Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RpRpRTT5WoaQGOkNjo2lu3xRvPw.roa
File: RpRpRTT5WoaQGOkNjo2lu3xRvPw.roa (raw, json)
Hash identifier: 2b7sE+kh4zsHASDBYQciAN+wprTQRV+TnZda2c25+pY=
Subject key identifier: 46:94:69:45:34:F9:5A:86:90:18:E9:0D:8E:8D:A5:BB:7C:51:BC:FC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 790B8634
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RpRpRTT5WoaQGOkNjo2lu3xRvPw.roa
Signing time: Wed 06 Apr 2022 21:08:26 +0000
ROA not before: Wed 06 Apr 2022 21:08:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2030798388 (0x790b8634)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 6 21:08:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4694694534f95a869018e90d8e8da5bb7c51bcfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:36:b6:7a:72:a3:ce:c6:db:9b:82:8a:87:42:
13:9d:fa:db:84:14:ee:8f:78:7a:9f:b6:47:60:6d:
11:f9:39:76:4a:14:77:99:34:1a:4d:d9:16:1e:db:
90:7d:59:3e:b9:4d:bc:54:57:49:18:44:ba:c1:8b:
b4:1b:2c:ec:06:46:25:f6:c5:bd:67:52:7d:9a:15:
0b:a1:b6:f5:c4:90:64:dc:4c:e9:77:44:a2:b5:eb:
96:18:52:cd:40:0b:88:fb:73:ec:f4:8f:ab:6e:69:
c8:26:45:e8:7a:c9:0b:54:62:9b:a5:26:39:2f:43:
c6:ae:a9:b9:46:8d:10:44:4b:c6:25:2a:0e:3e:30:
69:8a:c6:30:ec:7d:da:04:49:fb:ec:6d:56:93:c7:
5d:c4:b7:08:0a:84:7c:f4:31:3e:ec:96:34:e8:fc:
0d:d1:18:5f:af:9f:43:a1:b7:07:85:1b:d7:8c:a5:
5c:b4:93:de:48:d5:f8:be:63:74:72:6d:53:6d:83:
3c:36:e3:d2:c4:bc:f6:d8:4f:9c:3a:38:08:a4:47:
12:84:cc:ac:a5:dd:b6:fd:c8:25:f9:f8:ca:f9:d0:
24:5e:9f:56:5e:e4:b7:03:de:00:43:8e:31:23:bd:
80:3b:a8:f7:f2:e8:a0:b9:96:f3:88:6d:6f:cb:ed:
6a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:94:69:45:34:F9:5A:86:90:18:E9:0D:8E:8D:A5:BB:7C:51:BC:FC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RpRpRTT5WoaQGOkNjo2lu3xRvPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
57:92:28:41:83:17:7c:ef:33:c2:20:6f:0e:4f:c0:27:b9:7c:
1b:b8:f3:79:84:a3:10:c9:ac:0e:37:b2:51:7d:c9:05:de:9a:
da:b2:70:05:69:69:2a:ea:d5:df:e7:25:d7:49:2e:24:2d:2e:
87:48:71:26:c8:37:16:d2:80:6d:0e:10:b5:88:75:f0:a8:75:
0a:a3:94:92:ec:45:79:18:6d:7a:a5:89:2c:d7:71:35:57:16:
c5:b7:f8:4c:04:c6:3e:e8:8b:b4:bd:1a:36:90:ff:e9:7e:fb:
1c:7d:b4:18:de:95:9d:26:05:70:6e:d0:67:a8:b0:13:d1:3a:
5e:f4:ff:b8:6e:73:16:33:0f:12:3f:7d:af:56:57:b7:58:93:
b8:b4:ae:6b:c7:c0:8e:7b:3b:5a:14:64:38:15:42:0d:f2:5d:
1f:a6:41:f3:9d:72:5c:1d:8a:8e:1b:71:b4:61:d5:5e:4d:9f:
71:2b:f6:f2:e0:a2:1d:89:15:10:97:09:83:4f:d5:b1:62:11:
4c:e2:fc:5c:48:fa:72:4a:f0:b7:d3:10:29:7e:97:41:7a:4f:
16:50:6d:e5:53:ca:e5:d0:c8:f1:e9:0a:7f:06:d8:37:d9:96:
12:33:72:3e:2f:4f:41:54:ea:85:21:be:f7:3f:f0:cb:54:ec:
af:55:9e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:44:50 2025 by rpki-client