Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lEcnod_DFsrHjbS_Qg7sGfH-k0g.roa
File: lEcnod_DFsrHjbS_Qg7sGfH-k0g.roa (raw, json)
Hash identifier: N4EtA4PU2uZMxrEDx3MOAYhxkhNXckwcfJtZMF0eOqM=
Subject key identifier: 94:47:27:A1:DF:C3:16:CA:C7:8D:B4:BF:42:0E:EC:19:F1:FE:93:48
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01864D0B4A2F6492EECCFA579B48A05AF6C6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lEcnod_DFsrHjbS_Qg7sGfH-k0g.roa
Signing time: Mon 13 Feb 2023 23:10:30 +0000
ROA not before: Mon 13 Feb 2023 23:10:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:4d:0b:4a:2f:64:92:ee:cc:fa:57:9b:48:a0:5a:f6:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 13 23:10:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=944727a1dfc316cac78db4bf420eec19f1fe9348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9c:ae:37:07:2c:86:89:98:12:09:d2:d5:6e:
95:f8:92:62:8a:bd:4e:a2:cf:43:98:38:c5:a7:a1:
50:7f:27:5f:1e:e6:2a:3c:58:bc:8e:4b:ed:89:09:
d6:c9:00:00:ef:9c:a8:19:37:a0:c2:c7:10:18:a7:
6a:6f:ae:1e:9b:f0:54:fb:cc:4e:69:7c:e8:55:4f:
60:63:54:d9:06:cf:e5:42:b1:64:54:f7:99:8f:5d:
38:75:a5:97:ed:5a:f4:d5:8d:fa:bf:6b:01:19:8f:
06:9f:af:4e:3e:17:2d:e3:e5:56:90:cd:56:c2:3c:
1f:45:36:2e:fe:4d:c1:ba:7e:86:a0:4c:5e:c8:03:
2f:a3:7a:dc:c0:58:bc:75:93:15:bf:33:5c:a2:7e:
ab:b9:88:db:8a:48:39:48:7a:d1:c6:d5:b9:ee:a9:
af:b4:12:3f:60:a0:36:eb:77:f2:16:b8:37:ff:6d:
54:78:3e:54:67:0b:df:c5:75:aa:b0:2f:15:e7:53:
bd:e0:2b:3a:18:ce:00:92:f2:98:aa:51:57:0b:ff:
17:46:8c:30:46:12:56:20:cd:ac:14:17:b1:91:b8:
ae:bc:72:c0:8a:ba:f9:d6:23:33:c8:16:61:d7:01:
2b:e8:c4:fa:b3:22:b6:5c:d6:69:ae:0c:c6:cc:94:
48:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:47:27:A1:DF:C3:16:CA:C7:8D:B4:BF:42:0E:EC:19:F1:FE:93:48
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lEcnod_DFsrHjbS_Qg7sGfH-k0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7d:28:5e:7e:e1:4c:e0:ba:6d:75:31:96:53:db:1b:10:d4:f4:
eb:8e:6d:84:37:d0:40:44:fe:bb:c1:22:3f:1a:ca:28:14:aa:
ea:c5:89:90:9c:40:a8:bb:f0:a5:37:d9:e6:f0:e5:35:ec:aa:
65:73:4b:e4:7a:25:a2:c6:c8:d6:1f:64:dc:b5:4c:f5:5a:53:
f5:38:92:41:9a:b1:1c:18:14:ec:45:3c:d1:38:13:4e:2f:95:
c0:e5:0c:ee:bf:b9:0b:e5:44:93:78:52:0b:ba:b3:eb:6b:f1:
14:43:d8:da:15:97:3b:0b:d6:a6:ca:7e:f6:16:12:f6:64:1d:
59:f5:61:8a:69:7f:0b:fa:4f:ff:38:c1:23:ff:f4:a7:87:9b:
72:99:d4:51:e8:14:d6:2d:33:40:b8:71:e3:1c:7e:04:52:87:
7e:1e:4a:66:69:0c:24:db:69:6c:98:db:f9:b2:4e:b0:fe:e9:
30:95:1a:01:b4:b4:c5:ee:b5:55:5f:50:fe:ba:24:a7:20:1d:
3d:c0:96:ad:d3:cc:4c:84:fc:5e:e2:53:53:5b:c7:b2:0f:5b:
fe:e4:24:7c:8c:ec:43:06:03:66:ce:5c:31:57:d1:08:20:16:
2d:56:08:a8:fa:26:20:20:be:f5:0d:19:f7:a5:68:36:db:eb:
d3:52:80:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:13:48 2025 by rpki-client