Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yLTwocJtbKiPFWVp4j-V_q9MiS4.roa
File: yLTwocJtbKiPFWVp4j-V_q9MiS4.roa (raw, json)
Hash identifier: dQEFCxu33ljQ4/nh7xWcCWicADvYP0WhkHExA4xP2Ks=
Subject key identifier: C8:B4:F0:A1:C2:6D:6C:A8:8F:15:65:69:E2:3F:95:FE:AF:4C:89:2E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01850ED588B896A94AC590AB4BFEECD64342
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yLTwocJtbKiPFWVp4j-V_q9MiS4.roa
Signing time: Wed 14 Dec 2022 04:12:33 +0000
ROA not before: Wed 14 Dec 2022 04:12:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0e:d5:88:b8:96:a9:4a:c5:90:ab:4b:fe:ec:d6:43:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 14 04:12:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c8b4f0a1c26d6ca88f156569e23f95feaf4c892e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:7e:b6:5b:38:c4:fa:82:d3:04:4d:53:98:0a:
67:27:1b:9b:b1:d6:5a:3e:d2:1d:ac:34:ac:7b:a1:
2a:eb:b7:5d:dc:84:18:a4:3b:6e:8c:d6:df:77:55:
d9:6a:cd:c2:e1:55:ae:d5:2f:32:95:df:2c:82:ed:
c3:3e:a5:28:9c:25:9c:f9:0d:e3:bb:32:d3:ed:59:
7b:dc:f6:86:2f:9d:6f:17:13:c0:c2:00:1c:8d:23:
46:d9:e2:f6:a2:87:6d:be:16:5b:3b:5a:19:01:d6:
b1:cc:3a:d9:d4:a8:ed:77:47:fd:0e:97:23:df:bc:
23:65:43:95:0e:0d:04:91:2b:38:65:95:c7:10:59:
70:e5:84:89:c6:62:37:7e:09:f1:4d:dc:b0:2d:2e:
7a:dd:fb:17:53:8f:fc:81:de:36:c6:ce:e8:10:0b:
56:b9:17:38:0a:d0:12:bb:d7:e9:e8:68:7b:85:05:
4a:79:94:d0:9d:6b:ce:a1:ba:4a:93:3a:0c:90:3f:
45:4d:4e:b0:bf:4c:9a:e0:1e:b1:e5:37:4d:7c:85:
38:fa:8f:fb:56:a2:32:50:23:81:35:3d:8b:04:95:
ec:fd:9a:43:f3:4a:50:84:7b:24:a0:ac:ab:f6:3b:
78:f5:e6:b2:3b:6e:e4:a1:66:3d:ea:82:3f:1c:d0:
6d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:B4:F0:A1:C2:6D:6C:A8:8F:15:65:69:E2:3F:95:FE:AF:4C:89:2E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yLTwocJtbKiPFWVp4j-V_q9MiS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
52:ca:d3:2f:08:e3:87:b4:5b:5a:91:60:89:a3:26:9a:c9:dd:
db:98:be:3f:28:28:e3:86:e6:3d:e2:8e:bc:66:59:f0:93:45:
33:ba:87:1f:ae:4b:60:fe:42:5c:a1:fe:ee:0f:d2:5e:1c:b6:
3f:9e:51:a3:0d:ca:a7:76:96:b2:37:7d:5b:89:68:3d:95:f9:
81:45:3b:2a:cd:6d:d1:a3:ad:96:42:17:5c:0b:29:9c:a0:c3:
5b:c2:8c:cf:a2:a5:ca:97:8d:eb:71:b7:45:6a:b2:4e:fb:ae:
fb:f3:0c:14:47:61:b8:bb:b7:97:93:07:89:5c:ee:1c:86:2a:
79:47:0d:3b:4a:7a:7d:57:e9:92:2b:56:92:03:73:1c:a6:64:
05:e7:28:7a:ee:0c:0c:cb:da:21:cc:75:37:0e:b5:95:7e:f6:
9a:e1:c5:04:a6:65:d9:29:ab:85:90:b0:ad:98:ca:d4:af:7e:
9e:94:91:5e:9b:f9:fd:6a:99:26:23:aa:6d:65:66:3b:6f:f3:
98:a0:f2:0b:f1:ce:26:71:2a:0c:83:0a:45:d5:b1:4c:15:b3:
28:27:0b:65:d2:88:e6:ae:2a:9d:e3:a8:27:48:cd:0e:5a:58:
3a:ad:ac:b0:76:6e:79:68:0d:63:fd:63:9f:ff:29:59:1f:23:
be:69:9f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:40:59 2025 by rpki-client