Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/z8Y7YLZnmHKhg8nY48RImbgO24E.roa
File: z8Y7YLZnmHKhg8nY48RImbgO24E.roa (raw, json)
Hash identifier: 1MeHijkquQhdTscVvXJupRjfP3sBmpjoCQMoU7h1slM=
Subject key identifier: CF:C6:3B:60:B6:67:98:72:A1:83:C9:D8:E3:C4:48:99:B8:0E:DB:81
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018655A30813AB842624FE1593F9547EBD6B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/z8Y7YLZnmHKhg8nY48RImbgO24E.roa
Signing time: Wed 15 Feb 2023 15:13:12 +0000
ROA not before: Wed 15 Feb 2023 15:13:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:55:a3:08:13:ab:84:26:24:fe:15:93:f9:54:7e:bd:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 15 15:13:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cfc63b60b6679872a183c9d8e3c44899b80edb81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:91:05:17:52:94:87:73:01:45:ea:eb:3f:45:
b6:84:a9:21:f7:64:1c:fe:d7:61:ee:b2:9e:43:1e:
4b:f3:8c:bf:60:84:44:65:78:eb:25:e6:b1:02:5b:
bd:ed:a0:89:02:4b:7f:45:e6:d9:fd:71:07:d3:b3:
5d:19:56:f3:8a:63:ba:5b:6d:21:58:d0:a1:1e:4f:
b3:93:da:0d:24:e8:4f:16:f5:d1:6c:cf:b8:99:3b:
62:51:d8:52:3d:30:de:47:44:9e:b7:0b:49:2b:4b:
fe:8f:94:f1:a0:d1:d3:1b:c2:c8:23:0a:89:0d:be:
58:a2:90:a6:df:35:bd:06:f9:a8:f0:c3:d9:47:00:
a1:3b:21:af:09:26:eb:1c:95:6a:9e:ce:86:fc:16:
e6:5e:3c:a7:88:77:60:6e:23:db:16:cb:d9:a9:bf:
ef:f1:de:c1:88:41:e8:65:e2:d2:30:94:da:85:66:
08:2f:86:ff:9f:68:17:60:d7:e1:6c:d4:3f:9b:79:
58:5c:a9:aa:6e:14:0f:7a:3d:81:ac:44:d0:4c:ad:
bc:8d:e5:82:63:37:60:d3:db:81:ea:ac:fa:1f:88:
36:ef:ca:15:32:01:ca:9c:e0:e3:17:2b:1f:af:a4:
e1:a9:5a:d0:4e:9a:3b:f8:5c:d3:d5:26:ad:8e:f1:
4a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:C6:3B:60:B6:67:98:72:A1:83:C9:D8:E3:C4:48:99:B8:0E:DB:81
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/z8Y7YLZnmHKhg8nY48RImbgO24E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
42:17:d8:d0:80:26:d6:07:34:99:f5:00:da:b9:3e:44:61:21:
b9:3d:bc:d9:b6:35:0d:ba:5a:a6:26:6e:0d:ed:08:e5:26:bf:
ef:59:6b:f4:a4:52:ea:d4:23:17:e1:06:a0:6d:eb:de:c7:ee:
44:98:c9:8d:12:b0:49:27:28:10:64:16:3c:53:ef:64:5d:9d:
e0:4c:4b:bc:71:b9:77:73:72:f1:86:a7:1c:cf:e5:f6:c3:5e:
6f:e8:e4:b7:f6:40:f8:19:69:69:a8:2d:fc:ca:5f:6b:8f:b8:
20:15:3e:77:3a:71:3e:f1:47:b9:29:ba:d3:08:35:1f:eb:ce:
8c:74:03:62:b2:ce:68:9d:40:59:a7:58:d3:fc:b7:7b:7e:d3:
1e:48:e6:51:d9:22:53:2c:80:2b:ec:08:0a:7f:db:98:66:9f:
68:32:63:33:e9:07:07:e2:27:65:42:23:71:3c:bf:52:3c:ee:
98:c4:e8:77:cf:0e:74:df:1a:a6:94:c9:a2:1b:e4:76:58:cd:
1d:34:4b:11:1b:17:76:89:b0:1c:36:71:c5:58:0d:e7:52:0e:
d7:f8:9b:c9:1e:c1:83:e2:76:15:ac:4a:ea:7b:4f:ee:2e:47:
c6:1d:84:6a:d3:73:4b:2d:45:5c:af:a5:9c:8f:a6:89:1e:1a:
61:c2:c1:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 05:45:51 2025 by rpki-client