Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sGWTs0gWVsOeiSl6goXt_bBKOd0.roa
File: sGWTs0gWVsOeiSl6goXt_bBKOd0.roa (raw, json)
Hash identifier: 6VgGLIRUaQepa27gMzp9exM+LpFc+R78Zm+HRiZY1aE=
Subject key identifier: B0:65:93:B3:48:16:56:C3:9E:89:29:7A:82:85:ED:FD:B0:4A:39:DD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01861CC358E03A812D8EA9875D74BD0BFF15
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sGWTs0gWVsOeiSl6goXt_bBKOd0.roa
Signing time: Sat 04 Feb 2023 14:10:09 +0000
ROA not before: Sat 04 Feb 2023 14:10:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:1c:c3:58:e0:3a:81:2d:8e:a9:87:5d:74:bd:0b:ff:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 4 14:10:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b06593b3481656c39e89297a8285edfdb04a39dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:51:bc:56:ff:6b:d4:ac:68:51:b3:37:05:5d:
f6:99:86:76:0b:10:53:43:d2:c4:13:5a:2f:88:85:
42:71:74:e3:53:ee:c0:d5:93:69:1e:1f:ac:ec:b6:
aa:73:dc:a5:0e:f2:82:60:72:05:b1:50:3c:ac:e5:
f4:36:ac:58:b0:8d:df:4c:5e:a0:3f:cb:79:51:f8:
2c:f6:92:08:60:e2:ab:09:ea:ad:ba:73:60:01:d3:
26:c3:52:d1:74:89:49:df:a9:65:96:a7:4b:77:4d:
e8:37:1e:ef:8c:6d:4b:0d:9d:5b:d1:59:70:c6:90:
35:5a:4f:35:a0:99:4c:1d:4d:65:04:aa:7d:26:11:
88:f2:ee:8f:e4:8c:46:d8:79:6d:ac:67:fc:34:be:
a0:ea:71:96:2c:f3:d6:cd:24:7b:2f:4a:10:1f:26:
5b:34:a8:9e:83:af:66:26:6f:32:e3:55:a7:70:ea:
ff:61:f4:06:cf:75:3c:c7:91:0d:de:98:9d:fd:7b:
e1:fe:7d:1a:2f:6a:53:bc:45:b7:21:b5:3c:6a:44:
88:04:f4:95:71:e0:3f:65:ce:e2:3d:09:75:f9:84:
ad:db:cc:22:c1:ad:b9:57:94:89:3b:9c:4e:ce:39:
ad:8e:0c:8b:73:5f:54:76:c8:6f:6a:26:df:f9:d9:
ca:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:65:93:B3:48:16:56:C3:9E:89:29:7A:82:85:ED:FD:B0:4A:39:DD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sGWTs0gWVsOeiSl6goXt_bBKOd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
39:ef:c4:d8:ee:19:2b:48:10:79:b8:47:d0:b6:69:a7:d4:0f:
df:58:f5:45:30:28:ea:b5:b8:36:50:37:53:c9:7d:c3:1d:15:
92:42:ca:45:44:9c:5f:5a:49:f5:8e:1c:71:28:7b:59:cb:76:
71:be:aa:fe:f4:21:8a:57:de:4d:2a:ee:7a:55:c1:ac:f1:4c:
ab:fe:3e:1d:90:1f:5a:b6:0b:c8:89:8c:54:88:0f:4a:09:c4:
93:2e:4d:b4:cb:af:e7:2b:54:65:d7:5f:e1:c4:4b:57:d2:f0:
4a:03:75:a1:0f:bd:f9:15:d5:7a:9c:7e:69:30:cb:e7:02:cd:
11:f2:da:57:fc:59:6b:9b:56:5f:89:50:e7:76:cb:06:bc:64:
da:e2:7b:83:07:90:3d:28:18:90:0a:9b:db:70:90:94:48:30:
98:be:77:0c:a0:58:37:43:25:d6:4f:db:7a:55:65:fb:0a:5e:
94:80:35:ae:04:9e:b3:26:ae:6a:ae:65:62:f3:18:48:0d:33:
66:ba:51:43:e4:61:e2:0c:94:76:d9:97:d3:e8:74:71:3c:06:
c9:5d:ee:38:f7:5c:2c:c8:bc:0f:f7:a9:28:cd:46:ba:4c:f5:
4b:06:07:ea:7a:25:63:fd:0e:2b:1c:51:cc:e2:fe:6b:5f:c7:
18:d8:ef:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:35:50 2025 by rpki-client