Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pm5ZUdHEsSzbYRLzQkG0E_edHqY.roa
File: pm5ZUdHEsSzbYRLzQkG0E_edHqY.roa (raw, json)
Hash identifier: cM88MKVJ9GAdOX/zZ2OyLIBVk501q1z3hghsrsdynV4=
Subject key identifier: A6:6E:59:51:D1:C4:B1:2C:DB:61:12:F3:42:41:B4:13:F7:9D:1E:A6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183D6A4A17A2D554829139DE8B5A16D4712
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pm5ZUdHEsSzbYRLzQkG0E_edHqY.roa
Signing time: Fri 14 Oct 2022 13:17:36 +0000
ROA not before: Fri 14 Oct 2022 13:17:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d6:a4:a1:7a:2d:55:48:29:13:9d:e8:b5:a1:6d:47:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 14 13:17:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a66e5951d1c4b12cdb6112f34241b413f79d1ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3a:ac:76:bf:10:cd:6e:a8:8d:de:a3:57:fd:
ac:06:fa:a8:59:6b:d4:b3:38:25:3b:7d:f9:bb:8f:
ae:20:c8:55:c0:62:e4:01:3d:46:04:76:b0:52:53:
25:94:84:a5:33:27:6d:e4:b2:7e:a2:2e:f2:2d:36:
1b:e9:f2:15:68:d1:c3:ec:e6:ca:68:24:fd:85:11:
e4:bc:e9:37:5b:ec:ec:de:64:bb:73:67:33:e4:04:
1d:47:1e:02:b4:0c:87:c4:27:13:81:7b:13:bd:6e:
54:88:be:77:1a:3d:2b:6c:d0:23:90:0f:7a:49:92:
6b:e6:25:4b:c5:ce:91:16:1c:08:ee:95:fc:de:56:
33:e6:f1:9d:a6:44:35:a7:d6:a9:8a:33:80:fe:34:
b1:30:58:51:10:88:f1:ea:80:75:fc:53:88:f0:12:
dc:67:a6:2e:70:8f:1a:ca:1b:5e:00:d6:bb:66:a0:
32:9b:95:7a:95:19:06:6a:b3:bd:63:46:45:83:53:
f3:70:4f:70:0e:bc:30:3d:1b:e0:d3:49:86:19:83:
61:46:ed:fc:73:c3:4e:1f:6c:4a:f6:e4:5e:1b:46:
25:65:8e:1c:28:b3:ed:34:a9:b9:82:42:f2:9c:db:
cd:70:ca:00:7c:e9:7a:88:29:76:82:c0:49:55:29:
3b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:6E:59:51:D1:C4:B1:2C:DB:61:12:F3:42:41:B4:13:F7:9D:1E:A6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pm5ZUdHEsSzbYRLzQkG0E_edHqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0a:7a:23:f3:58:23:87:43:64:6d:6f:09:0d:b8:5d:cc:8a:1e:
09:4b:28:33:ac:ff:b9:05:87:dd:88:4b:d4:82:c6:01:d7:34:
d9:dc:6e:b2:5b:27:8e:ca:2b:ab:e0:92:9a:e8:8a:40:a8:eb:
db:e0:7c:5c:d3:c8:6f:83:f6:d9:10:3f:cf:c7:42:2c:9c:a9:
1a:ba:6f:15:2f:ac:4c:d5:bf:33:76:04:21:46:1a:30:d4:81:
35:dc:d6:a4:80:d4:98:f9:85:81:7a:23:16:37:88:2d:5c:2a:
64:af:ee:45:9a:a7:76:6a:53:0c:c5:2d:b4:2d:ab:73:0d:14:
51:a9:38:71:53:4f:c9:94:d0:b4:69:ba:16:be:61:05:28:6b:
17:b4:dc:33:6a:b0:e3:fa:28:fa:09:93:98:31:e6:a1:da:1b:
56:ec:bd:7b:79:60:29:b9:35:ef:3c:59:f8:a1:f2:d2:13:90:
30:76:6e:23:8a:79:6e:79:14:40:3e:3d:75:1e:fb:63:11:9f:
67:fe:8d:ac:82:77:f4:6b:62:a0:db:75:02:5f:df:83:0b:f3:
f4:e1:1f:50:f0:ac:69:df:ca:7d:b4:31:63:49:52:a9:9e:e5:
d5:2a:30:69:85:2a:80:2a:bd:f0:3f:01:30:08:0f:0e:a2:e3:
34:3f:9e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 00:01:32 2025 by rpki-client