Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ue4A5MZYz1T1jWyh2vv87uhd7P0.roa
File: ue4A5MZYz1T1jWyh2vv87uhd7P0.roa (raw, json)
Hash identifier: 98W4jtgA5EyJcdCXNfNJzNALnyfIQTu6B1/Yxa35Juc=
Subject key identifier: B9:EE:00:E4:C6:58:CF:54:F5:8D:6C:A1:DA:FB:FC:EE:E8:5D:EC:FD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018607BD8E04FD6CC8C2D03CA1DC79B5699B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ue4A5MZYz1T1jWyh2vv87uhd7P0.roa
Signing time: Tue 31 Jan 2023 12:11:48 +0000
ROA not before: Tue 31 Jan 2023 12:11:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:07:bd:8e:04:fd:6c:c8:c2:d0:3c:a1:dc:79:b5:69:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 31 12:11:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b9ee00e4c658cf54f58d6ca1dafbfceee85decfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e9:31:1b:60:2c:3c:b5:1c:16:bc:c0:34:f0:
4f:0d:de:1f:1d:ae:33:dd:32:21:b1:b6:28:03:a4:
dc:58:45:b3:89:26:15:7f:6f:0d:20:0f:05:b3:4e:
cc:2a:07:eb:4d:cf:9c:ff:52:f2:b4:f9:4c:96:e7:
35:07:8d:2e:34:8f:79:11:a0:a0:d3:9a:30:3e:2a:
d0:97:b1:8a:d3:49:18:f5:78:93:75:c3:7e:4d:21:
1e:06:9e:00:d1:9c:e7:96:e8:d7:f9:36:29:be:f2:
6b:96:ba:dc:5d:77:a0:26:4b:bb:b6:89:37:cf:ee:
ad:75:4e:37:cf:fa:38:30:88:de:f7:ff:46:44:11:
01:d2:62:b7:f3:5f:c0:c9:48:e1:34:67:3d:8f:34:
85:28:ab:47:24:10:6d:53:15:bb:05:94:ec:e1:67:
87:15:5f:37:d7:69:42:92:ab:55:88:88:41:f0:9f:
3f:d4:f8:55:77:78:f7:da:50:23:0d:29:bc:c8:e5:
2a:35:4d:d6:65:f6:42:df:a1:31:6f:2e:d3:b7:ab:
94:8e:c4:bc:bb:84:d3:8e:8d:ba:ad:11:bb:b4:d5:
42:98:2f:e2:95:fa:76:8f:5f:3a:8d:ad:45:f4:7b:
e7:62:1a:95:15:fd:2d:c2:55:d4:94:78:ce:62:fd:
a3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:EE:00:E4:C6:58:CF:54:F5:8D:6C:A1:DA:FB:FC:EE:E8:5D:EC:FD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ue4A5MZYz1T1jWyh2vv87uhd7P0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a1:d6:a6:9c:0e:0d:44:7e:78:f1:45:6c:36:79:af:07:73:a5:
78:38:a3:d3:7a:a4:b6:da:f2:ab:df:d1:d8:68:e6:38:7b:3e:
eb:2c:4f:7c:d4:c5:e8:4a:13:05:1f:82:63:25:90:74:d2:95:
16:cb:7c:a0:3c:ab:a6:91:85:af:84:46:22:d9:58:3e:ed:5f:
e7:87:56:cc:5a:e3:33:ce:63:e2:e7:f1:95:9f:db:a1:03:b4:
47:d3:e4:20:c0:81:9b:40:43:99:3f:17:a7:83:7c:d1:35:b6:
04:c4:37:fe:e3:5f:69:fa:da:fb:2c:b3:ee:21:ad:37:d4:72:
56:4a:4f:e7:b5:ea:31:89:c0:c5:3a:c2:b8:c3:ec:fe:1d:24:
3e:9f:3a:90:36:c4:52:76:61:ee:2e:49:29:6d:40:16:54:8b:
03:26:29:a8:13:3d:49:6d:09:c2:ca:ce:fe:2f:ca:63:dd:bf:
3f:95:57:ed:f7:bc:af:f6:58:27:5a:b5:0f:b1:a0:42:62:a1:
06:c3:f3:12:8a:13:07:12:5b:93:be:43:c1:e2:73:dd:a1:af:
95:f2:ba:54:e2:cf:8d:e8:3e:d9:ab:cd:dc:24:a7:ef:51:05:
4a:28:b9:33:1d:29:47:f4:26:6b:05:52:54:e4:e6:1a:cd:74:
3f:4c:e4:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:38:11 2025 by rpki-client