Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/p9EoDEchc-dEt721CncdFXECHYg.roa
File: p9EoDEchc-dEt721CncdFXECHYg.roa (raw, json)
Hash identifier: RoqS1nXVltkZ0IeLCVlOctvscqDHqaDjf5LnHzWAN1Q=
Subject key identifier: A7:D1:28:0C:47:21:73:E7:44:B7:BD:B5:0A:77:1D:15:71:02:1D:88
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185E1C191EA8167CA4653592CAB6B92BA33
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/p9EoDEchc-dEt721CncdFXECHYg.roa
Signing time: Tue 24 Jan 2023 03:10:37 +0000
ROA not before: Tue 24 Jan 2023 03:10:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e1:c1:91:ea:81:67:ca:46:53:59:2c:ab:6b:92:ba:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 24 03:10:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a7d1280c472173e744b7bdb50a771d1571021d88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:d8:80:0c:d6:3b:8a:e1:ac:ff:3b:e4:f6:77:
1c:da:63:ff:7d:3e:9d:72:00:87:9b:f7:6e:fd:47:
57:6e:3f:fe:9d:d9:7a:08:b1:55:f6:86:06:cb:9d:
05:b2:bd:64:b0:6d:49:65:db:37:a6:3f:5d:d7:ee:
e5:93:ca:66:cc:bf:c5:9c:e8:75:4f:4f:95:7e:14:
af:ea:45:76:8a:c4:ce:ac:5e:15:58:79:b8:16:55:
5c:43:3b:b5:e4:00:93:a7:20:46:8e:1a:5c:cc:9a:
17:79:69:90:2f:55:35:b6:9d:87:8f:35:48:af:3b:
7e:1c:8c:45:11:76:81:8d:c3:80:fb:cd:38:04:29:
ea:44:52:99:4d:c7:af:3b:a9:43:e9:2c:78:83:18:
c3:fa:39:de:da:4a:ed:e6:83:48:1b:78:4f:6e:79:
f8:96:e2:fb:1a:f9:86:1b:8c:62:9b:80:49:02:c2:
b9:79:e1:b0:91:15:b7:f6:fc:5c:32:32:1f:73:89:
30:b1:60:64:dd:3c:b1:42:07:2c:71:1a:05:25:78:
18:53:78:e9:cb:52:2c:c0:c8:15:34:8b:a8:fb:20:
ab:fd:f8:01:3d:e6:ef:44:2e:b5:bc:01:e5:25:2b:
6d:ef:fd:08:25:94:0b:62:de:b0:bb:3f:c5:90:02:
78:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D1:28:0C:47:21:73:E7:44:B7:BD:B5:0A:77:1D:15:71:02:1D:88
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/p9EoDEchc-dEt721CncdFXECHYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
36:fd:22:c0:b9:20:64:f5:c1:ed:ae:ba:73:c1:f5:33:b1:d9:
c3:71:f2:83:ea:08:b5:fc:7c:b9:36:fd:34:8d:eb:ca:a8:36:
65:51:a0:3c:50:f2:16:98:6f:f0:b7:71:a4:f6:3d:b1:6d:0b:
4c:93:78:75:de:98:03:7e:bc:7c:ea:11:c9:df:fb:a1:cf:60:
0b:c9:a9:0c:66:fa:cd:bd:36:5f:fc:70:d1:ca:91:da:55:96:
0e:9c:a6:1a:df:b1:72:02:7a:81:1d:e5:b5:2d:53:23:0d:72:
03:be:92:2f:ad:1d:c8:42:2a:01:1b:40:71:30:22:a6:82:2d:
bc:6b:11:d3:af:f3:a2:fa:11:ff:87:fa:31:e0:32:07:cd:a7:
ca:18:62:17:7e:d9:e7:f0:c7:14:2b:19:ed:81:3e:1c:e5:43:
9f:62:db:55:ce:a2:8a:e8:42:3f:c6:4e:f2:ea:ae:a1:4f:4f:
c0:e4:33:1e:96:5a:e8:f3:12:bf:77:7e:6a:99:23:70:11:4a:
7b:57:5e:12:de:df:dc:94:c5:4f:fd:bc:77:09:78:48:fb:0a:
84:bc:00:16:68:4c:b8:d7:54:2f:3f:d2:be:13:d1:79:97:25:
31:fc:b6:b8:ef:69:15:52:b9:d2:79:4e:23:06:15:1f:56:63:
9a:25:44:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:42:20 2025 by rpki-client