Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/t5K2EaatB_9p5EUThixAgSRQiZs.roa
File: t5K2EaatB_9p5EUThixAgSRQiZs.roa (raw, json)
Hash identifier: 9LzDfGaN0wWcGakO9KpoXC6GfGVS1gw9rpDrc7d1mSw=
Subject key identifier: B7:92:B6:11:A6:AD:07:FF:69:E4:45:13:86:2C:40:81:24:50:89:9B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A2AEDC21C0E3848D4E3FD42FAC52E6273
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/t5K2EaatB_9p5EUThixAgSRQiZs.roa
Signing time: Fri 25 Aug 2023 04:22:19 +0000
ROA not before: Fri 25 Aug 2023 04:22:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:2a:ed:c2:1c:0e:38:48:d4:e3:fd:42:fa:c5:2e:62:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 25 04:22:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b792b611a6ad07ff69e44513862c40812450899b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:2d:a3:a0:d0:4c:f8:e5:ee:5e:0b:70:8d:01:
d2:63:d5:ac:85:0a:f5:ad:9e:fa:c9:e9:a6:62:71:
ef:6a:48:3e:20:84:4f:b6:b5:e2:98:99:22:2d:db:
11:a6:9b:2f:61:50:98:d5:ba:f2:46:b4:f5:95:e7:
c6:bc:62:bf:40:56:db:21:6a:a6:3a:55:4a:7a:70:
39:08:29:63:90:b8:77:82:5a:d7:f6:c5:93:00:71:
2b:ef:fc:fa:b2:c9:c5:18:61:3c:9b:5c:a5:3a:bb:
33:1d:b2:90:fe:fc:cb:82:d3:44:f2:a4:fd:1e:25:
19:a6:05:ab:15:30:83:5d:58:2b:aa:52:d7:7b:6e:
c3:81:0f:d1:26:55:df:d5:bc:c3:64:e1:24:d4:0f:
dc:10:4f:b8:5d:13:e1:be:ed:95:ef:9e:0a:7f:95:
5f:bb:92:1f:51:80:7f:e6:c3:ef:ae:2d:f6:e2:e1:
9a:87:2d:8a:b1:ab:4e:dc:95:7d:1c:b6:cc:c1:f3:
bd:92:17:02:72:e4:f7:d3:dc:45:09:a0:1f:c4:0d:
25:02:01:36:ca:9a:43:02:0f:3a:4a:0b:0c:ef:2e:
f8:80:58:0e:38:7c:bb:f9:26:2b:01:af:97:94:57:
fe:e4:d1:ce:9a:0a:dc:3d:d9:e1:e1:1a:5c:62:ae:
99:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:92:B6:11:A6:AD:07:FF:69:E4:45:13:86:2C:40:81:24:50:89:9B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/t5K2EaatB_9p5EUThixAgSRQiZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0d:9f:1b:c3:4d:ec:65:63:69:f3:82:8a:34:e3:13:b4:3a:44:
2f:66:ec:a7:5f:9c:e0:55:58:49:59:5f:f1:9e:62:f1:ef:8d:
f9:4c:60:a9:db:4e:1d:9c:3b:48:2d:2f:f7:ef:db:b4:33:6b:
66:f6:7b:27:ec:50:87:c7:99:07:61:b8:88:36:85:80:63:39:
ff:11:d7:91:0f:2c:7f:de:c7:82:7f:65:12:4c:ae:2b:c9:64:
a4:8b:a2:a3:69:09:09:84:c1:3d:9d:01:d1:b5:14:eb:92:3b:
7a:f4:4f:db:0b:d5:63:d3:86:09:2b:08:03:01:26:c4:80:26:
c0:13:6a:1c:8a:aa:31:07:5b:74:3a:c1:99:38:c9:d7:94:2b:
ae:63:08:d6:cf:0e:7b:a0:98:b7:6e:e3:eb:60:d4:e8:a6:7d:
1a:d3:d4:f2:83:ff:82:a3:95:f6:69:95:d7:4c:4b:f8:8d:6d:
48:40:20:8f:50:db:96:62:18:d6:d0:c9:29:39:a8:50:4b:d1:
da:81:2b:9a:47:2e:11:6b:f8:6a:a2:15:1c:ad:79:4e:fb:a4:
35:52:58:2e:9d:72:83:c3:e7:05:d6:1f:05:31:c9:a3:c2:5a:
51:92:10:2f:b8:c2:29:12:e6:80:83:a2:b3:e2:fb:e7:77:5d:
f2:f2:7d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:21:14 2025 by rpki-client