Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iWcDqbmZfqaJ2aaJ53fi09dxdrw.roa
File: iWcDqbmZfqaJ2aaJ53fi09dxdrw.roa (raw, json)
Hash identifier: Nu4/qfV9KpZF0dPtlREn/FsbPvxaPwfLCrG+8DF+h/E=
Subject key identifier: 89:67:03:A9:B9:99:7E:A6:89:D9:A6:89:E7:77:E2:D3:D7:71:76:BC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185D398FDCF7AF0B755D4FC488AF5208D97
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iWcDqbmZfqaJ2aaJ53fi09dxdrw.roa
Signing time: Sat 21 Jan 2023 09:11:37 +0000
ROA not before: Sat 21 Jan 2023 09:11:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:d3:98:fd:cf:7a:f0:b7:55:d4:fc:48:8a:f5:20:8d:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 21 09:11:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=896703a9b9997ea689d9a689e777e2d3d77176bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6b:fe:a4:35:a4:b8:5e:c6:75:ab:bd:de:28:
eb:54:7e:b7:b5:55:36:d6:6c:f2:d1:66:6d:5b:b6:
99:7c:96:b2:76:e7:33:84:e8:42:08:72:59:e0:e1:
c9:09:40:98:80:1a:ce:e0:99:6d:ff:ee:50:ca:a2:
0b:b5:17:dc:ce:96:35:0a:5c:90:af:88:63:5d:af:
1d:32:12:28:7d:6f:03:03:0a:43:3d:0e:f2:30:75:
5c:f4:0d:00:89:6a:19:4b:34:07:6c:73:76:e1:aa:
b0:c4:d3:c8:c9:04:e3:f2:46:92:f9:04:e6:67:37:
19:a9:ff:bb:7d:d5:fc:33:8c:66:ff:59:e6:a5:b0:
e1:09:dc:be:94:b2:c0:de:45:53:ac:ea:fd:9e:8d:
c1:f1:15:6a:5a:62:5c:f3:e7:75:0b:c6:cf:c7:b0:
42:26:9a:a4:d7:e8:b7:37:48:62:ae:9d:ab:3f:e7:
48:82:ed:4b:8f:72:07:d6:ee:a5:d8:15:21:50:cf:
c0:c2:4f:e0:66:35:0d:c5:19:74:50:7e:4b:21:4e:
9c:0a:df:02:ca:2c:98:2f:b6:01:32:b1:ef:ab:99:
a6:13:48:a3:95:19:9d:8d:d6:5d:44:64:be:34:ba:
02:d7:f1:b5:de:3f:33:1e:b9:f6:a2:f8:18:70:6d:
42:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:67:03:A9:B9:99:7E:A6:89:D9:A6:89:E7:77:E2:D3:D7:71:76:BC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iWcDqbmZfqaJ2aaJ53fi09dxdrw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
88:12:55:c9:3c:17:af:45:d4:18:33:9d:b3:c7:76:83:21:9a:
71:bd:be:46:d1:6c:2a:09:ad:45:49:c5:ac:3b:f9:4b:00:76:
96:f4:8d:35:4e:4c:6b:95:42:80:01:ef:57:c2:92:dd:3f:f4:
fd:66:af:63:52:f1:11:9b:26:7e:6f:ee:c2:e2:8c:77:21:f8:
91:2e:81:eb:94:e0:4f:08:d4:58:18:ba:6c:0d:41:59:c0:77:
8f:32:fc:fd:6a:36:c1:91:1c:ad:2d:50:1d:11:c8:a1:dd:e3:
ef:f4:6d:32:02:fe:0f:0f:73:0a:96:31:36:6f:40:d5:fa:2a:
eb:0b:5c:63:40:27:0d:58:ee:5f:06:10:c6:16:c4:6f:99:01:
02:cd:64:8c:d6:40:e2:47:b9:ec:5d:83:01:22:27:6c:c7:d8:
a8:5a:7e:6a:63:67:ea:1c:9e:99:40:4c:6c:c7:a2:16:87:01:
78:ed:e3:9a:0a:55:dd:e6:7f:14:ce:33:df:98:91:84:38:5e:
b4:c3:ab:d0:1b:4e:f4:48:b0:66:95:b4:65:dc:fa:73:12:34:
ed:9d:96:37:98:bf:b1:e8:6a:ea:93:e5:59:47:ac:98:8b:f4:
d6:d2:3e:a3:6c:c0:b7:36:f2:6f:3d:6a:1f:6d:d2:58:a2:65:
60:44:23:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:21:50 2025 by rpki-client