Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wz48nLipKsXCUfkAjdqEJjC36oQ.roa
File: wz48nLipKsXCUfkAjdqEJjC36oQ.roa (raw, json)
Hash identifier: PDTF4xpNVhIUh4lo2mQIvOEE6ShDW41lTEHz0HbaLNE=
Subject key identifier: C3:3E:3C:9C:B8:A9:2A:C5:C2:51:F9:00:8D:DA:84:26:30:B7:EA:84
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185DE1CA518A43F745450AA84A88BD9C28E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wz48nLipKsXCUfkAjdqEJjC36oQ.roa
Signing time: Mon 23 Jan 2023 10:11:37 +0000
ROA not before: Mon 23 Jan 2023 10:11:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:de:1c:a5:18:a4:3f:74:54:50:aa:84:a8:8b:d9:c2:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 23 10:11:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c33e3c9cb8a92ac5c251f9008dda842630b7ea84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f4:94:8e:2b:3d:b1:84:7b:27:2e:a3:94:be:
ba:10:77:d0:82:70:0a:47:cc:35:71:e7:1e:07:1f:
6f:fa:64:30:83:e0:eb:cb:3b:dc:6b:45:6c:de:f1:
f7:11:45:69:f6:77:6a:ef:b5:4b:67:1b:7d:e3:50:
17:b1:74:f0:c9:74:aa:94:4f:e5:46:f2:ca:51:bc:
5e:76:40:74:97:88:7f:fc:19:6f:a0:88:c1:29:3c:
b8:c8:20:67:03:64:04:36:7e:e3:d0:d6:67:24:ea:
d2:3a:1a:63:f9:28:5a:f8:00:18:e1:91:84:47:6d:
b9:8f:65:bd:f0:d4:e5:de:d6:7b:b2:46:d2:f9:76:
20:ff:4a:b5:58:60:9f:fb:b1:83:99:45:03:c3:b4:
12:3e:59:2f:94:97:36:d9:99:0d:f7:3f:6c:0b:63:
5e:68:5d:33:95:40:57:84:c6:f2:62:d9:f1:b0:9d:
4f:91:64:16:03:3f:b6:e3:25:15:47:64:a8:ba:05:
31:aa:9d:ff:dd:13:03:4b:06:6c:58:10:1b:09:d2:
23:cc:90:ca:5c:49:56:98:3f:91:d5:4b:71:11:e9:
93:2a:11:27:dc:8d:16:83:c8:37:44:f1:66:90:6a:
f4:de:a3:2c:cc:6e:49:69:4b:eb:f5:50:cd:28:59:
47:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:3E:3C:9C:B8:A9:2A:C5:C2:51:F9:00:8D:DA:84:26:30:B7:EA:84
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wz48nLipKsXCUfkAjdqEJjC36oQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6b:d8:c0:f7:f9:8c:1c:21:1e:39:5a:93:5c:e0:94:44:ed:1c:
b4:13:ee:20:05:70:51:41:4e:3d:58:59:62:0b:f0:c3:82:81:
23:60:21:a0:e7:0a:ca:0f:77:bc:f7:d3:11:c9:0b:a3:e1:97:
88:7a:a7:9a:e6:e6:96:49:86:8b:7f:59:f7:7c:72:2a:e7:6b:
b5:82:8e:39:05:80:49:1c:57:57:27:4e:88:7b:e7:09:f9:f6:
a4:1c:59:dc:b8:79:d1:20:c9:86:2a:9a:4b:2c:a9:74:65:d9:
2e:4c:ba:fe:e1:8e:fd:09:39:56:2b:45:90:05:1a:16:05:45:
25:9f:e0:92:ec:c1:29:34:51:17:42:99:6c:e0:77:82:ca:13:
62:e9:0d:7b:1b:ab:b9:4b:41:7e:97:eb:f1:ca:c9:25:e0:6d:
88:ed:d2:63:39:ac:49:2c:e1:71:eb:ec:1f:1e:42:0c:90:ec:
5f:99:74:ed:77:a0:73:6d:05:17:4e:8d:d9:1f:b2:96:8b:6c:
03:6f:0e:83:80:84:98:c3:fc:7f:59:a1:a1:5d:7b:06:df:c1:
db:1c:12:02:ba:7a:28:d6:4a:cc:15:ca:cc:f7:82:2e:b0:cf:
64:5c:70:51:9a:94:04:94:0f:03:57:a7:8e:56:0d:63:1c:96:
22:e2:b8:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:37:02 2025 by rpki-client