Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/krnN5T5DDPYFfiBcpvdUDuFoohQ.roa
File: krnN5T5DDPYFfiBcpvdUDuFoohQ.roa (raw, json)
Hash identifier: GtDxH5ZQpWOjwPAeLk1dxiaeLwkr9Spn5Tlo69VNWFo=
Subject key identifier: 92:B9:CD:E5:3E:43:0C:F6:05:7E:20:5C:A6:F7:54:0E:E1:68:A2:14
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01863FF5076092A180A73278FB4394B1DEEF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/krnN5T5DDPYFfiBcpvdUDuFoohQ.roa
Signing time: Sat 11 Feb 2023 10:11:08 +0000
ROA not before: Sat 11 Feb 2023 10:11:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:3f:f5:07:60:92:a1:80:a7:32:78:fb:43:94:b1:de:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 11 10:11:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=92b9cde53e430cf6057e205ca6f7540ee168a214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0a:12:18:a9:15:b2:0c:bf:e9:8c:b7:3e:08:
a3:60:00:74:9c:3e:e5:bc:74:8e:04:52:d6:09:d2:
a1:4e:34:c4:b3:6f:c7:95:fd:f4:4f:e1:23:dd:5a:
92:b5:ab:ad:ca:2d:4a:a4:8c:7c:9a:20:b0:49:72:
ad:1e:a9:86:a6:b1:ce:23:d1:ef:eb:2e:c7:25:1a:
85:85:c0:6a:4a:d4:01:32:6f:e0:71:3d:f3:15:f7:
2a:e5:d4:f2:02:09:83:dc:5f:af:16:64:a4:ad:44:
79:4c:e4:15:92:f2:8a:41:f6:64:3b:51:73:b6:80:
90:04:02:5c:da:02:83:27:2d:94:c0:3e:94:49:88:
86:16:cd:92:5a:ae:4b:92:a4:e1:e2:a0:39:54:8f:
7e:7b:ee:ec:98:37:17:97:ca:ab:9e:3e:e0:0f:ad:
aa:21:5b:8d:f9:e7:2c:2b:c4:3d:e8:5e:1a:b4:fc:
65:f6:16:4f:20:88:a3:07:12:9a:01:35:43:42:27:
fb:20:c1:4e:eb:3d:42:c1:8e:6c:68:3b:7c:b8:f5:
20:cf:e9:26:4c:d7:5a:58:2a:3d:11:6a:d5:e4:43:
4b:8a:5e:de:93:0a:cf:19:b4:7d:f7:8c:1d:77:29:
43:dd:6b:4a:ce:d5:f1:4f:5a:11:03:5f:90:11:35:
4f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:B9:CD:E5:3E:43:0C:F6:05:7E:20:5C:A6:F7:54:0E:E1:68:A2:14
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/krnN5T5DDPYFfiBcpvdUDuFoohQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
93:cf:52:61:78:0f:15:f6:a2:91:de:11:b7:04:9a:01:88:d7:
74:60:4e:22:1e:06:72:dc:4c:4f:42:91:a1:20:82:f3:96:7a:
09:65:62:9b:f9:3e:c9:c6:6e:c6:e1:1b:a0:63:fb:00:e7:0b:
6e:5d:b1:63:70:bd:26:d2:64:fd:e2:2f:a0:ed:8e:97:82:5a:
61:e0:63:c7:4b:d0:e9:7b:4d:d2:d1:6e:27:8c:b1:0b:1c:c4:
ad:35:f1:c2:56:3c:6d:a2:27:44:9a:a6:ae:8a:34:1f:a7:a0:
8c:39:da:c6:60:a3:ad:0c:7b:0b:a9:7d:ed:b6:68:11:b7:ce:
e8:b8:ba:ef:4b:70:f8:13:be:4d:aa:fb:cb:7a:95:b7:1e:27:
fb:db:4c:70:48:05:39:d5:42:92:6e:91:f4:17:33:9d:f0:15:
34:ca:7f:4a:07:a4:22:11:99:16:1e:4b:75:f2:f5:10:22:a5:
31:a2:e5:5e:b8:79:60:49:a4:95:8d:ac:9b:ec:f5:a2:81:97:
31:7e:a7:f4:c8:3d:c8:4c:ed:f4:8a:72:c8:b5:2f:2d:e5:c0:
de:74:b5:ef:e1:82:e6:e4:75:8d:15:96:b7:47:01:af:07:ae:
85:7c:c3:9b:bb:86:09:0e:0b:a0:7a:8d:3c:9a:50:c1:8e:c2:
72:0d:96:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:03:53 2025 by rpki-client