Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vNNP8EcHYeFHvFiZaHk9eDpti_4.roa
File: vNNP8EcHYeFHvFiZaHk9eDpti_4.roa (raw, json)
Hash identifier: HaV3mFfWpWByfS5rz32KPlF+QYTwl/N5bolGpXE7bmk=
Subject key identifier: BC:D3:4F:F0:47:07:61:E1:47:BC:58:99:68:79:3D:78:3A:6D:8B:FE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186537CCBEAD6957707B286FA8BC6029E63
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vNNP8EcHYeFHvFiZaHk9eDpti_4.roa
Signing time: Wed 15 Feb 2023 05:12:12 +0000
ROA not before: Wed 15 Feb 2023 05:12:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:53:7c:cb:ea:d6:95:77:07:b2:86:fa:8b:c6:02:9e:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 15 05:12:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bcd34ff0470761e147bc589968793d783a6d8bfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ac:67:a5:31:6d:25:95:1f:dd:61:2e:4f:e4:
61:fd:72:fa:42:16:f9:06:05:86:e3:5b:5b:7e:ef:
c8:f2:88:22:30:5c:77:6f:da:3e:74:3c:43:3b:d2:
3a:c2:13:a4:2e:bd:05:24:64:b7:4a:82:74:76:d0:
12:56:20:d9:69:dc:37:e8:a8:fb:a5:fd:fe:92:34:
d8:66:d3:2b:ff:75:ed:61:cd:7a:54:a5:b4:a7:22:
b4:6c:ad:ea:22:d9:9f:b4:a0:97:6e:62:30:a7:6b:
ae:d8:ee:e2:fa:91:3a:dd:5c:19:b1:ef:7f:80:7d:
23:48:81:13:0c:eb:8c:85:68:22:aa:ee:f3:c7:bb:
e9:96:bb:0a:f5:a1:37:ab:0e:23:e1:46:e1:54:95:
df:eb:81:f3:70:9c:b1:69:f9:ae:68:8b:fb:3f:37:
05:6a:39:3a:59:1b:3f:fa:6d:79:05:a6:dc:5d:8c:
2a:0d:77:42:00:a6:19:aa:69:b6:25:f6:a7:9f:38:
ea:d3:d9:3c:18:4d:10:ab:6b:97:90:47:9a:33:e6:
56:1c:0a:7f:5a:69:ee:57:05:d1:e4:35:8f:06:0c:
c2:5c:90:28:1d:d0:29:1a:48:53:a6:ea:29:08:d7:
a1:02:00:90:ca:25:09:90:27:d3:20:fa:5b:84:af:
28:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D3:4F:F0:47:07:61:E1:47:BC:58:99:68:79:3D:78:3A:6D:8B:FE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vNNP8EcHYeFHvFiZaHk9eDpti_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
22:0c:80:c1:41:cf:cb:ec:14:05:4d:35:b2:7b:1b:a0:e2:73:
e4:83:8b:29:e8:01:56:4d:66:68:09:08:a7:bb:c5:d1:cb:01:
35:f6:d4:0a:8f:6d:55:87:41:c9:b5:32:26:8a:88:a3:b8:3b:
d4:5a:a7:f6:58:2a:da:c7:d5:47:83:5b:02:87:e6:80:12:7c:
86:3f:b7:a4:00:41:fb:b5:0e:ec:37:28:13:c0:c4:03:68:5a:
ef:aa:cb:50:bc:b7:d3:3d:0a:f5:b6:09:8f:66:c9:72:e7:73:
45:ec:f5:61:4b:34:ee:10:e2:a3:46:c6:83:3f:56:33:45:e7:
14:a7:d7:61:24:35:ca:4a:64:75:99:e8:75:24:ef:ae:db:34:
76:26:c1:25:95:a6:e6:b6:fb:07:32:a8:93:2e:d8:47:2b:ab:
67:55:dd:57:c8:00:1a:20:b1:93:d3:e1:98:a7:54:35:25:43:
21:9c:52:17:d3:64:2c:6a:96:55:b2:70:01:fe:d3:45:34:0e:
ec:f1:1e:33:34:fc:58:45:d6:22:fb:91:d9:a8:81:9c:4a:8d:
5c:e2:95:97:e0:27:12:8d:e6:2d:38:fc:f3:84:ec:6b:3d:67:
88:49:b3:4a:2a:59:72:dd:b0:fa:a4:fe:56:e8:4d:40:93:96:
1d:9c:46:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 03:20:09 2025 by rpki-client