Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rC0LNxcvySzdq3WgTeJazgVTg0k.roa
File: rC0LNxcvySzdq3WgTeJazgVTg0k.roa (raw, json)
Hash identifier: he9bxxJGNNTP7q+AER3JW5UQ3yPCYQ+kxI8nzzSJ5HM=
Subject key identifier: AC:2D:0B:37:17:2F:C9:2C:DD:AB:75:A0:4D:E2:5A:CE:05:53:83:49
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A2A4D6A6BE8FF4BFF39012C1BC73847C4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rC0LNxcvySzdq3WgTeJazgVTg0k.roa
Signing time: Fri 25 Aug 2023 01:27:11 +0000
ROA not before: Fri 25 Aug 2023 01:27:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:2a:4d:6a:6b:e8:ff:4b:ff:39:01:2c:1b:c7:38:47:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 25 01:27:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ac2d0b37172fc92cddab75a04de25ace05538349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:27:18:1e:fc:eb:b5:21:ba:f3:09:e7:29:06:
4a:fc:df:a9:dc:9c:23:49:d0:1f:76:7b:b6:a7:02:
71:58:49:2a:d1:f3:cf:a6:ee:0d:d0:47:10:79:a0:
4a:03:0a:f7:88:94:66:1a:a0:45:67:b1:a6:37:cd:
49:cb:79:3e:dc:78:3e:9f:37:4a:8f:f5:e7:20:93:
c9:e2:0b:f1:b0:0e:95:ec:40:86:4f:64:6c:4b:6f:
fa:56:ab:d5:62:b9:d9:be:1f:88:72:f2:37:90:ef:
f1:34:2e:cd:5f:ba:2a:de:ed:2f:ba:cf:01:29:41:
69:97:f0:bc:59:c2:4a:e9:e1:4b:08:e0:bf:f7:3b:
84:2c:e6:88:e6:ca:9a:fd:93:3e:19:59:c8:79:89:
45:75:da:e8:16:8b:0a:00:94:d9:05:52:98:9d:0a:
e3:d1:eb:4d:d2:43:87:bf:74:9c:da:71:e7:4a:43:
1e:d4:9f:37:fd:ea:74:0f:a6:86:b8:67:ab:56:b6:
05:8a:46:84:83:ed:94:38:84:97:a3:33:03:ba:0e:
40:f6:78:05:8d:9d:66:98:ff:32:74:f6:e3:06:cd:
c5:ca:43:27:88:37:82:37:12:73:12:ac:8b:ad:ec:
4d:7f:4c:9e:37:3f:b2:c5:d9:84:eb:2a:fa:9d:f9:
27:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:2D:0B:37:17:2F:C9:2C:DD:AB:75:A0:4D:E2:5A:CE:05:53:83:49
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rC0LNxcvySzdq3WgTeJazgVTg0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
22:74:90:04:26:37:c1:42:74:f0:61:4b:25:a4:1d:9d:f5:6f:
a7:7d:92:2e:c3:f6:61:c1:96:63:07:e1:98:c4:ac:ff:b3:a0:
35:d9:db:9d:37:fd:b3:57:43:e0:ab:2d:96:36:bd:4d:b3:62:
a9:cf:76:28:de:c5:ba:1c:33:c0:18:36:80:c5:c9:f8:d6:b6:
be:e5:f8:8d:05:15:dc:a7:52:f7:00:78:96:64:4e:46:24:c1:
cd:1d:2d:0d:e7:d8:4d:b0:01:71:01:18:1a:05:b1:e3:93:34:
ad:65:32:bb:c6:a4:a1:09:2a:50:ec:a3:da:6b:26:a5:01:2a:
7d:aa:1c:af:d5:13:32:58:95:d3:2e:ca:86:be:87:53:01:48:
4a:6c:f9:b9:b0:f7:ce:56:e7:49:f3:4d:48:af:48:e9:3f:2a:
a9:88:4d:7d:ae:73:d5:66:6e:57:bf:2d:be:0a:b1:16:4d:a3:
17:93:ee:1f:de:8a:9b:bb:fd:a5:3e:9c:66:93:8f:df:b1:53:
43:ad:60:90:63:5b:c5:70:f3:d6:87:41:5b:fb:ce:e9:f9:12:
c7:aa:f9:af:f6:11:be:52:b8:fe:4c:33:18:3b:96:72:ea:3c:
6d:60:89:81:58:2c:ee:9e:b0:1d:ca:89:d9:be:4f:b2:54:27:
1f:65:b4:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:27:27 2025 by rpki-client