Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/taTA8Exfhk0YCfThRmenY0nuRVA.roa
File: taTA8Exfhk0YCfThRmenY0nuRVA.roa (raw, json)
Hash identifier: YuOv3mRsAEB+3J4Qpc5xm4mzas6yiDJvLHYi2zonDOo=
Subject key identifier: B5:A4:C0:F0:4C:5F:86:4D:18:09:F4:E1:46:67:A7:63:49:EE:45:50
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185F7DBAF542B2B728554023C1585C9EA9D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/taTA8Exfhk0YCfThRmenY0nuRVA.roa
Signing time: Sat 28 Jan 2023 10:10:47 +0000
ROA not before: Sat 28 Jan 2023 10:10:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f7:db:af:54:2b:2b:72:85:54:02:3c:15:85:c9:ea:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 28 10:10:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b5a4c0f04c5f864d1809f4e14667a76349ee4550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:73:28:5b:e1:4e:0f:96:ee:f9:22:43:b9:c2:
74:9f:ba:bb:a8:dc:06:2c:9a:58:66:01:39:b3:ef:
31:98:6d:fc:a7:09:9b:5d:ce:61:39:2f:64:be:fb:
bb:56:41:91:c1:7b:32:f7:ff:85:79:78:84:2b:e0:
3a:84:95:a5:ae:f5:8f:57:e4:9d:96:8d:3e:60:27:
34:67:5a:15:63:66:88:4c:42:66:7f:fe:cd:16:28:
b8:66:95:02:97:b3:82:39:1b:ec:1f:d3:15:10:89:
e8:9e:e9:7b:49:7c:02:ee:dc:d2:3f:d7:b6:9d:e6:
04:04:d8:ff:a8:de:7a:42:af:7a:28:5f:2f:49:17:
56:9b:0c:7d:ba:53:e8:25:a3:33:ea:79:01:f0:f8:
87:89:0c:24:1b:1b:b2:bd:27:6c:be:7e:e2:73:8a:
94:82:c9:23:a0:e9:cd:9b:42:35:00:e7:a8:72:0a:
1e:32:e1:2f:b2:49:f7:86:67:bb:1a:65:44:cd:28:
e7:15:3b:1a:d1:ab:86:9a:15:28:f9:ab:54:30:85:
73:2a:9f:7e:bd:a5:0d:8d:47:3d:5d:c4:73:8f:80:
70:72:96:07:df:19:d0:db:06:fa:26:dd:ee:16:be:
b0:d1:b7:ed:93:38:ee:c3:a7:da:0c:30:4b:55:8a:
79:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A4:C0:F0:4C:5F:86:4D:18:09:F4:E1:46:67:A7:63:49:EE:45:50
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/taTA8Exfhk0YCfThRmenY0nuRVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
51:3b:12:71:37:65:dc:dd:7e:e0:90:75:b9:ef:c1:fc:74:d8:
27:68:5c:a2:98:9c:03:c7:89:c0:48:62:50:f7:c4:c2:a9:ac:
af:b5:a6:4f:21:b1:17:93:23:31:47:4a:91:19:a2:88:c6:b0:
12:36:8d:94:ad:aa:26:4c:71:e0:46:be:c8:7f:eb:42:58:0d:
f8:ee:5e:a5:8c:dd:e0:72:8e:a9:55:93:95:c1:6b:ce:b8:cc:
9d:36:c0:04:86:1c:41:28:fe:54:88:2a:9b:38:ec:8b:d4:44:
1a:6d:70:66:92:5d:6f:2a:57:22:4c:37:31:78:b1:cc:39:99:
ae:3b:47:0e:7f:74:a7:9d:06:c9:05:55:b5:d5:63:59:61:85:
a9:d9:b1:82:68:f7:44:1a:12:b2:32:34:20:f0:17:5f:31:a0:
de:95:f1:97:b8:c3:5a:9a:b1:e0:ec:52:0f:bc:f9:3b:42:6e:
d5:d1:39:aa:2c:bf:5f:8f:15:1e:6a:f8:fb:21:18:52:68:81:
90:cf:25:a5:8b:5a:05:c9:e0:e3:8f:f4:01:59:e3:3c:1d:7c:
2f:07:72:23:a9:7a:b2:43:63:25:c8:67:0b:cb:ca:94:c6:3d:
3b:c0:30:64:7d:b0:27:65:36:8d:07:7a:4e:16:8a:56:47:fb:
c3:72:09:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:20:08 2025 by rpki-client