36:3b:7c:64:d1:71:38:
48:14:52:e8:5f:d7:61:c2:a3:3f:20:ff:ec:c5:dd:
1a:48:9b:4c:e6:38:3e:ec:e6:3f:88:db:c5:d3:61:
f1:41:9c:34:fb:da:ad:02:a4:61:37:7a:2b:9f:ac:
dd:2e:3a:3c:c9:e2:f4:ec:ec:7e:51:ad:8a:4a:f2:
6c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:5F:67:AA:35:CE:79:DE:ED:66:40:19:95:EE:F6:25:12:12:9A:28
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iV9nqjXOed7tZkAZle72JRISmig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
09:c6:da:06:0d:db:03:55:2e:44:7e:e4:1e:79:64:3c:d4:66:
25:52:1d:40:75:14:17:49:ca:f6:d7:d1:2a:0c:5a:47:9b:52:
a7:25:90:2a:bd:b1:ac:53:ee:f3:74:2d:2b:10:ba:1e:ee:f1:
a6:ed:2f:b5:13:1e:ef:eb:01:99:1b:18:7f:ff:bb:b4:16:83:
fc:36:b7:88:21:de:68:38:a4:0f:cb:6f:54:a2:64:3b:75:41:
03:7c:ef:dd:6d:a1:58:6e:1d:f6:03:e2:ec:09:33:82:e0:fe:
e4:cb:97:d9:73:0e:4a:a8:1b:9c:be:2d:03:51:f7:c1:7e:00:
41:b0:f3:ab:19:7b:90:ab:b7:60:e9:6b:7c:d6:60:a1:29:ad:
9f:6a:61:02:ee:ea:5e:3d:69:f0:3c:93:86:1c:25:0a:40:fa:
c6:1d:5e:94:2a:a3:0f:89:45:26:bc:ca:11:ff:4f:6e:e2:78:
53:5d:ff:8b:13:f0:9b:0c:cd:25:98:31:91:74:6d:5b:30:27:
01:5b:a7:dd:cd:34:5e:38:7e:b7:c5:c9:ad:e7:f1:0d:52:a9:
ed:94:ea:78:f9:d3:15:9d:84:43:5e:6d:92:89:8d:0b:19:1b:
e3:c5:e6:3c:fc:cc:45:a0:c5:ea:b6:8f:54:ce:d7:fb:8b:cc:
18:b7:d7:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:08:35 2025 by rpki-client