Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tK5dKgrHvdUC7hPRQVlHpii_jPo.roa
File: tK5dKgrHvdUC7hPRQVlHpii_jPo.roa (raw, json)
Hash identifier: SSZAcG0rtLiMJZZjb8H8bGsWKnB6riwAjgSGmHtNFjY=
Subject key identifier: B4:AE:5D:2A:0A:C7:BD:D5:02:EE:13:D1:41:59:47:A6:28:BF:8C:FA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186402BF614EE68C0F3308A5F541867A57D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tK5dKgrHvdUC7hPRQVlHpii_jPo.roa
Signing time: Sat 11 Feb 2023 11:11:08 +0000
ROA not before: Sat 11 Feb 2023 11:11:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:40:2b:f6:14:ee:68:c0:f3:30:8a:5f:54:18:67:a5:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 11 11:11:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b4ae5d2a0ac7bdd502ee13d1415947a628bf8cfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:af:3e:11:d4:17:5a:83:08:76:ab:58:78:74:
13:3a:18:45:a4:ec:3c:a3:22:69:72:a5:01:38:fc:
b0:cf:6e:0a:40:91:c1:e0:6c:60:28:f0:ee:94:cc:
c7:69:f5:f1:21:ff:13:22:87:ba:a7:ec:83:98:c8:
00:53:69:df:8e:4f:fd:fe:26:67:d8:29:ba:13:05:
af:33:b1:9b:8c:aa:cd:13:5a:6f:c0:0b:e0:49:ce:
82:0e:68:fd:c0:84:17:ad:e1:60:9a:7e:a0:fd:5b:
52:ca:a8:d5:a2:6e:7e:2e:ca:6a:f5:1c:8d:e1:3f:
f9:31:f4:10:33:96:2f:2c:3c:31:9a:f0:da:9c:59:
12:fc:f8:a1:b7:b4:7a:9b:6b:6c:8d:cb:a8:86:37:
2c:26:c6:6f:c1:e0:08:74:f2:f4:bb:f0:ec:7e:30:
8a:71:d9:30:33:60:2f:4f:c4:93:4c:f6:8b:62:a6:
45:a4:65:36:ce:94:6e:60:d8:3b:61:fd:51:21:8d:
8f:55:13:25:26:8f:1e:67:d9:d4:c6:b8:c5:e6:95:
de:16:b7:2f:91:b0:60:d3:79:36:4b:b5:fb:bb:6b:
e0:8f:9f:4f:5f:5c:81:e3:e8:d9:67:1a:dc:27:30:
42:4f:2b:20:ba:11:2a:8e:b2:39:85:75:b0:a3:7b:
03:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:AE:5D:2A:0A:C7:BD:D5:02:EE:13:D1:41:59:47:A6:28:BF:8C:FA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tK5dKgrHvdUC7hPRQVlHpii_jPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
42:7b:76:f4:ac:03:56:24:19:69:c7:03:e5:d3:86:25:cd:70:
ca:c0:a0:80:0d:36:0f:0c:e1:e8:6c:c8:8d:03:26:67:0f:bb:
e1:1d:9f:6b:d6:03:dd:74:3e:ca:2a:86:e7:2e:1e:e3:14:7a:
4b:99:1b:f4:a4:f3:71:f3:be:12:91:86:ff:31:d0:5c:78:84:
07:2e:be:02:39:a4:e6:96:a2:f9:40:38:77:c8:52:ef:9e:17:
c6:17:82:9a:2b:ae:91:12:f8:2e:47:11:14:0a:ac:40:ec:a8:
e4:38:2e:2c:95:49:52:b2:40:91:bd:0a:3a:e4:55:20:f1:a0:
55:ef:92:6e:f1:79:ed:64:11:f0:ed:99:30:75:ff:db:99:a1:
00:08:8f:ba:cc:c6:c7:ce:e3:e4:11:9c:25:bd:da:7e:cd:dd:
43:16:6c:f8:f1:8a:fb:67:b0:62:6d:35:55:14:5d:40:c6:5a:
8a:0c:19:60:6e:95:78:40:0c:65:73:5b:da:2c:84:e1:6c:7e:
03:f6:f8:f0:9d:aa:2d:dc:d4:97:01:2c:07:89:da:5d:6e:9b:
23:0f:b4:b2:ef:ea:e8:5c:7e:7b:0e:6a:35:5d:dc:a2:05:63:
00:82:41:d3:2a:ed:6e:ea:0e:fb:86:94:3e:c2:a2:da:15:9e:
f0:74:73:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 03:24:28 2025 by rpki-client