Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ruZ5I59e3vpdzJo6uavpqHYME-A.roa
File: ruZ5I59e3vpdzJo6uavpqHYME-A.roa (raw, json)
Hash identifier: 7W3WcwmDyLJy32KSmiUZoTJtWNhyNJet4SkZNm0acEQ=
Subject key identifier: AE:E6:79:23:9F:5E:DE:FA:5D:CC:9A:3A:B9:AB:E9:A8:76:0C:13:E0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185C8E2B8AF4ECC7371F08DD62B4261BEB9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ruZ5I59e3vpdzJo6uavpqHYME-A.roa
Signing time: Thu 19 Jan 2023 07:16:19 +0000
ROA not before: Thu 19 Jan 2023 07:16:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c8:e2:b8:af:4e:cc:73:71:f0:8d:d6:2b:42:61:be:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 19 07:16:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aee679239f5edefa5dcc9a3ab9abe9a8760c13e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:3b:0c:0f:50:f0:ec:86:8f:6b:a8:14:f3:a8:
14:13:0a:46:7c:ef:68:69:0f:b5:db:d2:e9:f8:69:
ac:89:10:b1:5b:52:59:29:fc:82:d9:b1:f3:fc:78:
5f:1d:3a:6d:02:d7:b0:50:d6:27:06:82:71:73:1c:
86:d2:f8:4e:d7:14:31:f8:5c:00:bc:04:48:ef:44:
b4:e8:07:64:68:fb:1b:46:e3:53:97:23:73:5f:70:
92:d8:d6:bb:64:4c:05:23:f5:90:14:c8:2d:df:94:
3f:04:9b:f5:1d:50:94:a7:f3:66:71:82:83:a1:ba:
12:89:b2:61:ca:99:a4:71:8c:ea:99:6b:19:5d:34:
ce:58:20:19:75:8a:0a:55:fe:26:f3:cc:7e:68:13:
30:d0:67:08:ac:90:61:d3:3e:ce:48:3e:d5:99:39:
8e:d7:1d:a6:b4:0b:85:62:c3:f7:56:d8:03:1b:5c:
3d:2a:31:ea:c0:ce:62:48:51:4e:f3:54:f2:86:a7:
a6:3b:31:52:aa:22:62:c1:f8:25:b0:30:2b:67:de:
f1:ee:82:46:9f:30:0d:48:27:b9:65:7d:c3:bc:b7:
f5:29:c4:76:ee:e8:28:3e:d5:22:81:c1:44:43:ed:
d3:f8:47:dd:6f:d2:b9:0c:f0:66:1e:1f:5f:70:e7:
10:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:E6:79:23:9F:5E:DE:FA:5D:CC:9A:3A:B9:AB:E9:A8:76:0C:13:E0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ruZ5I59e3vpdzJo6uavpqHYME-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9c:f0:69:89:1a:2f:60:41:bf:67:c3:19:39:c5:9d:3c:3a:ca:
63:a0:d1:4d:59:66:8b:3d:42:cd:eb:c7:41:b5:a9:66:19:d9:
eb:b0:3e:e6:49:b3:5c:7c:72:dc:4d:e7:52:97:4a:21:a6:6d:
44:6e:48:95:2c:7c:d9:89:4d:e6:cb:17:7d:f5:0d:56:9f:bb:
b7:43:53:7e:e1:c1:54:aa:a9:7b:c4:ac:82:74:c7:c4:e7:7d:
9a:67:d1:fc:56:73:81:19:8f:81:1e:72:44:13:1a:c2:9b:ce:
27:8d:b4:74:1e:02:c4:1b:1c:b2:39:1e:a0:e1:d2:e5:3c:3b:
d9:a4:d1:b0:f6:bd:cf:e3:04:1c:a4:a4:66:b4:1d:a0:d4:5f:
87:e1:9d:c8:22:05:bd:4a:1b:b4:4f:05:84:75:7a:32:26:a2:
05:95:d6:4a:9c:3f:89:97:d5:05:bc:ac:48:a9:7e:60:06:6c:
8c:8b:e7:e9:13:f2:ca:09:ca:dc:48:a3:b9:71:90:f9:99:ef:
6c:f6:65:b1:d0:33:b4:a9:92:11:cb:45:4a:07:c8:39:2c:f0:
f2:74:e1:ef:fd:cc:82:72:8e:d9:62:e1:2f:02:0c:bd:81:3c:
85:ef:c4:8e:6f:d3:90:9d:5b:a2:c2:c5:1d:f6:cb:62:d1:90:
54:46:fb:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 21:37:18 2025 by rpki-client