Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/l-5z_iTjHUOJyN9X-vyDITekacQ.roa
File: l-5z_iTjHUOJyN9X-vyDITekacQ.roa (raw, json)
Hash identifier: VnkHayOXoJsM7vuH3AYW8HZqQJCEtmCdt9g05QzoJOQ=
Subject key identifier: 97:EE:73:FE:24:E3:1D:43:89:C8:DF:57:FA:FC:83:21:37:A4:69:C4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01861D33F5C6E4722C1BC508232D8F465FD2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/l-5z_iTjHUOJyN9X-vyDITekacQ.roa
Signing time: Sat 04 Feb 2023 16:13:09 +0000
ROA not before: Sat 04 Feb 2023 16:13:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:1d:33:f5:c6:e4:72:2c:1b:c5:08:23:2d:8f:46:5f:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 4 16:13:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=97ee73fe24e31d4389c8df57fafc832137a469c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5f:35:7a:bc:38:99:91:6f:4a:79:79:ca:ef:
d2:f9:89:73:8e:b9:5f:6d:34:9e:54:18:49:d6:4b:
95:e0:58:6b:0f:77:21:f3:4b:0f:cb:58:16:82:df:
ca:45:1d:12:b3:96:e3:1e:76:df:b2:46:4a:b9:4b:
a2:a0:4a:67:1e:89:cb:60:a4:e4:1f:74:d6:e0:69:
a1:66:d2:59:6e:6e:5f:3f:2f:94:0c:54:06:37:9e:
3a:14:bd:0d:c3:2a:f4:71:45:32:40:dd:b6:91:0b:
77:4e:b8:bb:b4:55:dd:28:40:f6:8f:a4:73:76:2a:
4a:60:d2:30:d3:81:ef:28:76:21:8e:b9:34:5b:4f:
91:fd:39:eb:4e:4c:2b:ed:51:9a:8d:01:4b:d0:4e:
c8:65:8d:88:76:5d:f8:f7:d5:65:7f:31:97:61:a6:
60:c5:fb:4a:3c:4b:62:bc:ed:a1:4a:d0:5a:63:d0:
31:0b:cf:68:36:2e:89:46:28:f0:5e:71:c1:58:6e:
e8:31:48:9c:69:7b:07:1c:72:e1:8e:a5:44:ec:cf:
2f:bc:89:b3:23:c5:95:2c:70:7e:48:24:9d:01:42:
32:ea:ef:d9:1e:b3:f4:78:fd:5b:e1:44:a4:b5:63:
c2:20:7d:96:b7:ce:43:9b:92:61:04:03:46:66:ad:
ea:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:EE:73:FE:24:E3:1D:43:89:C8:DF:57:FA:FC:83:21:37:A4:69:C4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/l-5z_iTjHUOJyN9X-vyDITekacQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8c:84:91:b8:a7:d5:bc:ed:26:7e:72:70:7f:5f:ab:15:07:02:
6a:41:bc:d6:75:8b:47:bb:72:88:11:52:69:d2:fe:5a:02:ed:
0f:66:3f:6e:0a:60:30:ac:8c:94:68:65:72:cc:ad:e5:5c:d3:
75:3e:a6:65:0c:36:0d:a7:38:f6:11:eb:13:ac:b7:a8:8d:03:
f5:b5:b7:d1:d3:29:54:26:91:ca:22:cc:0f:51:a4:57:e1:2a:
c1:bc:31:52:34:0c:c7:3d:26:89:9d:2f:89:3e:98:84:f9:af:
df:85:13:1c:65:2c:81:9a:ba:a7:fc:5e:c9:1c:19:bb:f2:c2:
45:66:eb:9d:ae:f0:15:4a:8d:a2:78:f9:16:fb:68:a7:fb:9d:
b9:d7:a8:cb:e6:60:5d:2d:77:24:60:d5:af:95:a4:c4:98:56:
50:26:aa:48:ad:a0:bc:16:0d:a8:c0:7a:f7:11:a7:b9:9d:0d:
20:37:43:f0:00:79:a0:72:0a:cb:6b:9d:8a:d4:aa:8c:0c:d1:
ac:5c:2d:b9:a9:c9:6a:f7:25:12:ed:ca:c3:2f:80:ac:7e:a1:
0a:de:e3:b0:93:7f:e9:17:74:8f:22:3f:4a:4f:58:ed:56:e5:
71:33:1d:de:af:b7:a7:13:34:dc:0f:e1:6e:cd:72:83:ed:a4:
98:0e:99:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:50:13 2025 by rpki-client