Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pB6DqKY_9CCjmgKBpSo4TXg8rFs.roa
File: pB6DqKY_9CCjmgKBpSo4TXg8rFs.roa (raw, json)
Hash identifier: eOp/QE1VPfF33nc49Ac8TOAsDj4fWIs87tzvMzzOd/8=
Subject key identifier: A4:1E:83:A8:A6:3F:F4:20:A3:9A:02:81:A5:2A:38:4D:78:3C:AC:5B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01823ADDAFC43D68BED9EC359D3F4F3BCB5C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pB6DqKY_9CCjmgKBpSo4TXg8rFs.roa
Signing time: Tue 26 Jul 2022 14:16:23 +0000
ROA not before: Tue 26 Jul 2022 14:16:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:3a:dd:af:c4:3d:68:be:d9:ec:35:9d:3f:4f:3b:cb:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 26 14:16:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a41e83a8a63ff420a39a0281a52a384d783cac5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:84:64:1f:ea:62:b1:85:48:e7:09:82:09:d1:
f6:d5:1f:87:8e:df:bf:d5:25:d6:ae:56:5e:a3:f1:
44:e1:8a:ca:98:a6:6c:03:62:a5:52:ce:d7:4b:00:
90:b7:7a:a4:60:06:f4:a3:c4:d8:ef:71:9f:ab:03:
eb:64:76:95:00:91:89:50:f4:7b:1b:56:e3:39:b2:
5b:34:98:4e:49:8f:53:ab:71:1c:75:cf:68:a6:4f:
52:86:84:1e:1b:45:bc:22:dd:b2:a9:b6:98:c4:89:
cd:06:04:fd:a7:38:e1:e3:e8:76:7d:bf:55:bf:ed:
31:8c:d2:ab:1c:78:a9:b2:55:c9:71:e7:e7:e0:1e:
e4:a9:c7:af:da:21:40:a5:55:a6:30:dd:e0:b9:66:
e0:23:b3:49:a4:e7:76:67:8b:88:37:20:96:4a:a9:
dc:6c:57:7c:23:47:36:e7:31:73:47:22:ae:f9:82:
13:cf:fc:f1:57:bb:9d:0e:34:43:40:72:cd:b0:a8:
7c:47:f5:a6:09:77:de:01:1f:67:aa:ac:c0:2d:14:
b8:c3:de:bc:7d:36:be:b2:f5:23:5e:e9:06:6c:69:
9b:7a:77:27:56:6f:60:f2:30:8b:05:4a:57:1e:76:
4f:e7:53:12:22:41:41:3f:08:92:dc:71:a4:c2:d1:
2d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:1E:83:A8:A6:3F:F4:20:A3:9A:02:81:A5:2A:38:4D:78:3C:AC:5B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pB6DqKY_9CCjmgKBpSo4TXg8rFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a4:64:32:90:38:db:1e:66:91:76:a0:8a:fd:67:83:17:dc:e7:
56:fa:60:b6:e2:6f:9e:ae:9e:71:39:3d:77:9e:ee:02:f3:62:
61:ef:a4:c3:70:8e:04:39:6d:87:b4:47:bb:13:7e:4b:c1:9f:
80:ce:56:cd:d5:51:52:87:ff:f8:02:7a:2e:99:39:0f:ad:01:
44:c2:26:56:56:8b:84:85:dc:30:10:cb:ee:a3:a8:81:b5:a9:
a7:06:3a:29:70:33:45:5f:eb:70:9f:47:6b:4c:75:3d:c3:30:
c8:ef:ea:59:6d:02:84:ec:68:aa:aa:98:2c:d5:99:d3:e1:a0:
f0:f2:17:ad:31:38:c0:53:85:b3:32:65:65:ad:f4:d9:87:bd:
6f:0e:f5:f2:64:2a:42:8a:2b:96:a4:2c:aa:2a:5f:2b:e2:44:
a7:09:78:72:b2:57:4d:26:8a:68:14:ce:f0:eb:dd:ce:6d:46:
a9:bb:9b:49:b2:26:66:d3:2d:49:20:38:ba:68:9c:18:b6:85:
03:95:31:6c:00:d5:ca:8c:f0:e6:77:ad:9c:47:f3:aa:c0:d4:
f6:90:51:a9:d5:95:d6:10:93:4d:8a:68:29:b8:14:4e:73:a5:
0a:6e:e9:54:76:e1:2d:8e:60:35:2b:2f:ff:a0:1a:27:21:0d:
fc:22:83:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 15:43:14 2025 by rpki-client