Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/p8j5ixl86KTXhDoaKQvY1nXzNCM.roa
File: p8j5ixl86KTXhDoaKQvY1nXzNCM.roa (raw, json)
Hash identifier: LLz3unkQbOHGpkEkh2P7nL15RdJnPCLG3T7pC7np3CQ=
Subject key identifier: A7:C8:F9:8B:19:7C:E8:A4:D7:84:3A:1A:29:0B:D8:D6:75:F3:34:23
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 9031107C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/p8j5ixl86KTXhDoaKQvY1nXzNCM.roa
Signing time: Mon 27 Jun 2022 06:11:40 +0000
ROA not before: Mon 27 Jun 2022 06:11:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2419134588 (0x9031107c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 27 06:11:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a7c8f98b197ce8a4d7843a1a290bd8d675f33423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:67:17:ac:fa:0d:56:db:89:97:75:7e:18:24:
1c:f4:64:a7:90:39:ef:46:b4:ee:d1:bd:1d:3c:fb:
aa:d6:fb:f7:1a:bb:98:b1:fa:aa:7a:bb:dc:ce:e1:
39:5e:94:73:4e:d9:21:bd:67:33:74:18:c4:90:88:
a1:66:63:af:d6:e0:d6:4f:c2:89:e9:64:fc:8b:b7:
da:8f:41:68:86:e2:86:5f:94:9a:86:ab:9f:e1:fe:
e8:49:1a:ca:b7:7c:5c:bc:c0:f9:f0:b1:cb:1b:5b:
f5:29:c0:28:47:6d:5b:d8:dc:28:dd:29:07:a8:ee:
f9:d0:c6:90:92:7d:26:2a:0b:f6:6b:ae:cb:62:09:
b0:66:c9:fc:11:08:d7:bc:8d:1c:e9:c7:91:3f:6b:
c7:43:f1:28:82:0c:4c:e5:91:af:1d:cb:1f:cd:94:
b3:e1:0e:a7:1d:64:96:3b:e3:0e:56:88:e2:08:7d:
af:f3:1b:e9:d1:b2:87:5e:8f:10:35:9f:94:0d:10:
0a:74:e0:89:9f:b7:5a:1b:63:7f:8c:3e:fe:a7:8a:
d6:9f:37:b0:1b:7d:e7:1a:c5:75:90:11:bc:e0:fa:
b2:d0:74:3b:df:79:d3:06:19:57:c7:9f:c5:2d:3a:
f6:08:4e:51:89:1b:08:a4:4c:6d:e4:35:bd:94:5c:
b1:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C8:F9:8B:19:7C:E8:A4:D7:84:3A:1A:29:0B:D8:D6:75:F3:34:23
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/p8j5ixl86KTXhDoaKQvY1nXzNCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5c:29:ea:02:e8:0e:f5:0f:2c:cf:bb:f9:1c:a8:4b:45:35:e0:
94:a6:4f:aa:2c:e4:42:c7:36:26:dd:89:b2:5a:c6:a5:03:e5:
be:6e:3c:17:81:1d:8b:9d:92:3a:5c:73:f9:9e:02:4b:a0:c5:
2d:d4:39:bc:49:f5:ca:f9:7d:ce:3e:f1:7f:ed:50:7e:13:ff:
c9:f0:fc:a6:95:21:fe:a9:73:65:4e:fd:94:ed:cd:b4:1d:b3:
c3:a0:00:2a:d4:65:85:01:e2:6a:6d:8b:ee:8e:6f:fa:73:27:
7b:65:e1:fe:3b:79:db:ad:c3:49:7a:d7:c3:04:f2:6c:9a:1e:
88:61:4f:ee:3c:3e:1d:ff:81:1b:46:77:95:c1:4d:88:22:b5:
00:fd:ef:35:b9:35:58:e4:e6:8f:a6:97:27:e8:ce:43:b9:6f:
7a:59:fa:ff:23:6f:f1:dd:c6:cc:18:a0:64:3c:05:f6:79:74:
7b:64:1a:70:67:de:47:f4:7f:5b:c3:42:39:10:ac:97:6b:e0:
4d:67:52:57:89:b7:da:05:83:3b:5c:fb:4b:1d:53:04:ac:f8:
b9:a7:ef:ea:e5:7e:26:d5:18:c0:aa:f4:75:ee:90:e7:bc:c5:
46:3f:6e:6a:88:59:5e:c7:8f:d3:ee:96:9f:1b:ec:5b:67:d6:
1e:60:90:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 02:45:16 2025 by rpki-client