Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-k1lne2GZExGh_sV3GgbxoxYVnc.roa
File: 1-k1lne2GZExGh_sV3GgbxoxYVnc.roa (raw, json)
Hash identifier: +dIMbJ755n6IFczGS1NeYPzuZ6k+e9xLJ1No4mmTckc=
Subject key identifier: FA:4D:65:9D:ED:86:64:4C:46:87:FB:15:DC:68:1B:C6:8C:58:56:77
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6D988AA5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-k1lne2GZExGh_sV3GgbxoxYVnc.roa
Signing time: Fri 25 Feb 2022 12:10:45 +0000
ROA not before: Fri 25 Feb 2022 12:10:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1838713509 (0x6d988aa5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 25 12:10:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fa4d659ded86644c4687fb15dc681bc68c585677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:3a:79:9a:ab:8f:f4:a7:b0:e0:d7:55:32:9a:
ba:18:e8:31:db:81:24:13:13:02:29:53:56:92:0c:
ef:7e:3d:cf:89:48:26:bd:96:0f:4b:3e:e7:fc:46:
a7:e4:56:47:b3:0e:8c:54:db:d9:dc:22:96:27:1c:
d7:aa:a1:5f:a1:fb:eb:19:1c:a0:da:80:b8:aa:1e:
d0:64:74:2b:80:50:23:64:da:82:c9:ef:02:55:9b:
6c:13:0d:85:ae:be:13:b6:de:01:01:4b:e9:2b:b2:
7b:79:4f:c9:eb:1c:22:27:e9:8b:f1:79:a3:51:48:
d5:63:e2:29:ea:f0:aa:ad:be:ae:a3:3d:2b:08:5d:
7e:6b:d8:28:e8:db:a3:e9:a5:a6:4b:c7:87:65:47:
22:52:31:8a:2a:f6:d4:8b:04:2e:83:2c:a6:cf:e5:
1e:91:5d:4c:15:b0:be:ee:08:63:f1:19:80:19:cb:
b3:70:c4:d8:60:a2:23:38:46:96:c6:da:90:86:e2:
b0:d7:38:20:c8:a3:7c:5b:97:23:30:58:8d:ec:44:
9d:17:65:1c:4c:e6:1d:9b:7d:68:40:f8:ab:04:ab:
45:5e:9a:24:8c:1b:36:a5:fd:a4:f1:51:ea:d5:3f:
b7:18:05:8a:07:46:c9:34:6d:cb:28:9c:48:f1:42:
e8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:4D:65:9D:ED:86:64:4C:46:87:FB:15:DC:68:1B:C6:8C:58:56:77
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-k1lne2GZExGh_sV3GgbxoxYVnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3a:93:9f:93:86:87:08:04:ca:1c:76:20:df:52:e4:a8:1d:3f:
78:e3:d7:08:cd:e0:66:51:62:b7:50:64:5d:f9:4c:f6:5c:e5:
45:02:ff:52:67:01:75:35:57:b0:bf:d7:f0:48:c5:50:a4:85:
55:c9:b5:a6:76:5f:72:92:81:2a:90:9b:51:57:fa:de:ea:01:
c2:28:79:ee:ab:2c:e4:78:6a:51:e9:0d:4f:ac:cf:18:22:06:
07:64:67:58:cf:ea:e9:d7:ec:16:44:35:05:55:91:93:a2:33:
23:49:03:33:85:e0:3f:bd:1d:27:92:0d:f0:e2:be:0b:02:9d:
d7:b4:38:38:42:f0:ef:65:fb:57:c1:b9:4d:65:d3:64:b7:9c:
dc:68:93:83:3d:f7:67:1e:de:40:d8:3e:09:a7:0f:01:91:50:
9f:d2:f9:7b:1e:dd:23:b2:1d:f5:aa:3f:b3:da:1c:65:0e:cf:
e7:8d:33:32:cb:4e:ed:09:1a:6a:04:b6:4d:28:fe:fb:46:64:
a8:62:87:8c:20:90:ee:76:1e:b2:2a:41:51:e7:6d:58:a2:15:
d4:b6:0e:3a:34:d6:bd:aa:c1:49:a8:86:3f:15:7b:c6:ce:80:
df:48:bd:c2:a6:b0:63:2b:b0:3b:5c:58:08:7a:55:02:5e:ff:
91:fd:98:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 12:16:00 2025 by rpki-client