Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rL4RVnYCg5sdV-xM2bmqrCWA0gY.roa
File: rL4RVnYCg5sdV-xM2bmqrCWA0gY.roa (raw, json)
Hash identifier: yIRAz+mT4fIB7/uLh6VMd9RUcDzMFfG8upUYeZqCkbk=
Subject key identifier: AC:BE:11:56:76:02:83:9B:1D:57:EC:4C:D9:B9:AA:AC:25:80:D2:06
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185315EFA8377178A0F00A3D64E4E63BA85
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rL4RVnYCg5sdV-xM2bmqrCWA0gY.roa
Signing time: Tue 20 Dec 2022 21:09:46 +0000
ROA not before: Tue 20 Dec 2022 21:09:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:31:5e:fa:83:77:17:8a:0f:00:a3:d6:4e:4e:63:ba:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 20 21:09:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=acbe11567602839b1d57ec4cd9b9aaac2580d206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a3:2e:98:2a:18:e0:a7:54:f4:02:f0:15:0a:
0b:53:41:0a:50:e7:9a:2e:f4:ac:89:6f:c3:aa:8f:
9f:05:80:42:0a:c1:7c:88:69:3a:c1:2a:7d:ad:24:
40:d4:c4:19:bc:e7:cd:ae:4b:a6:30:dd:33:a2:d4:
92:7e:a7:63:c9:2b:9c:d3:58:68:1f:30:12:c4:65:
5b:47:17:14:be:d6:4c:52:1d:c7:04:52:b3:da:be:
90:26:bc:63:1c:33:d1:b2:2f:e3:fb:1a:b7:0d:1e:
31:ba:3b:37:a6:7f:d5:72:8a:5f:5c:9b:ca:f4:2a:
ab:1f:51:a4:9c:bc:60:9d:0f:2e:c9:7f:3d:db:57:
47:a8:81:f9:28:7f:5f:1b:7c:e2:fd:8f:2c:94:11:
eb:99:27:25:11:94:e5:8f:26:a3:44:dc:2f:22:2d:
50:f8:b9:89:f7:02:9d:fe:9f:88:e7:06:60:73:97:
8f:42:c6:54:14:88:84:34:c0:25:81:1f:0e:66:79:
50:e1:4f:c1:b3:e8:3e:6f:27:ea:8a:59:94:7b:9e:
49:e7:56:0c:1b:44:65:25:57:11:57:84:b5:68:b7:
c1:b4:d5:2b:a8:d3:fd:fc:26:f0:48:e5:d8:b2:c0:
b9:f7:d5:2c:45:8f:29:59:d2:d5:f1:cf:bf:44:7c:
98:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:BE:11:56:76:02:83:9B:1D:57:EC:4C:D9:B9:AA:AC:25:80:D2:06
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rL4RVnYCg5sdV-xM2bmqrCWA0gY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
78:6c:58:d4:1c:9e:ed:f7:88:7d:d4:d0:dd:df:f4:b0:b8:42:
e6:8d:52:bd:1a:19:11:b9:47:f0:43:d7:b0:5a:26:a2:1f:bf:
8d:7a:a9:45:72:77:62:ed:ab:10:a8:71:30:98:30:6a:d4:1c:
a2:59:23:cf:29:e7:2f:fd:81:4a:39:23:a5:59:a0:43:c7:68:
70:5e:14:fe:e6:ec:ba:0a:51:5c:84:44:3c:97:37:56:d9:9b:
fa:a9:80:74:95:3d:43:90:80:40:a4:49:48:f2:28:2b:04:c6:
c4:5f:7a:84:47:f8:cb:93:64:ba:85:d3:c3:29:c8:93:3b:eb:
fc:ed:79:6f:b6:98:c2:c9:7e:ae:3a:f8:d2:19:c5:78:b2:07:
cc:75:a2:a9:43:8c:54:af:29:f4:a2:1c:5e:40:56:2f:70:ae:
80:dd:e4:4f:ea:b0:63:78:b5:f1:fd:ed:9b:8e:f8:5f:d9:e8:
47:b1:db:cb:9b:df:8f:bb:41:e7:b6:9c:a3:cc:48:88:da:91:
4b:81:d7:b4:15:c7:7f:e5:02:29:28:b4:df:58:01:e6:2d:fe:
f2:41:5f:b6:04:f7:41:e5:b6:60:4c:3d:32:47:36:a4:9a:5b:
72:4f:45:c4:d0:c8:8c:a7:3d:1d:87:7b:b6:60:16:64:08:ab:
9b:30:52:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:04:39 2025 by rpki-client