Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/r-64iJK3GHsV40EonCqlqWs45kw.roa
File: r-64iJK3GHsV40EonCqlqWs45kw.roa (raw, json)
Hash identifier: gUkncknc4Lg2AV8a3nv4kP+/GeHwb/xRw5UCtfR7wyI=
Subject key identifier: AF:EE:B8:88:92:B7:18:7B:15:E3:41:28:9C:2A:A5:A9:6B:38:E6:4C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018632DE3333705C7B94925377E97A2A55AD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/r-64iJK3GHsV40EonCqlqWs45kw.roa
Signing time: Wed 08 Feb 2023 21:11:08 +0000
ROA not before: Wed 08 Feb 2023 21:11:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:32:de:33:33:70:5c:7b:94:92:53:77:e9:7a:2a:55:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 8 21:11:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=afeeb88892b7187b15e341289c2aa5a96b38e64c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b0:75:92:2b:ef:d9:21:a9:b9:7d:28:19:b9:
97:be:92:57:9f:34:7b:f7:ef:10:8e:9f:bf:c5:26:
25:de:72:fc:93:86:8e:aa:41:02:68:2b:36:d9:0f:
83:73:0f:db:42:15:6f:3f:aa:1d:8e:d4:c6:4b:d6:
cd:51:bc:9c:15:c0:37:db:88:f3:99:a4:b2:34:1c:
03:58:be:72:96:ca:be:34:41:1d:a0:aa:9e:2f:a1:
a2:8f:ab:36:5d:02:ec:bd:ce:99:a7:0b:84:67:25:
ee:bf:50:85:33:0d:a2:4f:d6:88:75:cd:d8:0f:d1:
2e:43:8e:6d:9e:29:62:95:ad:cb:9a:02:06:e0:60:
19:ad:61:83:7a:80:b7:5c:8d:2f:06:47:6c:d4:73:
6d:dc:be:08:51:66:52:b3:b5:74:ef:a8:6e:ec:6c:
c7:1a:3c:84:01:28:93:49:fb:96:95:e7:07:31:48:
c1:66:0a:3b:d6:df:ee:2e:cb:1a:09:37:e9:04:7f:
5b:28:68:b1:ad:24:86:d0:f6:63:ac:92:57:15:64:
fd:76:07:30:b5:fa:09:c2:dc:77:e2:1b:2d:50:5a:
d1:36:be:d4:00:71:22:f0:0e:a0:65:57:f8:37:1c:
a0:40:d6:cc:69:4f:ba:91:06:8e:75:72:c0:00:51:
85:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:EE:B8:88:92:B7:18:7B:15:E3:41:28:9C:2A:A5:A9:6B:38:E6:4C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/r-64iJK3GHsV40EonCqlqWs45kw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
54:f5:de:08:24:69:0b:2e:01:13:84:54:0c:b0:d6:ae:6a:ff:
d4:76:58:65:b8:37:03:95:9c:1f:3a:e8:81:8f:89:62:bd:b8:
60:2c:ce:4a:c6:d7:a6:53:19:47:de:ae:00:46:d9:a5:b6:5b:
48:5e:46:0f:6f:fb:fb:d6:d9:dd:22:2c:ad:e8:ea:a1:45:69:
a9:4d:6c:e1:ef:83:69:8f:75:22:6d:37:d6:27:0a:3e:fb:79:
d3:63:be:32:6e:d4:fe:e8:56:63:d0:a6:88:85:03:59:99:75:
a9:b3:61:7f:46:52:2d:83:fe:ef:ea:3e:07:10:e3:db:bd:56:
d7:b7:e7:a5:b0:cc:ef:19:e5:ac:68:a0:47:80:c4:eb:62:fd:
d1:05:5d:25:c4:e4:63:21:05:0e:7e:d6:58:bc:d9:2f:53:71:
43:ae:cd:79:96:14:86:ed:ce:2e:f5:57:db:f4:b1:f5:3d:4e:
2e:a3:8d:d6:c1:14:5b:b6:67:b2:c8:9f:79:b9:09:36:21:df:
77:74:82:96:a1:35:90:0a:07:b4:5f:91:47:c5:03:9a:1c:14:
50:5d:dd:48:9d:a9:fe:4a:c5:ee:c0:8e:85:f2:3c:86:a5:c6:
6a:f3:fe:51:22:3e:39:2a:c3:b1:e2:79:d0:38:f2:00:5d:d6:
17:22:68:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:22:03 2025 by rpki-client