Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rl98IApS9VLuQKqqDbivQxjnUQQ.roa
File: rl98IApS9VLuQKqqDbivQxjnUQQ.roa (raw, json)
Hash identifier: dmzE3y5gmMyvi0XaxGOK/lg1IfumCEjT9TjHaaALBw8=
Subject key identifier: AE:5F:7C:20:0A:52:F5:52:EE:40:AA:AA:0D:B8:AF:43:18:E7:51:04
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185DAA754568242481D613D015CF25798A1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rl98IApS9VLuQKqqDbivQxjnUQQ.roa
Signing time: Sun 22 Jan 2023 18:04:37 +0000
ROA not before: Sun 22 Jan 2023 18:04:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:daa6:ece5/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:da:a7:54:56:82:42:48:1d:61:3d:01:5c:f2:57:98:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 22 18:04:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ae5f7c200a52f552ee40aaaa0db8af4318e75104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fb:6b:27:42:fd:00:58:fc:09:5b:00:7d:41:
84:45:a2:f8:49:c2:86:0c:77:e4:c0:ce:a8:da:16:
99:c7:29:56:02:b4:b3:33:a5:04:43:19:c8:05:fc:
fa:1b:a0:37:75:35:3f:5c:df:29:eb:19:d3:62:cf:
c3:37:18:fd:c0:3d:73:be:eb:2f:3e:bf:f7:48:40:
8a:21:3c:7e:1c:ad:f1:f3:ed:f5:be:2e:1e:eb:be:
8b:7a:bb:f1:3b:80:0d:36:9c:18:86:0c:13:6b:50:
b7:72:0f:4f:36:76:b6:0a:11:d6:74:94:5b:fc:3b:
39:c2:24:b7:dc:cc:ac:12:ad:5d:e4:fc:77:50:20:
9d:ba:1d:5b:c6:f2:74:53:89:93:bb:3f:e9:08:b6:
1a:0a:8d:24:2d:50:be:4b:ff:0b:d2:29:48:10:13:
b5:05:c4:63:a5:f6:14:d7:df:ee:ea:7f:bd:b5:87:
79:5f:31:b0:0f:40:54:a4:5b:80:ac:14:09:47:08:
8b:df:64:71:45:c3:2c:08:dd:6e:0f:a4:25:ec:a1:
6e:e8:ec:d7:c0:50:5c:2c:b5:0e:8b:a8:74:43:8d:
57:3e:eb:26:e2:ac:98:26:7d:e6:05:7e:51:24:52:
da:ac:3d:2e:d0:f7:f4:36:cf:91:82:f2:4a:96:f6:
53:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:5F:7C:20:0A:52:F5:52:EE:40:AA:AA:0D:B8:AF:43:18:E7:51:04
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rl98IApS9VLuQKqqDbivQxjnUQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
33:ab:7b:4f:47:1c:cc:a7:d6:84:98:30:34:3c:01:ac:29:56:
1c:cd:51:a2:d6:aa:77:89:39:d4:c6:86:af:d0:40:aa:7a:32:
0d:c8:0e:15:03:60:85:98:c0:c7:fd:52:15:69:75:64:8b:eb:
13:50:f1:16:e5:1a:f9:01:50:60:e2:ad:78:b9:47:8c:81:2e:
6c:05:f0:fc:a5:c4:b0:68:87:4d:47:16:13:35:a9:6a:c9:67:
20:39:10:c2:bd:de:d9:91:44:13:7f:97:e6:dc:e3:db:0e:7a:
7f:37:4e:87:0c:af:60:2d:17:57:27:6c:d6:ab:8b:10:dc:80:
a6:d5:8b:c8:d9:18:74:39:f6:c4:95:77:19:fd:ec:bc:0b:6d:
57:77:72:eb:25:e4:16:35:3c:d4:55:f7:5a:29:e8:75:4c:0f:
55:27:dc:91:e8:d6:9f:80:56:05:58:cf:30:12:35:da:30:8b:
ca:ac:ef:79:5b:97:ea:5a:69:c0:e4:7d:7d:37:a5:b6:81:5b:
01:10:2d:1e:d1:3b:b0:77:a8:83:b4:53:7d:62:8c:42:7b:ca:
ac:41:e3:e1:df:a0:fd:33:d4:8a:8e:d6:7e:ee:ff:67:4a:af:
4a:ca:d4:85:7a:5e:de:6c:c2:f5:d1:cf:1a:ca:c2:05:11:ed:
9f:fc:e8:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:24:47 2025 by rpki-client