Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/szlSXVl2CnU9t1etJYJ5baI1kZk.roa
File: szlSXVl2CnU9t1etJYJ5baI1kZk.roa (raw, json)
Hash identifier: mMA7bWJgVOPBS/7mOUANj12lctQD6d2TGkeGc/8BRUc=
Subject key identifier: B3:39:52:5D:59:76:0A:75:3D:B7:57:AD:25:82:79:6D:A2:35:91:99
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A39E3696077D6C69F227F493DE77DB84F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/szlSXVl2CnU9t1etJYJ5baI1kZk.roa
Signing time: Mon 28 Aug 2023 02:05:19 +0000
ROA not before: Mon 28 Aug 2023 02:05:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:39e2:a5d0/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:39:e3:69:60:77:d6:c6:9f:22:7f:49:3d:e7:7d:b8:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 28 02:05:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b339525d59760a753db757ad2582796da2359199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:7b:a7:6f:87:52:b9:c4:04:bf:16:d8:c2:d3:
a7:46:71:30:f7:d2:4c:0c:fe:14:1e:5b:4d:d3:55:
19:42:74:d3:f1:bb:80:01:1f:32:46:4f:c4:5d:01:
bb:80:b5:65:8d:f7:96:f2:a6:f0:11:95:c1:25:a4:
28:14:02:a0:00:f1:97:84:54:d1:13:ad:51:2a:75:
ea:a5:43:ab:6d:6f:48:8d:92:30:10:4a:4f:9f:a0:
f5:11:b8:b2:1d:7c:85:86:d7:8a:9a:51:0a:a1:41:
3a:5d:61:86:48:48:33:73:da:25:ad:1e:9b:3a:1f:
87:c0:9a:d6:94:d2:4b:17:e2:1a:38:cc:12:8e:12:
dd:59:2c:e8:a5:29:a7:d0:eb:2a:f3:9c:7c:ea:09:
ac:c0:4d:c4:d6:ec:4a:e8:99:df:13:61:6a:a8:22:
41:49:3e:e2:7f:a6:1d:99:ea:be:e2:4a:4d:03:19:
63:cc:77:70:57:ab:10:b1:a9:43:16:1b:48:3a:a3:
b1:56:32:49:cf:38:38:55:35:9c:04:11:48:94:9c:
be:70:ff:b6:67:25:82:df:57:88:3f:8d:9a:c4:5c:
3c:11:64:bd:44:61:16:87:d0:ff:40:9c:fd:dc:fc:
23:d4:a6:40:b4:0b:14:a6:5d:20:16:2b:18:bc:fb:
88:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:39:52:5D:59:76:0A:75:3D:B7:57:AD:25:82:79:6D:A2:35:91:99
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/szlSXVl2CnU9t1etJYJ5baI1kZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
04:de:50:f4:8a:7e:ca:e5:e1:93:ec:8f:f8:84:c3:eb:96:1f:
41:c5:c4:d8:f5:3c:dc:30:d2:93:1c:81:d8:cd:d2:a0:74:d5:
11:c5:cf:f6:8b:d3:99:c0:e3:ce:de:a4:90:3b:b8:f2:f5:09:
93:b2:05:c2:79:77:09:b9:ba:eb:10:bb:92:63:e5:de:0b:36:
5a:31:5e:dd:9e:86:50:eb:f4:42:62:37:07:2b:bf:d0:4e:80:
1a:50:3e:6f:db:e5:86:ab:4e:d9:5d:e3:7c:4e:96:71:bd:ac:
83:01:aa:9d:02:75:c3:71:3c:f4:78:ff:1c:64:26:d8:c9:73:
46:20:78:48:a4:01:b9:bf:5d:f8:2d:5f:6a:00:af:bc:66:90:
a7:48:64:13:eb:82:ba:81:66:4a:41:1e:74:5b:2e:79:88:9c:
6a:3e:ea:40:f3:eb:34:ff:83:87:0c:20:01:76:db:30:7c:03:
16:18:05:6d:a0:14:91:8a:5e:96:a6:da:f4:ba:c5:99:c7:48:
04:53:45:a7:ac:c1:71:f5:88:66:b0:7c:ff:96:b5:31:e1:a9:
da:17:29:08:98:70:34:64:85:77:d4:bc:02:5a:07:46:31:0e:
8d:c9:f3:a7:c0:66:47:8d:8e:e7:71:70:7a:f0:51:92:ad:2e:
ed:c8:8b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 20:47:40 2025 by rpki-client