Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/p2q90S6JEKuBQLyFtLjjr3OhzS8.roa
File: p2q90S6JEKuBQLyFtLjjr3OhzS8.roa (raw, json)
Hash identifier: hxUT/eBdLlfMjhhXVvp4bsrH9HD98WpdTcexkbHgZpM=
Subject key identifier: A7:6A:BD:D1:2E:89:10:AB:81:40:BC:85:B4:B8:E3:AF:73:A1:CD:2F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6C9EDC75
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/p2q90S6JEKuBQLyFtLjjr3OhzS8.roa
Signing time: Mon 21 Feb 2022 22:10:39 +0000
ROA not before: Mon 21 Feb 2022 22:10:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1822350453 (0x6c9edc75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 21 22:10:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a76abdd12e8910ab8140bc85b4b8e3af73a1cd2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:69:47:c7:86:5f:70:b5:8b:7c:ac:19:53:1a:
d4:0f:56:b7:8d:6c:8f:f3:62:a3:18:32:a7:b6:13:
9e:d6:1e:5d:f8:a1:be:62:6b:52:68:ba:17:e8:91:
75:f9:64:1c:0e:5b:fe:87:22:8f:e2:dc:8a:52:90:
09:1b:15:64:4f:9c:ea:a6:d5:df:58:f1:0f:32:58:
05:ab:03:65:0d:6a:76:e1:55:2e:7a:2c:1d:fb:1f:
e1:95:a2:19:ff:3f:46:67:b4:7c:2f:9a:77:ce:4f:
71:15:be:e5:85:73:1d:1f:91:a8:08:62:06:3c:a1:
58:17:a2:a6:a0:79:05:ee:c6:ce:ec:6c:8b:ac:9c:
72:ca:47:56:93:16:e6:7d:8c:4b:9e:93:1b:1c:5b:
a8:50:92:7b:83:75:be:d9:7c:d7:d3:b0:21:63:24:
0d:34:0d:84:bb:6d:44:bc:d8:df:02:cf:41:8b:75:
91:1a:31:10:d8:35:1b:c1:60:9a:1d:d6:bf:09:df:
ed:45:33:40:df:de:49:09:d1:44:60:62:d9:a4:0f:
4b:61:b7:ae:29:10:c8:47:38:f3:b0:4c:30:68:79:
9b:c0:0c:8b:13:43:86:b0:f3:15:45:78:e0:4b:bb:
06:76:d7:d7:fa:9e:1c:d8:e3:a4:ef:c8:69:df:4a:
ba:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:6A:BD:D1:2E:89:10:AB:81:40:BC:85:B4:B8:E3:AF:73:A1:CD:2F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/p2q90S6JEKuBQLyFtLjjr3OhzS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8d:6d:80:52:11:d2:e3:f6:51:b9:2f:3e:51:d6:f1:0b:98:fa:
1f:2e:5c:c5:f4:68:0e:1a:54:f2:d7:a7:1e:43:4b:80:87:c2:
f9:75:5a:4e:d0:a8:5b:7a:74:d9:6b:b3:19:1c:44:b1:c3:78:
f7:24:f7:6f:62:5a:ec:0a:56:ca:b8:74:08:9b:b7:09:95:f2:
a3:2f:81:ec:a7:38:b4:be:85:c7:85:f2:ac:78:c3:6a:de:cd:
c5:85:34:77:8b:c9:5e:1c:7b:f5:15:a7:ca:58:3c:76:f2:d9:
90:b1:53:b6:0b:12:1b:37:8e:64:3e:87:3b:4c:a5:c9:ef:ff:
bb:0e:31:e9:df:8f:1c:32:54:31:e8:fb:a1:c7:4a:43:04:5a:
42:b6:c0:23:5f:a2:24:0f:1f:f5:95:59:91:50:9d:8a:0a:a2:
1b:86:a4:8c:de:28:97:bd:8f:5b:2e:56:21:9a:d3:e1:47:49:
8c:a8:e9:6d:91:11:e5:73:97:dc:e1:b9:80:f1:72:f9:4f:ed:
32:6d:2b:73:b3:22:37:7a:fe:b0:5e:7f:06:ed:0e:88:fd:49:
71:f3:f2:49:45:95:a7:df:2d:f5:54:5a:ff:7a:43:87:a2:80:
da:4a:e6:79:e7:dc:c2:b8:91:b0:b7:fd:ad:d9:f2:e5:cd:95:
ab:8f:15:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:06:12 2025 by rpki-client