Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-E27z3Sd90rv5bHuVvPeWp3Sv6U.roa
File: 1-E27z3Sd90rv5bHuVvPeWp3Sv6U.roa (raw, json)
Hash identifier: WgVIX4LVBl1aUoCjXvznife+Giqb6aa9QNjly7Nf9vc=
Subject key identifier: F8:4D:BB:CF:74:9D:F7:4A:EF:E5:B1:EE:56:F3:DE:5A:9D:D2:BF:A5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A2F34BB3FC83D65E3B59C3BEA0AEB54F1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-E27z3Sd90rv5bHuVvPeWp3Sv6U.roa
Signing time: Sat 26 Aug 2023 00:18:19 +0000
ROA not before: Sat 26 Aug 2023 00:18:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:2f:34:bb:3f:c8:3d:65:e3:b5:9c:3b:ea:0a:eb:54:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 26 00:18:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f84dbbcf749df74aefe5b1ee56f3de5a9dd2bfa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:75:96:42:95:fc:6f:8f:87:07:30:3b:12:11:
51:64:4e:e9:61:87:50:4f:5c:61:1e:d5:6b:c7:b4:
1e:b8:6e:bd:bb:da:18:d5:fa:17:d9:49:af:c4:8d:
9e:40:9f:cc:85:4c:26:16:42:ac:96:0f:36:4f:06:
d3:69:6a:f5:76:10:4e:e3:aa:9b:43:d3:27:b9:48:
c2:c2:18:c7:f4:22:30:72:ae:fd:f2:5e:4c:67:cd:
a8:07:20:26:8d:45:f2:e6:28:28:71:70:c7:ef:64:
e2:f6:cc:0d:17:fe:c0:6d:a5:49:95:3d:e1:9f:4c:
96:4e:62:7d:f7:d7:3c:e7:3c:a9:77:82:34:ee:b8:
82:27:a7:9b:af:05:ca:ee:7a:65:ec:5c:c1:26:94:
82:72:87:e6:be:28:75:06:2b:9a:16:83:4b:2a:b8:
4c:68:64:98:df:a7:8c:04:05:ff:30:d4:e1:60:8e:
a9:04:62:3d:5d:40:04:36:80:1e:64:a6:83:3a:84:
4b:dc:b1:b0:f0:ea:02:bc:30:fd:9f:47:6b:1c:e9:
94:d7:cd:aa:d7:0a:7c:5f:69:c6:a6:e6:81:5a:f3:
ba:c5:31:07:14:1f:72:5a:2c:6e:f8:8d:48:96:26:
f3:57:e0:65:e8:ae:44:b6:cf:e2:14:6f:82:9a:3f:
71:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:4D:BB:CF:74:9D:F7:4A:EF:E5:B1:EE:56:F3:DE:5A:9D:D2:BF:A5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-E27z3Sd90rv5bHuVvPeWp3Sv6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2e:bc:29:a2:76:55:99:54:8d:c6:df:06:f9:13:e4:c7:b3:00:
0d:22:b2:3a:df:7b:6c:e8:47:ac:e1:0c:7d:d4:45:90:d7:ab:
07:48:28:fb:55:e8:06:0b:95:70:c8:e6:a6:3b:99:3e:e0:89:
0f:4a:84:19:a3:55:06:d6:61:13:63:76:38:64:c7:e2:0e:dd:
64:d1:d6:9b:fe:ff:fd:b3:48:f7:52:7d:76:08:1c:1d:6d:fa:
ec:89:c9:d1:f9:f8:dd:d4:86:86:29:4f:aa:1f:1a:97:47:7b:
86:f3:6f:e6:37:eb:76:da:3e:25:b6:f9:ab:b3:2e:e2:e9:23:
05:67:7d:ae:ff:41:42:6c:89:39:ea:eb:e3:51:fd:e1:43:fa:
93:82:95:9e:62:53:ed:a4:e8:8d:5e:e1:0b:b6:26:63:e4:0e:
fc:a6:ac:4f:7b:9b:3a:95:6a:0c:28:4d:77:5e:af:ed:e6:39:
e0:70:82:be:af:11:ec:2f:23:54:0f:25:e5:05:94:d0:85:56:
66:ab:58:b9:9d:b8:18:af:5e:30:02:9f:f4:f3:ec:5b:be:97:
fc:69:24:86:19:12:9d:c4:36:26:16:18:28:a7:3e:48:d2:a2:
82:c1:9a:43:c6:49:02:a4:ae:11:78:d5:9e:28:21:dc:bf:a9:
6d:e6:50:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:16:19 2025 by rpki-client