Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/v1XLxSqyL9TXdI0Q8ZaBJTeIqKw.roa
File: v1XLxSqyL9TXdI0Q8ZaBJTeIqKw.roa (raw, json)
Hash identifier: ygNrPMyyAFfrYliY4b4nCFOW04A735U6u4geM8bS88E=
Subject key identifier: BF:55:CB:C5:2A:B2:2F:D4:D7:74:8D:10:F1:96:81:25:37:88:A8:AC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185CD26651EC0A091FB8C45336B9E563916
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/v1XLxSqyL9TXdI0Q8ZaBJTeIqKw.roa
Signing time: Fri 20 Jan 2023 03:08:43 +0000
ROA not before: Fri 20 Jan 2023 03:08:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:cd:26:65:1e:c0:a0:91:fb:8c:45:33:6b:9e:56:39:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 20 03:08:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bf55cbc52ab22fd4d7748d10f19681253788a8ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:94:01:77:51:fb:dd:00:42:67:49:a2:81:6b:
a9:29:a6:f0:d1:e9:44:2d:2e:ed:51:c6:02:95:49:
34:3b:fa:33:37:e1:dd:af:57:68:2f:3f:45:3f:16:
47:04:62:12:28:9a:e1:c4:f9:f2:60:42:5c:11:83:
0e:5e:a7:22:c5:ac:b5:51:ed:57:35:92:a4:19:12:
2a:d8:9a:4a:3b:3c:1a:6f:78:e3:cc:2e:91:c0:d4:
18:56:98:9a:d8:fb:5c:a8:55:d0:1b:93:33:be:59:
32:ed:51:23:b9:44:c8:6c:81:eb:ee:c5:94:d6:01:
6c:90:4c:82:4a:63:1a:fe:9e:25:af:07:81:a1:70:
ab:eb:6c:b7:99:1f:51:c4:0f:d2:ff:c9:37:dd:c5:
5c:f7:2a:2c:76:10:65:e0:dc:25:53:71:56:33:b4:
0d:d4:18:f8:a1:34:9b:18:87:ff:8c:cd:d4:95:75:
41:2f:f3:f7:54:07:82:f6:19:7a:9c:b6:42:31:8f:
7a:8d:a5:59:2a:18:5c:1b:62:31:bb:76:4d:dc:78:
de:ce:98:2c:7b:97:86:59:e3:bd:07:d3:ad:89:ce:
f6:45:81:32:1b:bb:39:6a:84:7e:b7:13:3b:8f:0e:
1e:3e:dc:f6:40:da:c8:d8:30:0d:6c:26:1d:ed:10:
11:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:55:CB:C5:2A:B2:2F:D4:D7:74:8D:10:F1:96:81:25:37:88:A8:AC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/v1XLxSqyL9TXdI0Q8ZaBJTeIqKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
49:05:a3:4b:e0:ca:0b:00:74:46:9f:cc:da:be:07:ff:55:77:
0c:8c:cc:7a:f3:7f:86:03:3d:f0:e2:bc:b7:00:59:03:bc:55:
e5:e9:23:a8:d2:6c:f8:b3:28:86:9b:f6:63:af:c4:cb:f2:f1:
3b:c9:c7:83:3d:59:bd:ff:eb:e8:35:7c:86:58:c1:c7:80:48:
50:f8:f7:9c:d8:18:55:4a:2b:6b:54:15:ce:d1:c2:81:f3:d2:
af:98:59:06:4b:4c:a0:45:ae:47:82:6c:74:b5:8d:5c:62:86:
37:46:8c:8e:42:36:c3:df:99:6c:84:54:8c:e0:76:f6:88:2b:
86:ed:ca:1d:f5:5d:fb:68:82:f0:d3:5a:45:14:e0:18:b7:9d:
26:7c:31:1b:5f:ca:4f:17:ea:65:c6:ec:72:b5:6c:d0:50:b9:
b0:7c:7d:a0:9e:53:90:26:f6:a6:20:44:d8:00:de:8f:ac:e4:
13:98:21:2e:c4:b8:c6:16:33:d1:92:75:f5:c0:3c:47:fa:dd:
19:df:4c:b9:22:5f:d4:4b:1b:9d:bc:91:dc:9f:e5:64:53:26:
0d:93:f1:06:20:d8:e3:f8:09:e4:87:68:04:8e:f0:07:39:4c:
10:0e:48:3b:2c:e4:65:6a:04:87:12:88:af:0a:33:ef:e2:b4:
2e:3c:48:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 21:25:42 2025 by rpki-client