Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rgFQprDO-6_t6Ef0c49e3vZJxsw.roa
File: rgFQprDO-6_t6Ef0c49e3vZJxsw.roa (raw, json)
Hash identifier: kKiSiFNdsfQeC9bMk+V0IDG7UvdRrXUyzocEJEXhK3A=
Subject key identifier: AE:01:50:A6:B0:CE:FB:AF:ED:E8:47:F4:73:8F:5E:DE:F6:49:C6:CC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018605297372B133A2F0EDFC1168606FE402
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rgFQprDO-6_t6Ef0c49e3vZJxsw.roa
Signing time: Tue 31 Jan 2023 00:10:47 +0000
ROA not before: Tue 31 Jan 2023 00:10:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:05:29:73:72:b1:33:a2:f0:ed:fc:11:68:60:6f:e4:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 31 00:10:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ae0150a6b0cefbafede847f4738f5edef649c6cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:13:30:68:d6:6d:74:11:71:9c:6e:ae:2f:be:
ee:40:be:ce:d5:5b:49:37:6f:be:04:fa:96:5f:7e:
be:9d:68:28:1a:ed:ac:49:bc:39:3a:fe:8f:63:e1:
d7:91:77:0d:53:d5:15:c9:ad:5d:14:3b:33:60:a1:
d1:92:5c:54:e9:ac:26:c6:8d:a4:16:68:bd:57:bc:
1d:f8:24:1b:a3:66:9b:05:fb:29:d9:03:c7:d9:f1:
c5:af:ef:57:c2:1f:da:27:85:db:fe:ef:5e:4b:14:
91:d0:68:2d:7d:84:ad:4e:1b:12:d6:1a:51:7f:70:
e5:92:f1:b7:37:29:18:04:b3:5a:87:5d:01:05:8f:
d7:ab:6c:0f:49:85:4b:b5:81:b5:cc:d4:58:a7:96:
0f:d3:8d:a9:e1:ce:44:a4:f0:46:9a:81:ef:25:02:
b0:83:17:ce:33:4d:fa:92:99:a0:df:d0:aa:d7:99:
9b:06:37:9a:90:7f:2b:07:7f:b4:4f:76:44:35:cb:
03:11:71:12:f1:a2:f6:94:f3:cb:af:cc:e5:e6:80:
90:d4:bf:b9:eb:d8:d4:ce:57:52:a7:7a:87:45:50:
09:8b:2f:f1:cc:53:b5:00:89:b9:29:d6:00:48:9a:
cb:6a:03:38:30:0c:fd:2b:83:72:52:b3:45:9d:c4:
0c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:01:50:A6:B0:CE:FB:AF:ED:E8:47:F4:73:8F:5E:DE:F6:49:C6:CC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rgFQprDO-6_t6Ef0c49e3vZJxsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
46:bf:eb:a8:4f:fe:fc:4f:85:71:6e:46:80:7b:5e:f9:2a:24:
f7:25:f4:88:c4:6e:5c:02:9f:c3:b6:d2:e4:a3:de:fd:49:76:
eb:9f:8a:93:b3:30:ee:94:40:4f:39:12:dc:8c:f7:9b:5f:ec:
f5:a9:9f:04:cd:73:6f:b2:5f:2a:2f:74:35:62:40:fc:56:64:
17:89:a5:0a:51:58:e3:0a:96:c0:1f:e0:30:f6:5a:30:e0:0c:
30:78:92:5a:23:8c:43:69:00:c1:b3:9a:3e:6a:b7:5d:a8:c9:
79:7d:5c:d2:01:2a:c5:70:68:7d:65:99:12:8d:19:89:1b:ab:
62:ec:14:c6:48:81:1b:22:40:d9:4c:82:b3:cd:16:5e:6f:7b:
c8:f6:8f:70:09:e2:ae:9f:36:46:1f:ec:e8:f4:8e:9a:ff:bf:
86:fb:11:7a:ee:55:f5:9b:fd:b4:12:3d:be:97:9f:f2:76:ec:
24:00:c7:3a:53:e8:3c:6c:08:81:38:52:f2:dd:bf:fa:2e:6e:
6f:48:9e:3f:0e:eb:4a:63:d1:ec:4d:83:9e:a5:35:15:50:b2:
70:44:72:cf:6e:8c:55:cc:83:07:06:15:01:6c:ea:84:43:b2:
73:c8:04:40:6f:f1:ff:1f:67:7d:f9:45:62:4a:49:90:b4:41:
49:7b:9f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:08:51 2025 by rpki-client