Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/i_-2SsZWmPZ6TDS9ZgHbuQsWVgA.roa
File: i_-2SsZWmPZ6TDS9ZgHbuQsWVgA.roa (raw, json)
Hash identifier: H0njHpQSlEzTyvcd4b0LOmdVdTWqjrwO0Jxj39FBl8o=
Subject key identifier: 8B:FF:B6:4A:C6:56:98:F6:7A:4C:34:BD:66:01:DB:B9:0B:16:56:00
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A30E97059B7D3B7EE082BAA4CDF6803B0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/i_-2SsZWmPZ6TDS9ZgHbuQsWVgA.roa
Signing time: Sat 26 Aug 2023 08:15:19 +0000
ROA not before: Sat 26 Aug 2023 08:15:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:30:e9:70:59:b7:d3:b7:ee:08:2b:aa:4c:df:68:03:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 26 08:15:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8bffb64ac65698f67a4c34bd6601dbb90b165600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:19:5b:af:bf:8a:b3:0e:c6:33:8b:0b:76:97:
aa:02:62:d4:2b:e2:fa:1a:c3:01:91:fa:09:0d:e3:
82:64:89:b1:42:80:99:ca:8b:2d:3b:4d:d3:19:ef:
55:5a:cd:40:be:0f:9c:06:09:c1:11:7d:e9:49:f6:
b3:80:08:99:a0:77:77:59:48:e2:f1:e9:83:df:36:
f4:26:ae:c2:49:1d:fd:24:45:68:d0:0f:55:0a:e0:
dc:29:bc:21:b0:3e:c3:e1:84:74:76:4c:31:35:25:
b5:d8:ee:03:3b:1f:f1:d1:39:cf:54:93:e1:ff:39:
03:44:34:ad:4a:f9:23:0b:fa:cf:20:70:88:6f:0a:
b0:29:38:16:d4:27:18:da:25:c4:68:bd:a7:59:cf:
ef:a0:a3:4a:09:5a:22:1c:31:8d:19:10:fa:67:f7:
82:cf:0e:09:8a:77:61:24:23:27:82:da:60:4f:10:
dc:c1:e4:bd:48:d0:8f:77:b5:b3:19:d2:6c:36:e2:
fd:53:df:2b:f3:b7:a4:a5:95:70:36:bb:90:25:e0:
46:7f:08:4f:06:35:6d:ca:33:07:40:07:d4:f2:8e:
82:39:3e:aa:84:bb:38:a4:7e:8d:36:7c:44:55:af:
d8:ac:94:61:29:e8:9e:fc:52:33:ac:fc:00:ec:49:
93:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:FF:B6:4A:C6:56:98:F6:7A:4C:34:BD:66:01:DB:B9:0B:16:56:00
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/i_-2SsZWmPZ6TDS9ZgHbuQsWVgA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
91:83:55:83:00:cc:6a:22:20:a3:4f:e3:26:13:1f:62:f1:2d:
75:fe:6e:ee:95:c7:c0:37:ae:ab:4e:35:fa:a6:93:61:b6:1b:
0c:9d:45:8f:19:4f:c5:f5:a1:46:a8:c7:a5:c5:23:cc:3e:97:
74:8f:f4:75:94:97:5f:d9:ee:bf:94:dd:f1:f3:53:5b:6a:d2:
8c:a3:cc:25:a5:d8:e6:17:e2:a3:c6:cb:7b:24:6d:92:d2:8b:
ca:19:96:66:e8:4b:dd:c4:49:16:7e:30:c1:2c:70:7d:ca:47:
30:f8:e4:f1:08:e5:9b:f8:d1:7b:b8:9c:ce:a8:c4:90:48:76:
ec:56:90:ba:b4:73:2b:0e:39:35:27:00:d9:64:d3:3b:2c:0d:
39:2b:72:47:23:86:51:e2:e0:ac:ee:b6:ea:a7:61:99:d5:21:
72:7f:b8:e0:6e:4f:ed:78:78:12:b7:d2:38:cb:12:4a:4c:86:
bd:e6:16:9b:f6:b3:59:cd:95:35:aa:b9:8f:9d:69:70:b6:2b:
3f:cc:b7:ff:74:0c:64:93:4e:45:6a:86:ec:46:33:48:50:8a:
91:a8:03:c5:d9:28:9e:7e:9e:0c:9d:34:3b:b0:33:31:5f:d1:
dd:d8:ad:0c:58:8d:38:c4:a3:aa:fb:7a:57:05:00:0a:34:7d:
69:81:a1:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 23:46:13 2025 by rpki-client