Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/m0Gp26u85UGg1_B7Db7a0z6fmQ0.roa
File: m0Gp26u85UGg1_B7Db7a0z6fmQ0.roa (raw, json)
Hash identifier: waFi+e+EyUHIsq0rMsNI/ykjsBZFGGuMiH8I60H6+sQ=
Subject key identifier: 9B:41:A9:DB:AB:BC:E5:41:A0:D7:F0:7B:0D:BE:DA:D3:3E:9F:99:0D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185CD9444378FE80636B453EC6372802090
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/m0Gp26u85UGg1_B7Db7a0z6fmQ0.roa
Signing time: Fri 20 Jan 2023 05:08:44 +0000
ROA not before: Fri 20 Jan 2023 05:08:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:cd:94:44:37:8f:e8:06:36:b4:53:ec:63:72:80:20:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 20 05:08:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b41a9dbabbce541a0d7f07b0dbedad33e9f990d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b7:b5:2b:b0:d8:84:36:b5:27:bf:71:3f:9c:
de:e0:4b:b0:f5:4f:fa:eb:be:3b:d2:0f:15:d2:26:
3d:ff:e4:92:b0:80:f6:93:1e:92:12:e0:de:b5:ba:
03:8e:94:2b:5c:f4:bb:5b:82:9c:9c:bd:39:1e:d8:
60:de:16:a8:5e:52:5f:05:ba:68:6d:29:85:38:87:
b0:77:8b:d4:12:0c:cf:5c:5d:e4:2b:c0:be:2c:86:
63:62:de:57:2f:67:3f:0e:32:c8:9e:98:ea:e3:75:
49:34:9f:64:81:d5:6c:12:64:21:1b:d8:32:6c:3e:
73:70:2a:14:d3:c6:08:f6:ea:7c:48:cc:6d:3b:49:
e6:45:bd:3e:8f:0e:6e:24:7e:c3:be:33:a3:0a:3b:
7a:c8:f3:be:2f:e5:ac:73:26:88:e4:b4:77:2c:0c:
f1:fd:26:ae:dd:0c:53:10:d3:58:7b:97:3e:7d:dd:
4e:5c:07:5c:c7:91:c3:b2:f6:a6:ea:a6:04:e2:4e:
e1:a4:30:1c:43:ef:8e:66:90:91:7c:61:ac:5c:af:
69:b1:ef:1d:dd:f7:7f:d8:8e:ca:8d:24:fd:bd:ae:
31:36:bf:28:ca:47:38:9e:5c:90:0b:4e:fa:90:64:
e7:98:28:16:3f:32:ce:58:70:00:48:fd:04:20:5f:
ee:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:41:A9:DB:AB:BC:E5:41:A0:D7:F0:7B:0D:BE:DA:D3:3E:9F:99:0D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/m0Gp26u85UGg1_B7Db7a0z6fmQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a2:03:69:ff:a0:e6:43:0e:44:91:98:af:3d:78:25:67:af:ba:
65:6e:f1:c3:48:b4:48:6d:1a:44:0c:95:59:42:29:0b:85:31:
77:5f:7c:72:4b:d0:8a:c5:df:be:7f:97:55:a9:20:45:51:80:
f8:dc:be:44:91:24:89:97:4b:3d:3e:8d:83:55:6d:d6:ad:2a:
c7:34:20:2b:6e:ab:69:ed:e7:07:aa:df:1a:09:64:af:75:25:
3f:fc:fa:f0:b3:df:dc:cd:59:02:d8:6e:38:e1:dd:6a:84:e9:
a5:6b:82:39:7a:ea:99:14:81:12:89:8f:50:93:a7:08:f2:2a:
1e:ec:87:2e:f3:3d:c0:8f:bf:cb:c4:3e:09:ec:07:b8:13:16:
6b:a7:37:af:8c:88:59:e1:83:76:46:ef:8b:9b:ba:15:36:56:
10:3a:1f:b2:15:4f:75:7d:40:e6:52:69:0f:5e:ad:3a:34:0e:
3d:57:c6:30:63:b3:29:02:ef:ff:c1:fd:6c:74:31:2d:42:14:
e9:00:74:56:41:41:e1:3e:95:d2:2f:b0:50:ef:01:ff:f6:9d:
79:4d:14:24:80:9a:10:e9:65:fb:5c:ae:d2:32:5e:3a:16:32:
bf:33:1a:07:37:03:50:c2:96:cd:9d:09:38:41:1a:06:02:23:
38:5a:a9:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:47:15 2025 by rpki-client