Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/w2jJ5dK5JPjLig1VeOuE_Ksl1aI.roa
File: w2jJ5dK5JPjLig1VeOuE_Ksl1aI.roa (raw, json)
Hash identifier: Kmlq25zAS6kZEwWvzOcsQ3jKSdC9QtgaCZt9OaGeXJ4=
Subject key identifier: C3:68:C9:E5:D2:B9:24:F8:CB:8A:0D:55:78:EB:84:FC:AB:25:D5:A2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A3D27490F3AA90D0BF7D8EF02336FF9A8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/w2jJ5dK5JPjLig1VeOuE_Ksl1aI.roa
Signing time: Mon 28 Aug 2023 17:18:19 +0000
ROA not before: Mon 28 Aug 2023 17:18:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:3d:27:49:0f:3a:a9:0d:0b:f7:d8:ef:02:33:6f:f9:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 28 17:18:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c368c9e5d2b924f8cb8a0d5578eb84fcab25d5a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:7f:71:92:75:aa:54:b5:5a:74:e8:68:d7:3b:
3a:3d:4f:71:fb:3c:d5:b8:ef:f6:19:05:98:d8:17:
68:77:f6:ed:be:e7:78:4e:30:bc:1c:45:93:b9:94:
ae:ff:65:eb:7f:fd:c3:59:cf:51:c2:a6:ef:20:11:
e3:c5:f0:83:14:3e:61:56:c3:28:a9:bb:ab:37:21:
94:54:b8:73:61:82:4e:e7:4f:30:06:20:89:c7:e6:
4e:45:53:8d:17:b3:83:04:59:75:45:d8:4c:fd:fe:
04:3a:dc:ff:e9:13:e6:61:cd:9c:1c:1a:47:2a:94:
79:89:1e:1e:e9:6f:57:0f:0d:45:bb:f4:0c:0e:4d:
17:de:be:ff:64:8a:f7:18:32:39:98:59:32:08:43:
e8:48:55:5f:6c:c0:e0:4c:29:ee:11:f4:ec:45:90:
dd:0f:2c:12:d7:82:bd:8e:db:75:df:03:f8:2f:af:
d6:77:43:cb:55:46:dc:59:f6:65:75:10:f9:fc:6f:
8d:61:4a:24:54:0f:a0:55:f0:7e:81:28:15:de:93:
bf:0e:2d:54:0b:bb:40:b8:41:b8:a2:e9:d7:0f:a6:
1a:b9:7d:f3:5b:34:e0:2a:b1:2f:cf:d3:f8:2a:62:
89:26:fb:fa:43:22:54:b5:e3:ce:f9:cf:24:68:1c:
37:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:68:C9:E5:D2:B9:24:F8:CB:8A:0D:55:78:EB:84:FC:AB:25:D5:A2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/w2jJ5dK5JPjLig1VeOuE_Ksl1aI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
54:85:2e:99:24:2e:6b:37:7e:89:dd:b7:54:af:b2:db:c4:71:
49:67:69:6e:87:ff:d2:73:ff:89:dd:1a:64:34:cb:c3:72:00:
bf:9d:0b:93:a0:63:97:65:71:4d:34:af:d9:7c:dc:76:9e:d1:
5d:51:61:d3:76:1b:9d:ec:78:13:93:12:35:d1:58:00:e8:44:
59:46:bf:79:c8:28:f3:ef:5a:12:3d:0b:f3:64:17:2f:ca:6b:
49:7b:4f:92:ce:1e:bd:12:ca:24:d4:22:70:ac:3a:2c:09:c0:
0f:a6:fa:65:32:df:9c:7a:54:7c:db:42:48:78:29:c7:7f:8f:
f4:f4:c2:9d:c0:4c:1a:2b:df:0f:69:f1:fc:49:34:ae:ce:69:
ea:da:59:1d:4a:c6:be:84:1b:a8:aa:95:4d:c6:4e:97:51:6d:
cb:48:0b:60:57:b6:ba:3d:92:db:5b:92:27:ce:7c:9a:f0:61:
f9:b5:14:e0:86:0e:a2:1e:d3:ae:9c:7c:1d:ba:a1:7a:c1:0d:
36:72:df:51:69:9f:b3:33:8f:57:e5:d6:60:a9:5d:1e:43:0a:
05:9a:e9:a0:2d:b2:ac:d5:c8:88:f8:df:ec:77:4f:fb:a6:6c:
36:e1:c5:dc:e7:94:27:40:ef:e5:46:10:67:46:b7:24:f3:2d:
23:31:aa:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:43:24 2025 by rpki-client