Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sRaYfYxCbzMPi8d0acPjg_4eF_U.roa
File: sRaYfYxCbzMPi8d0acPjg_4eF_U.roa (raw, json)
Hash identifier: o5OMZjpGnIJ1foqjEKWiQVw53qnAoC0P2iUIoXkeBaw=
Subject key identifier: B1:16:98:7D:8C:42:6F:33:0F:8B:C7:74:69:C3:E3:83:FE:1E:17:F5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186255A72461869A1B3784C3932A160E34E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sRaYfYxCbzMPi8d0acPjg_4eF_U.roa
Signing time: Mon 06 Feb 2023 06:12:09 +0000
ROA not before: Mon 06 Feb 2023 06:12:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:25:5a:72:46:18:69:a1:b3:78:4c:39:32:a1:60:e3:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 6 06:12:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b116987d8c426f330f8bc77469c3e383fe1e17f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:48:54:a5:4f:0c:29:b3:72:45:ef:bf:4a:3f:
8d:ba:dc:95:44:9a:a5:9e:57:10:41:a3:d1:2a:aa:
0b:91:6b:15:a2:e9:cb:32:e6:61:0b:b1:f7:fc:77:
5d:c7:d3:55:d9:17:e0:91:5f:27:30:37:c4:dc:e3:
aa:b2:dc:0d:c1:67:03:16:48:2b:a6:4a:77:d2:18:
b6:6c:93:49:a2:e6:20:72:6e:f5:d5:b3:42:60:8e:
04:69:9f:b0:e3:40:6b:97:6a:47:7b:bb:1e:67:4c:
9e:2b:32:17:af:60:df:d0:b3:ac:5e:7e:63:5e:76:
56:10:4e:9c:ea:48:03:9c:ec:6a:f4:6f:be:69:ff:
e3:c9:25:b9:af:a1:64:d7:ee:03:e1:13:56:f2:3e:
a8:0d:5c:ff:8d:d0:90:d6:d7:d0:f7:57:3d:34:cc:
26:3f:3b:70:16:1f:51:d3:f4:17:99:42:39:3e:eb:
e6:01:32:ff:b6:4c:d7:85:54:9a:3e:ae:9b:36:77:
74:f4:14:ad:20:36:09:eb:33:49:24:15:df:40:11:
b8:86:df:a8:41:f8:3f:13:4f:2d:85:47:f3:83:77:
c5:c6:ed:2d:fc:5e:eb:d9:75:e5:99:c8:00:e7:e6:
74:c4:19:45:54:33:66:5d:87:59:ff:1c:aa:7d:d0:
ec:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:16:98:7D:8C:42:6F:33:0F:8B:C7:74:69:C3:E3:83:FE:1E:17:F5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sRaYfYxCbzMPi8d0acPjg_4eF_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7c:9f:24:17:61:13:1a:ed:85:e9:30:10:77:10:a0:bf:48:50:
b2:78:ee:97:19:44:ff:e3:e3:f6:8c:a2:51:c0:b4:da:49:a5:
cb:11:70:a7:03:9a:7d:f6:ba:5b:3e:89:d9:3c:8f:98:2f:a7:
8b:a3:40:64:3b:67:fc:4e:7e:e4:8e:03:fb:90:d8:7e:f6:cc:
af:05:76:9b:cc:ad:8f:d9:ca:ba:2a:30:d2:b4:29:8a:77:9d:
2d:99:6a:af:2e:11:97:97:7d:4a:fc:12:49:33:0e:da:8f:bf:
85:20:e6:1b:33:2b:9f:f2:76:3c:cd:a2:fb:e3:f8:e8:a4:49:
94:a0:66:7c:0b:d2:e8:1c:82:3e:8e:80:0b:1e:56:a3:c3:45:
a6:1c:01:80:aa:d5:3b:81:4f:61:e1:15:b4:9c:d6:27:d9:e4:
aa:56:54:3c:ff:a3:d6:81:ee:82:e4:48:bc:5d:5e:af:ce:52:
29:7d:c4:ed:c7:a9:5d:fe:c2:14:ba:91:cc:19:62:b9:f4:af:
a8:b3:b0:77:09:e5:8c:2a:c5:4f:4a:c7:01:e7:b3:6a:50:3f:
ad:c5:d1:cd:39:59:be:67:2e:b8:c5:de:f2:86:6b:81:e5:37:
47:44:43:10:2d:45:ae:af:db:5e:7b:1e:5a:9a:d0:05:f7:3d:
9b:b7:b2:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:33:21 2025 by rpki-client