Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sLc0ixXQAiq-8d3jU4l2i_ZVCgg.roa
File: sLc0ixXQAiq-8d3jU4l2i_ZVCgg.roa (raw, json)
Hash identifier: fNjuGpZPIcffoqCWYhzyucgWRt2g3RZXSOvePw7SsZg=
Subject key identifier: B0:B7:34:8B:15:D0:02:2A:BE:F1:DD:E3:53:89:76:8B:F6:55:0A:08
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183B3A7CB837122271FC7A71A795AC84517
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sLc0ixXQAiq-8d3jU4l2i_ZVCgg.roa
Signing time: Fri 07 Oct 2022 18:14:21 +0000
ROA not before: Fri 07 Oct 2022 18:14:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:b3:a7:cb:83:71:22:27:1f:c7:a7:1a:79:5a:c8:45:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 7 18:14:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b0b7348b15d0022abef1dde35389768bf6550a08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e5:79:ab:f6:2f:03:24:01:78:94:c8:d7:0c:
e8:03:6e:bb:e6:40:eb:6e:81:60:07:8e:7e:71:8b:
e2:84:87:c1:04:9b:54:e8:d3:ae:94:1d:9c:76:ec:
17:84:78:93:ae:04:44:59:10:9e:6e:a6:81:f1:85:
66:ac:52:bb:c4:11:53:38:23:65:96:04:0d:c9:29:
60:74:86:93:db:28:e2:51:cd:7a:ed:a6:61:ff:38:
08:cd:86:c5:3f:c9:93:a9:95:c5:b6:d3:c0:f1:2c:
9e:df:43:c2:8b:99:ac:71:9e:80:e3:b9:91:d3:b5:
cc:02:25:78:e5:2e:37:35:0c:97:c5:e2:b3:3b:ee:
bd:2b:da:d6:3f:8b:3b:14:b7:5e:f2:3f:77:b4:2a:
40:2b:bb:d2:6c:14:77:2a:22:7b:f7:40:c9:c5:26:
37:e0:54:ef:9c:31:79:44:f6:ba:ee:85:99:b0:7a:
39:95:10:b4:6b:be:a8:d3:63:06:be:17:d8:78:e7:
82:17:85:5f:9a:15:0d:ef:31:ad:3d:84:c2:c1:de:
f7:62:cb:e3:a9:ac:fb:5f:53:be:d5:7b:fb:9e:9f:
8b:d9:e9:f9:41:47:2d:86:3b:75:5f:ae:50:07:9b:
97:fc:fa:4b:e0:72:58:6c:60:29:07:cd:e9:63:e0:
05:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B7:34:8B:15:D0:02:2A:BE:F1:DD:E3:53:89:76:8B:F6:55:0A:08
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sLc0ixXQAiq-8d3jU4l2i_ZVCgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
48:41:4e:1c:e9:f4:2a:2e:35:1c:55:c8:0e:5d:3c:dc:b4:7c:
a8:ab:ef:fb:f0:3d:48:ac:34:68:95:58:21:e3:c8:4b:bc:e7:
a8:0b:95:f3:03:f8:e1:56:f5:ed:ef:58:ed:dc:f9:11:e1:c5:
65:a1:44:2e:04:98:1e:40:97:06:4a:40:49:94:72:48:40:a6:
be:10:d5:df:6c:8b:6c:7b:36:c1:81:25:48:51:3c:d4:e8:5c:
89:4e:ee:fc:b7:d9:96:8f:58:f3:b9:d6:a2:71:88:b4:9e:69:
ba:0b:7f:6c:57:f5:d6:ca:4e:ba:58:8e:64:4d:f3:fd:c4:53:
74:c7:c3:a6:94:27:a2:01:9e:17:cf:c5:07:34:98:ec:d7:be:
f9:0b:97:b5:f5:b7:df:cd:61:b3:33:16:89:f0:d7:9f:cd:fc:
1d:e3:3f:90:8b:b2:59:2b:c8:d3:71:86:04:96:88:0f:ac:6e:
aa:aa:e2:66:01:54:c4:80:bf:53:0f:69:b1:c2:00:18:c9:c8:
f9:bf:ef:9b:c0:a5:e2:7e:95:49:40:ab:9d:6f:84:a6:a3:74:
6e:65:d2:e4:02:71:bd:30:3c:92:ee:3c:58:8d:a5:53:2f:48:
32:1b:45:4a:dd:18:54:51:bf:59:cc:23:4b:a1:02:5a:ce:eb:
18:0f:f1:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:43:48 2025 by rpki-client