Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/raOAIlejpBGGg8dwkhrbvOtHmoU.roa
File: raOAIlejpBGGg8dwkhrbvOtHmoU.roa (raw, json)
Hash identifier: O4yRSsuCxgkDVDO4KBWGxg5lN1oNUp4ySE2l3xM3ruA=
Subject key identifier: AD:A3:80:22:57:A3:A4:11:86:83:C7:70:92:1A:DB:BC:EB:47:9A:85
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185CEE9151F081F1444758ECC3D28B2F10C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/raOAIlejpBGGg8dwkhrbvOtHmoU.roa
Signing time: Fri 20 Jan 2023 11:20:59 +0000
ROA not before: Fri 20 Jan 2023 11:20:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ce:e9:15:1f:08:1f:14:44:75:8e:cc:3d:28:b2:f1:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 20 11:20:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ada3802257a3a4118683c770921adbbceb479a85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:37:66:74:b6:26:15:df:15:d8:a0:6d:19:87:
36:8d:b5:a5:e5:b8:0c:5b:34:e0:46:da:15:cf:ca:
f8:ec:10:d3:ae:75:c3:8f:da:5a:4b:3a:c1:2f:96:
dc:3c:ca:f6:a1:80:af:b9:69:01:ee:85:8d:8d:31:
a8:7e:62:b0:ba:2f:c2:9a:59:15:48:6d:ac:b8:5e:
7a:83:47:47:d7:46:3d:b1:59:06:75:7b:dd:db:1a:
1c:d9:d6:6d:68:f8:dc:0d:15:c4:b0:19:f0:84:64:
37:c9:e0:96:ca:32:75:17:c7:61:bc:98:50:30:e3:
78:f1:61:4e:1a:53:41:0e:93:63:74:2b:e8:f7:ec:
00:78:2a:45:8c:9c:97:0d:93:81:5e:79:8c:47:c5:
75:2b:e8:e6:32:e5:f5:93:ad:3f:1c:b0:96:51:ec:
b7:11:ce:98:b6:ee:5a:09:e4:a3:98:ed:4c:88:a2:
28:f7:32:93:87:f2:95:7a:f0:69:a3:ef:6b:97:2f:
f7:26:82:00:fa:6e:33:fa:7b:a9:04:19:b2:15:6f:
7e:89:97:b1:5a:28:f7:7b:fc:23:2a:ac:0d:c8:e3:
28:a7:a9:06:bd:3c:68:02:9f:e3:d4:f6:5b:49:7a:
4e:70:b6:0b:d3:84:2a:6b:a1:c0:19:a8:40:7c:b8:
96:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:A3:80:22:57:A3:A4:11:86:83:C7:70:92:1A:DB:BC:EB:47:9A:85
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/raOAIlejpBGGg8dwkhrbvOtHmoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a8:72:a4:5b:69:a2:f8:9f:22:fa:03:d3:a8:86:21:e5:eb:59:
04:c2:69:69:70:d0:06:3c:2d:99:98:cd:90:d0:9d:78:13:91:
c8:7a:9e:cf:12:e7:d3:12:14:46:1c:8b:c6:7c:8c:88:44:8c:
a2:af:2b:bd:2b:d2:6f:a2:e0:63:fb:77:e3:3c:66:62:bf:cd:
f0:04:a0:41:bf:ca:9a:16:f8:8c:a6:3a:c9:67:99:02:ce:2d:
83:60:88:a0:08:8d:d6:6f:40:44:ec:cd:1e:fd:6c:e1:ba:f3:
22:64:79:7b:d9:40:96:4f:93:b8:96:ee:62:d6:4d:b4:73:b3:
07:25:d7:17:74:2d:98:1e:de:ed:dd:90:9c:8b:61:23:a0:86:
4b:96:23:58:fa:9e:2a:df:12:b9:c8:a0:0f:c5:5f:a0:02:1e:
1e:e0:5c:25:60:26:f5:6d:b4:96:54:f3:db:e5:18:7f:b2:86:
07:e8:58:3d:49:27:78:e0:47:6d:bb:b1:8b:5c:f9:04:71:cd:
b2:50:86:da:a2:c4:d6:fb:ae:30:3b:4b:c6:5d:bf:2a:aa:e8:
4c:47:80:23:dd:63:c0:13:22:65:1d:5d:82:b5:f9:db:09:d6:
9b:9f:ce:e1:0c:b3:05:f5:89:24:31:f5:74:6a:bf:9e:d6:06:
2f:61:2c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 13:11:06 2025 by rpki-client