Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uAh4LT6ltk5DCrSFZVYjQaCuPJM.roa
File: uAh4LT6ltk5DCrSFZVYjQaCuPJM.roa (raw, json)
Hash identifier: YQG9Tav5t5nM5TQUcClVDkNMK3KfpeFeEXY+Q858O2o=
Subject key identifier: B8:08:78:2D:3E:A5:B6:4E:43:0A:B4:85:65:56:23:41:A0:AE:3C:93
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A3A2729CC752F8E7C1FD63C829447B987
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uAh4LT6ltk5DCrSFZVYjQaCuPJM.roa
Signing time: Mon 28 Aug 2023 03:19:19 +0000
ROA not before: Mon 28 Aug 2023 03:19:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:3a:27:29:cc:75:2f:8e:7c:1f:d6:3c:82:94:47:b9:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 28 03:19:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b808782d3ea5b64e430ab48565562341a0ae3c93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e1:42:69:3c:ff:0f:19:cf:d5:e4:6c:f1:44:
7c:66:89:08:ee:47:d1:ea:47:2e:79:67:96:8b:36:
36:60:fd:c8:5b:36:af:e1:66:c7:a1:28:5d:d5:77:
31:ba:5d:d5:c9:a5:09:08:cc:9e:61:02:57:0b:c8:
c4:f0:3a:23:2c:94:4e:e4:18:28:54:2e:52:81:9d:
82:ae:f2:23:f8:91:97:5e:c0:ba:24:fb:71:a6:56:
ea:45:b4:68:ca:e8:f1:95:52:c2:80:96:03:f3:95:
e1:4c:c2:2e:f5:53:58:cd:d9:ef:e2:14:ee:39:30:
79:e5:ae:7d:ae:f6:2b:15:bd:c1:c1:c2:5f:3d:87:
f0:da:4f:dd:46:1b:8f:b6:ed:f6:46:2b:3e:5b:43:
a2:77:00:93:17:93:03:bc:8b:25:aa:ce:f9:a0:ee:
db:b0:85:0b:b8:8b:29:32:f9:cf:a7:ee:f1:87:cf:
f1:8b:33:59:20:cb:60:8b:8d:03:50:a3:90:ef:9b:
a5:d7:c2:11:e4:47:00:04:85:72:91:a5:d0:b0:4d:
d3:a4:0c:be:c3:93:5f:15:f5:39:8b:91:d2:4a:06:
5f:93:8f:4a:c9:e3:45:89:df:12:79:33:83:20:95:
90:f7:74:d1:68:fd:5c:8f:58:a7:78:2d:1e:56:79:
aa:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:08:78:2D:3E:A5:B6:4E:43:0A:B4:85:65:56:23:41:A0:AE:3C:93
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uAh4LT6ltk5DCrSFZVYjQaCuPJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a5:72:13:77:a1:c4:36:d5:d2:15:f3:99:a2:df:e6:17:fe:55:
93:78:59:2b:4b:f3:59:6b:e2:e6:49:da:d9:9e:85:f9:05:5d:
4c:5f:d8:17:5c:b4:6d:5f:26:57:31:98:ea:b7:45:3d:f1:62:
ad:16:2f:54:26:26:d9:e3:74:b6:95:91:3c:df:2f:cf:9a:91:
e5:37:ca:aa:b1:63:92:bc:af:c6:f3:3a:b8:0f:d6:0d:c9:7b:
62:fd:11:ab:5a:78:62:4e:54:0e:d5:ed:a2:3b:ac:3c:24:bb:
4f:7e:03:7a:5b:e1:77:61:57:13:e4:9a:1f:bd:67:7f:c3:ca:
5e:60:fc:58:3b:76:71:e8:8f:cf:3a:e6:60:a1:43:9f:06:8a:
43:db:90:7d:8b:39:76:6d:4e:88:24:7f:2b:a7:c2:53:8f:8c:
db:be:4c:b4:30:3b:6f:57:32:43:f4:19:f5:7b:1b:6b:50:a3:
28:8d:7a:a2:b6:72:df:59:47:b3:c6:a6:91:5d:9d:38:b5:8e:
f9:47:17:f1:be:28:d6:d6:09:69:be:af:f8:b2:d0:40:dc:5f:
75:89:d1:3e:57:08:a7:a8:6e:32:64:f3:a1:3b:cf:11:9d:62:
85:d6:fd:b1:56:93:65:34:85:72:15:99:7a:58:c3:68:ce:5b:
18:09:5a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:08:09 2025 by rpki-client