Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/I-BMsa_as8AscXgZiUh1X0NmS7g.roa
File: I-BMsa_as8AscXgZiUh1X0NmS7g.roa (raw, json)
Hash identifier: rzC0AXbyKXvO+bBCe4EcKW63yijBVg6mtEnCVOebMUQ=
Subject key identifier: 23:E0:4C:B1:AF:DA:B3:C0:2C:71:78:19:89:48:75:5F:43:66:4B:B8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01852E93F8E83E01B54EA2F7660D2097DDFE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/I-BMsa_as8AscXgZiUh1X0NmS7g.roa
Signing time: Tue 20 Dec 2022 08:08:47 +0000
ROA not before: Tue 20 Dec 2022 08:08:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2e:93:f8:e8:3e:01:b5:4e:a2:f7:66:0d:20:97:dd:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 20 08:08:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=23e04cb1afdab3c02c7178198948755f43664bb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:49:03:6c:bb:07:64:7f:1d:ae:7b:9f:de:29:
ed:09:01:e5:37:47:90:f5:a3:bc:cc:dd:c5:a8:be:
2f:1e:70:6a:c0:68:3c:9b:4b:95:23:02:f5:62:37:
c6:07:42:82:59:9e:de:28:5c:f8:d8:bc:a8:15:6a:
15:8d:8d:72:54:6c:94:89:81:dd:ec:7e:cb:7d:17:
76:51:ff:be:ea:4a:a7:f5:ca:5a:d4:cf:2c:cd:18:
8c:61:00:c6:2b:26:cb:56:d7:b7:1f:be:f9:3f:f2:
e2:e3:14:65:70:58:46:ff:7f:35:fb:72:da:93:cf:
0e:f7:97:b8:8a:c9:11:77:3a:8a:c2:f5:0d:85:59:
e8:d4:0f:4c:2e:e7:e2:2b:bd:5d:91:ec:a8:92:7e:
a2:e4:cf:aa:ef:dc:80:c0:da:66:89:01:44:ee:8d:
f6:e0:48:b2:aa:be:55:22:19:0b:b5:88:a2:31:b5:
56:d1:a8:4c:70:44:56:02:2d:75:b4:a9:45:a2:33:
3b:e8:09:83:9c:65:0c:4c:04:8d:5d:83:2e:3b:cc:
e6:44:a3:dd:59:97:1c:c9:bf:3e:e2:11:84:d2:ac:
10:40:f4:18:f9:9c:e7:c5:74:63:bc:bc:36:87:ee:
26:ab:9a:20:fc:0f:a0:85:7f:91:75:cd:dd:34:14:
c9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E0:4C:B1:AF:DA:B3:C0:2C:71:78:19:89:48:75:5F:43:66:4B:B8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/I-BMsa_as8AscXgZiUh1X0NmS7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
83:0c:ec:69:50:7f:67:05:5f:cc:4d:53:13:67:86:8a:4a:1c:
e1:f5:0b:65:ca:ca:8e:64:f2:5c:b5:d4:55:54:90:3e:db:b6:
89:21:44:76:f8:c4:e9:13:88:57:16:9d:2f:02:e4:45:cb:f1:
d3:1a:9d:98:4e:cd:01:5a:ec:3b:df:9c:fc:af:aa:97:89:22:
8e:4f:32:8d:00:a8:1b:b4:64:9b:69:a3:90:7b:98:4f:cb:84:
20:f2:07:8f:d2:77:f3:9c:49:b5:07:bc:a0:44:cc:2d:f0:3b:
c9:6f:87:dd:84:10:c2:a7:99:90:af:54:bc:e0:5f:b8:b0:b4:
ed:81:c4:c2:50:74:8a:4a:c2:42:fe:41:a0:1d:1c:e7:0e:87:
7a:0f:40:4e:55:fe:7c:5d:2c:44:e4:34:73:5a:2a:57:a5:64:
8e:b6:6a:c5:a1:34:0c:c6:e5:07:0f:3e:3c:63:0f:d9:f5:ac:
76:58:99:3d:dc:a3:78:40:e9:62:48:7b:37:d4:71:4c:17:75:
08:e7:76:c2:dd:69:70:b4:ff:08:c2:13:e4:3e:82:08:93:80:
99:3f:e4:92:80:12:95:d1:3e:e7:ff:46:93:41:67:91:f7:58:
b9:cf:1c:da:57:8b:a0:8b:7b:f2:fe:6e:38:a3:91:68:9b:0a:
16:ab:22:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 05:32:03 2025 by rpki-client