Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sA_9Burt51ARfZxJ5OBKsG7F9BI.roa
File: sA_9Burt51ARfZxJ5OBKsG7F9BI.roa (raw, json)
Hash identifier: OfGIjU9ZxW2PfQnBXZPLjxVbjphj4D505h4vlbJqyKs=
Subject key identifier: B0:0F:FD:06:EA:ED:E7:50:11:7D:9C:49:E4:E0:4A:B0:6E:C5:F4:12
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185CA290455C0331425D91338BDB2C61147
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sA_9Burt51ARfZxJ5OBKsG7F9BI.roa
Signing time: Thu 19 Jan 2023 13:12:43 +0000
ROA not before: Thu 19 Jan 2023 13:12:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ca:29:04:55:c0:33:14:25:d9:13:38:bd:b2:c6:11:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 19 13:12:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b00ffd06eaede750117d9c49e4e04ab06ec5f412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c0:31:45:42:8f:eb:f7:d4:d8:76:35:96:6b:
38:0d:a0:65:55:26:47:d2:da:c3:1e:f3:a7:69:b9:
2f:04:66:53:bb:e4:46:d4:ad:a0:f0:96:46:de:35:
10:39:01:09:38:bf:3a:7b:b6:18:71:22:df:ce:9f:
6b:02:3e:08:eb:b7:1d:aa:32:bd:4f:8e:5d:de:b9:
0e:86:b2:5a:55:a7:62:2c:58:df:15:3d:60:f8:49:
b5:e1:ed:87:e2:ff:5f:4c:58:65:61:50:f6:26:0b:
34:e1:a5:30:bd:67:69:2f:c0:08:5d:04:0d:13:f6:
9d:94:40:fa:60:f9:da:3b:8e:ec:46:24:35:45:fe:
c2:f2:da:c1:5e:7a:50:d5:4e:8e:6a:57:04:b8:fb:
88:0a:f4:73:46:49:1a:6a:40:55:b8:a7:7c:42:17:
e7:0c:80:4d:ef:75:a1:d6:c6:64:5c:f2:35:80:3c:
b2:d1:17:1b:dd:62:c5:fa:0c:b6:14:5e:f5:4a:cd:
64:d0:65:cf:df:f7:b1:70:37:4e:a5:1e:99:ab:68:
65:63:0d:7f:26:55:1a:80:04:4c:c8:b4:4c:88:88:
2d:73:05:7e:df:86:ee:a2:62:5c:12:09:06:46:b1:
d9:fd:e3:a0:92:d5:59:23:58:78:39:d5:33:84:88:
f4:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:0F:FD:06:EA:ED:E7:50:11:7D:9C:49:E4:E0:4A:B0:6E:C5:F4:12
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sA_9Burt51ARfZxJ5OBKsG7F9BI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
21:ce:88:98:45:08:0e:c9:ca:6d:73:da:54:fd:91:6a:ce:0d:
be:30:d5:83:18:61:5b:0c:90:f7:ad:a8:20:ae:af:83:76:39:
8c:b6:4c:ba:72:e8:ad:03:72:ed:1f:32:69:ea:b7:ac:51:8b:
9f:67:9e:28:5b:4f:ff:1e:de:9b:7e:6d:2d:b3:eb:25:92:40:
d8:2a:f2:5e:ac:df:bc:a0:95:e5:0d:7d:44:d4:57:d0:42:fa:
25:11:da:c2:6d:f8:14:30:8d:bc:b7:72:55:c9:ec:4d:89:e7:
28:5c:4a:50:62:a0:2d:fa:5c:8b:cd:7b:c0:e7:50:3b:e6:74:
81:2e:01:df:e3:ea:d7:c0:be:0d:b6:3d:b3:44:e8:9d:14:f9:
c8:ac:0f:a4:cf:5d:3a:ea:f8:7b:25:18:61:72:c0:97:24:2a:
7d:1c:16:31:07:97:68:48:c8:12:87:7f:8f:79:99:a1:2c:70:
6f:0d:19:69:0f:a1:e8:29:76:9e:4b:50:70:66:e8:e7:57:d3:
19:d5:fe:ee:e5:99:f5:3b:b9:69:ba:5c:cb:e9:76:86:bf:c2:
ae:f3:52:92:5d:98:f0:47:ab:58:7c:6a:8d:f2:87:03:f4:74:
53:c8:98:2f:d5:0c:4b:e2:c0:39:7d:89:51:3f:66:d4:d5:2a:
53:f3:3b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 01:54:46 2025 by rpki-client