Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rtvFTU8K4svO0jgnkPiS7hPnFTk.roa
File: rtvFTU8K4svO0jgnkPiS7hPnFTk.roa (raw, json)
Hash identifier: kQAK6Ke93/Fvjm9FHihWBeXRcYrkVWLM3N2W9eYufH8=
Subject key identifier: AE:DB:C5:4D:4F:0A:E2:CB:CE:D2:38:27:90:F8:92:EE:13:E7:15:39
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A3CB96CC6765CBBFB288FE0C059142C45
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rtvFTU8K4svO0jgnkPiS7hPnFTk.roa
Signing time: Mon 28 Aug 2023 15:18:19 +0000
ROA not before: Mon 28 Aug 2023 15:18:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:3c:b9:6c:c6:76:5c:bb:fb:28:8f:e0:c0:59:14:2c:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 28 15:18:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aedbc54d4f0ae2cbced2382790f892ee13e71539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f3:2a:8a:48:fb:ec:2f:ac:5c:da:f9:84:0b:
5c:57:37:c3:f4:5b:1a:4e:1d:d3:aa:7d:dd:4e:76:
94:32:6d:44:dc:ff:d0:ba:22:d8:d8:b7:ea:00:54:
9b:bb:1f:a9:87:66:b8:be:04:34:37:a9:c8:4b:1c:
53:d8:15:d1:22:1b:5a:7a:90:f5:e7:d2:7e:95:93:
55:dd:bc:d3:6e:e9:7d:2d:db:61:aa:82:b8:b2:6d:
71:cc:66:d9:95:12:56:20:27:c7:b9:7b:7c:dd:ff:
8c:ad:ca:94:c5:f4:14:81:f7:be:7f:56:1a:01:63:
06:4a:53:cf:cc:74:61:4c:01:67:e2:a0:20:b4:46:
74:c2:00:c9:46:20:06:2c:30:7b:90:0b:0a:c2:ab:
bf:47:b5:c3:27:85:bc:ea:50:37:0a:2e:3c:86:41:
76:2d:d8:19:dd:00:91:e2:f0:9d:83:97:7a:21:1b:
54:44:c9:a3:14:67:85:8c:8c:ca:4c:86:c4:9a:50:
21:16:63:1a:8d:bd:af:ab:0a:d0:77:58:a1:78:97:
de:c2:b0:ec:6d:24:5a:9c:bf:3d:4a:c2:9d:a9:d4:
f9:40:b1:e1:c5:e7:5e:77:06:dd:8e:ea:94:5b:46:
62:e0:e8:f4:cd:a4:bd:7d:fe:56:f6:35:00:06:4d:
21:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:DB:C5:4D:4F:0A:E2:CB:CE:D2:38:27:90:F8:92:EE:13:E7:15:39
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rtvFTU8K4svO0jgnkPiS7hPnFTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
52:de:7d:a8:dd:e5:57:6b:49:e3:49:99:c5:b9:b2:f0:29:e0:
68:fd:50:c3:85:79:8a:27:25:7d:5e:ff:98:14:d4:cd:98:ab:
c1:18:8e:27:f2:26:36:54:98:0c:e0:34:32:31:0e:94:1c:57:
d2:84:e4:af:68:80:5b:28:9c:50:48:59:7b:b4:19:c9:3e:0f:
1c:ec:cb:bc:f8:23:ca:a9:25:00:7a:6f:f7:5f:4a:70:e5:1c:
b4:7c:58:ab:0d:aa:64:3c:fb:2b:35:c4:ff:c8:4f:ae:50:e0:
4b:3e:f5:71:d4:e5:1d:4b:0f:a2:57:49:33:a3:2a:31:c6:06:
92:97:f9:da:d0:18:e6:db:6a:43:30:cc:73:15:9e:0a:a5:e9:
8f:95:d7:1a:c8:44:be:e0:bf:84:aa:3a:22:a6:d1:54:e1:86:
fc:82:ad:65:eb:47:90:e8:df:7d:b2:b3:25:02:90:3e:c7:75:
77:66:57:d6:96:44:23:60:37:b5:54:64:fb:aa:47:db:cb:79:
da:6d:e3:8f:d5:a1:2e:d0:43:d7:48:e1:8a:bc:e5:b1:68:b3:
5e:28:28:e5:c3:10:fb:93:67:7b:6b:a9:2d:f0:2f:94:e0:71:
44:4b:00:0b:c5:b5:19:89:aa:60:e2:0e:aa:4b:6c:ce:1a:a1:
d1:f2:a3:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 22:10:17 2025 by rpki-client