Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/l5qOdqn1QlVGDGLPRBVEBp2oXG8.roa
File: l5qOdqn1QlVGDGLPRBVEBp2oXG8.roa (raw, json)
Hash identifier: UHiXhEuwuMWjmysRA5WjNetqntbptcy0UC6noKfnrMw=
Subject key identifier: 97:9A:8E:76:A9:F5:42:55:46:0C:62:CF:44:15:44:06:9D:A8:5C:6F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184D7422B8D00F542D8082A5F812E2C7E2E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/l5qOdqn1QlVGDGLPRBVEBp2oXG8.roa
Signing time: Sat 03 Dec 2022 09:12:28 +0000
ROA not before: Sat 03 Dec 2022 09:12:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d7:42:2b:8d:00:f5:42:d8:08:2a:5f:81:2e:2c:7e:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 3 09:12:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=979a8e76a9f54255460c62cf441544069da85c6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:64:ed:fd:2e:31:7c:a3:88:ce:d6:22:1d:eb:
01:5b:b4:45:53:12:0d:f2:be:f2:b4:cd:9d:b1:09:
72:42:45:12:df:0b:b8:1e:31:40:eb:9c:e7:d0:52:
37:b0:23:12:37:2b:3c:68:d4:e7:c2:2d:64:16:d1:
86:4b:5f:54:30:6e:49:69:0c:1b:73:84:83:ce:3f:
31:90:4d:62:54:30:39:41:e2:2c:08:4d:16:88:fe:
e0:cc:ae:c2:78:14:41:77:74:ad:32:ba:1a:bd:01:
a0:cb:9e:ee:7b:9f:d8:eb:5f:7c:f1:ca:58:7c:0b:
65:9f:5e:db:d1:72:e7:b1:40:a9:cb:aa:8c:48:8f:
3f:b0:45:bc:b7:b1:3a:15:ca:ab:34:1e:4a:58:99:
fb:bb:a4:3f:65:fc:2d:11:eb:75:2a:ab:c9:50:65:
16:1e:31:94:9a:08:8c:6b:cd:5a:ef:75:01:81:79:
5f:7c:48:bc:99:f8:db:db:02:5d:41:74:8f:37:4d:
da:be:1e:70:c0:55:9e:f8:cd:c9:fe:21:7e:f5:f9:
df:bf:f3:93:0a:9f:de:f6:b2:03:de:59:6e:8a:3f:
19:f5:c7:01:b8:de:e7:fc:96:72:42:77:f3:89:e6:
b5:85:9c:65:42:93:00:44:bf:7e:20:b7:d6:51:e4:
ba:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:9A:8E:76:A9:F5:42:55:46:0C:62:CF:44:15:44:06:9D:A8:5C:6F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/l5qOdqn1QlVGDGLPRBVEBp2oXG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
99:86:40:d9:44:fc:5b:37:d9:2e:c3:0e:92:fc:d8:33:05:62:
4a:0b:94:41:d4:5b:1d:99:3b:1d:be:a8:0a:1e:46:65:e4:7b:
15:e3:30:38:f1:31:bd:34:6a:dc:0f:2d:ee:08:8d:8e:ab:b6:
ae:42:91:33:83:a4:2c:b8:8b:42:c5:35:7a:94:28:da:23:d4:
99:8e:61:03:04:55:04:b7:78:99:d5:e9:2a:10:28:f3:a3:50:
c4:7a:f2:21:fb:54:85:8a:65:81:ce:e2:ec:2c:ae:71:27:8a:
8d:14:31:66:3e:3a:19:ee:f9:75:66:da:b1:9c:ff:ee:05:d4:
1a:a4:d6:5e:ac:73:24:80:a5:84:53:0a:cd:37:2b:74:f8:dc:
21:74:3e:58:e0:31:b8:55:91:b6:20:ec:fd:1c:51:19:f9:18:
ab:04:16:74:05:c4:db:4b:73:37:18:3c:6b:db:f7:2e:59:a3:
61:60:8f:ee:d4:bd:79:49:9c:dc:5e:c0:fa:f2:11:6f:14:e2:
3a:c5:35:cf:bf:d0:1d:24:dd:2e:37:9f:31:c1:59:ca:f8:aa:
b2:62:bd:71:45:1c:7a:e7:c1:29:32:32:f6:fd:ad:21:1c:5e:
36:1e:df:6b:8f:12:83:eb:2d:9c:3a:15:ad:57:49:46:72:b5:
9b:0a:3f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:13:42 2025 by rpki-client