Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0KxPKkXxAzIH_--cSJ1USXMjqCU.roa
File: 0KxPKkXxAzIH_--cSJ1USXMjqCU.roa (raw, json)
Hash identifier: L7H5krj+Ic7leAZ4uMRrujhn0XNO3GQ7S4N6do9u5p0=
Subject key identifier: D0:AC:4F:2A:45:F1:03:32:07:FF:EF:9C:48:9D:54:49:73:23:A8:25
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185DF646D4DB1C7C63C441EC3C1C01FAFE9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0KxPKkXxAzIH_--cSJ1USXMjqCU.roa
Signing time: Mon 23 Jan 2023 16:09:38 +0000
ROA not before: Mon 23 Jan 2023 16:09:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:df:64:6d:4d:b1:c7:c6:3c:44:1e:c3:c1:c0:1f:af:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 23 16:09:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d0ac4f2a45f1033207ffef9c489d54497323a825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:6e:65:6d:a2:b7:6c:cd:f9:4b:10:cd:6c:03:
68:15:a3:e2:b4:dc:17:f0:ae:1e:d4:30:e4:af:82:
9a:3b:59:90:30:99:b8:ac:53:d2:15:33:08:b4:83:
e3:ba:1e:4d:ed:55:95:80:5e:3c:a9:00:85:12:91:
4c:bc:4c:12:26:f3:33:d7:f7:10:b2:d8:e2:1b:64:
d0:a8:db:c2:0a:e9:8a:af:65:84:9e:3c:d7:4a:1f:
71:bc:50:cd:19:b2:2f:11:de:91:76:69:d9:16:f9:
a7:8e:20:71:b2:1c:f7:7c:54:70:29:bd:e6:4b:e3:
5f:06:46:0f:da:d8:86:f5:1e:4e:17:eb:ee:03:cd:
27:6b:14:28:3f:d1:c6:73:0c:1b:34:e3:57:3c:b5:
c1:90:8f:b4:f5:f6:7c:b5:c2:fd:64:81:e2:e0:d1:
b0:e8:1e:1a:ee:8d:36:bf:9a:78:9a:57:a6:de:94:
39:69:28:e1:c4:2a:7e:84:fb:38:ad:87:2f:58:2c:
e6:ad:97:cc:90:dd:a4:9d:02:da:48:81:a6:21:be:
91:ed:52:10:bb:17:21:8e:ae:2b:9e:f5:75:7a:70:
02:23:40:b5:da:c5:14:97:d6:6d:9f:03:f2:80:ae:
01:8c:2a:c4:6c:e4:6c:38:88:72:25:a5:62:53:a4:
0a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:AC:4F:2A:45:F1:03:32:07:FF:EF:9C:48:9D:54:49:73:23:A8:25
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0KxPKkXxAzIH_--cSJ1USXMjqCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4c:c1:ee:de:32:e6:ae:d6:75:da:aa:bf:82:b2:12:47:bb:7a:
59:69:3d:c4:af:40:89:ac:a3:f1:67:74:dd:12:2a:3f:7a:35:
de:b7:d1:50:6b:5d:7c:6b:bb:df:e3:a5:46:f9:7a:7b:c3:1f:
3c:92:fa:66:2d:51:77:1b:ff:1b:5e:89:94:30:f0:12:12:ad:
13:7b:a0:23:34:4e:32:61:53:bc:26:c0:76:85:bf:9c:82:fa:
63:a7:25:c3:9f:7a:b3:cf:29:1b:c4:da:e9:dd:93:51:95:a5:
e0:a7:38:bd:6d:04:58:17:17:d1:c3:e9:15:bb:ec:52:0d:e0:
2f:25:47:af:6d:60:89:58:8b:af:51:2f:86:95:7f:b1:09:fc:
28:13:1f:b0:3f:65:6f:22:76:c5:a9:d3:bb:39:83:65:12:9f:
86:84:08:48:21:2b:cd:2b:24:2f:9d:ab:f3:ac:65:0c:ae:c6:
39:ca:77:d2:e0:a8:5a:f1:5a:56:5f:d5:06:dc:a8:bf:90:70:
5f:03:73:0a:d2:38:0d:b6:0f:98:3d:f4:48:12:69:e7:71:2c:
1e:44:89:25:01:6b:cf:d1:da:54:c0:cb:ff:2a:87:e2:95:d6:
f3:d1:05:94:f1:d4:d4:36:55:bb:7e:df:cb:ef:7e:f1:86:cd:
2a:e8:11:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:24:10 2025 by rpki-client