Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/n8tTOrMoX0eHGP0jlzQorciP9us.roa
File: n8tTOrMoX0eHGP0jlzQorciP9us.roa (raw, json)
Hash identifier: 2n0Qmi874gBRy3rq3jMWko9vYmIuWxJ2cSj8ikWJdJ0=
Subject key identifier: 9F:CB:53:3A:B3:28:5F:47:87:18:FD:23:97:34:28:AD:C8:8F:F6:EB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01860D896141DD788215CBB14E74867E7771
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/n8tTOrMoX0eHGP0jlzQorciP9us.roa
Signing time: Wed 01 Feb 2023 15:12:32 +0000
ROA not before: Wed 01 Feb 2023 15:12:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:0d:89:61:41:dd:78:82:15:cb:b1:4e:74:86:7e:77:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 1 15:12:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9fcb533ab3285f478718fd23973428adc88ff6eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5a:92:46:d1:d6:e1:00:a2:56:da:40:cc:3f:
a5:c4:61:f7:92:70:c0:dc:7a:cc:25:80:26:86:1f:
19:65:bf:c3:80:8a:0d:c0:fc:dc:05:35:22:c6:99:
28:99:30:3f:02:0d:84:1d:55:b3:39:25:1f:c2:c3:
fb:27:a6:06:3f:b0:ad:b7:5d:e6:14:a9:af:57:4e:
d7:7d:be:e2:e6:fd:d5:96:4d:68:26:5e:82:7c:6a:
f3:17:8a:0a:b4:06:ed:0b:a7:e5:08:c2:b0:c1:85:
ce:a5:bb:72:55:19:50:36:c9:e6:a0:84:d0:8e:eb:
3f:49:79:66:7d:9f:12:ef:0d:9c:a4:a9:06:76:4b:
b5:32:9e:b5:ef:b6:4c:14:54:e3:5d:71:9c:3a:68:
0f:7e:ce:ed:05:fa:db:25:ab:0d:de:01:bc:64:2e:
3b:dc:e5:cb:a0:de:02:58:d8:c1:72:c1:2a:3e:99:
c9:85:26:2b:fe:df:a9:cd:70:df:c3:f7:23:b0:19:
12:80:86:4d:bf:eb:57:0f:f3:2d:cb:3b:db:f6:1b:
79:8f:df:62:71:ae:3e:1a:08:00:3f:61:2b:95:77:
f8:c4:d2:8e:a3:83:f2:1b:21:7d:92:e6:f0:83:36:
16:36:f7:ce:15:31:2b:ae:3b:e8:11:11:12:56:75:
ad:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:CB:53:3A:B3:28:5F:47:87:18:FD:23:97:34:28:AD:C8:8F:F6:EB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/n8tTOrMoX0eHGP0jlzQorciP9us.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
03:76:17:cd:1a:31:49:01:34:53:6a:ef:dd:7a:91:0a:ff:b4:
e6:7c:20:59:ce:9f:47:ec:4d:9d:e4:62:fc:15:17:cb:dd:5f:
6b:a9:58:05:0b:f3:c3:17:e8:12:92:90:5a:e5:d9:28:be:ca:
ef:7b:82:3b:da:db:ad:fd:c3:19:e9:0d:d1:bb:95:37:b5:66:
05:e0:91:c6:2a:00:0d:46:43:dc:06:f5:c1:e1:f6:32:ac:3f:
8e:7d:8b:e5:bb:1d:17:63:1c:b9:51:cc:93:1d:40:19:b4:b4:
50:b4:40:17:f0:72:14:82:a3:da:82:0c:c4:06:4a:fe:46:c6:
03:6a:dc:83:f9:c0:4e:95:0e:8b:f6:77:f4:2a:0c:99:3b:4b:
9d:e3:58:ee:55:a7:93:aa:0f:72:a5:a9:74:58:3f:bc:bd:3d:
35:05:e7:04:f4:db:5c:00:3f:45:70:5e:84:fb:55:bf:61:33:
82:0c:b1:9c:b8:19:20:b1:5e:83:e0:84:2e:0e:49:29:0d:2c:
70:d3:61:22:7f:0d:32:46:a4:e2:52:b4:35:57:8f:e8:f9:9b:
57:05:af:f7:27:e7:fe:57:49:6b:bd:0c:b5:d0:63:ce:be:cf:
db:5f:0b:8a:39:2a:8b:75:3a:85:e1:b7:55:fa:7a:0e:11:5d:
a8:fc:43:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 09:18:34 2025 by rpki-client