Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-Riw8wkvhFCbw05_KTXPtWikQUE.roa
File: 1-Riw8wkvhFCbw05_KTXPtWikQUE.roa (raw, json)
Hash identifier: EeqWHTujsXOhBF37EONcsCuBpVaafNIlUgykRHET6kA=
Subject key identifier: F9:18:B0:F3:09:2F:84:50:9B:C3:4E:7F:29:35:CF:B5:68:A4:41:41
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018516C43716166D8E94CCF0A15E9528D705
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-Riw8wkvhFCbw05_KTXPtWikQUE.roa
Signing time: Thu 15 Dec 2022 17:10:35 +0000
ROA not before: Thu 15 Dec 2022 17:10:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:16:c4:37:16:16:6d:8e:94:cc:f0:a1:5e:95:28:d7:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 15 17:10:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f918b0f3092f84509bc34e7f2935cfb568a44141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8e:f2:48:d9:ec:eb:fe:02:a4:c5:3e:7c:0d:
1c:fa:6f:06:cd:55:c9:9f:37:ea:99:a6:a3:0d:5e:
a0:5f:23:ca:bb:cb:0b:e3:9f:89:69:b5:fe:ac:0d:
b9:6b:b7:09:e1:97:35:8e:9e:af:90:3a:3d:ec:6e:
19:87:cf:70:c7:ec:27:8d:f1:3d:8b:42:00:d6:75:
d2:d6:6f:b9:bf:85:57:33:c5:04:d7:df:d1:82:63:
84:bf:52:d5:bd:1f:a2:e8:1f:7f:8b:5b:f8:d0:9f:
d5:43:df:7d:a5:74:9d:32:a4:25:d9:eb:11:70:0d:
dd:74:e6:0b:6e:c8:2e:5c:a6:6f:6b:97:46:dc:0e:
38:6c:27:7b:c4:01:81:c0:65:7d:14:0e:1e:d7:de:
d2:c5:62:53:00:27:b2:3c:1b:5d:ee:4e:a8:40:86:
2a:b6:f4:c9:23:26:02:05:f0:0e:2d:81:5e:04:af:
df:2b:8a:61:3c:61:3f:af:81:b0:65:5d:24:48:3a:
90:9e:73:0c:84:09:2d:7a:e4:bd:9d:0a:c9:67:b2:
e3:9c:48:40:2c:d3:75:81:f5:2b:2a:ef:82:4e:36:
eb:3e:19:be:a0:82:29:3f:e5:00:c4:25:35:14:bb:
cc:34:a5:28:4b:20:cb:2f:e7:b3:98:09:6e:2d:68:
fd:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:18:B0:F3:09:2F:84:50:9B:C3:4E:7F:29:35:CF:B5:68:A4:41:41
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-Riw8wkvhFCbw05_KTXPtWikQUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
88:f9:28:7e:c3:f6:93:b3:3d:65:18:eb:2f:5f:21:cf:12:af:
bf:00:1e:78:85:2c:78:17:8d:29:0b:70:03:0e:e2:57:1a:4a:
a2:5c:a7:35:01:52:9a:e5:96:71:69:4d:67:cf:b1:36:8b:16:
d7:bb:bf:b5:73:d4:9a:b0:a0:2a:cd:28:52:0a:a1:91:6a:3e:
5b:cf:0e:4a:a9:3c:1f:f6:80:d1:0e:bf:b7:48:9b:78:81:08:
e6:fc:69:20:63:4f:59:0a:ec:f4:8b:34:02:3f:5e:4b:8d:06:
3b:4f:6d:9b:b4:b5:37:6b:d8:76:9d:bd:36:4a:9c:20:b0:f6:
74:7c:01:16:02:a3:d9:fb:71:fe:17:4e:5f:16:a6:ce:cb:f6:
9d:6d:b3:00:a3:d8:97:24:63:64:1e:88:0a:aa:aa:a5:7c:92:
3e:1e:3f:dc:6b:41:8c:5b:ab:e5:07:4d:ea:1b:84:bd:15:cc:
92:e7:d5:69:f3:23:54:2f:2f:89:89:2a:81:50:d8:5f:34:d3:
80:7f:be:2a:db:c1:37:fb:b3:32:c8:d3:4a:50:e4:3a:94:a3:
8b:64:95:a5:3c:db:5f:4f:63:20:88:78:08:32:f8:1c:0c:05:
3a:a5:f4:c2:ed:84:41:a8:b8:88:3a:41:0d:b8:4e:15:5c:7f:
66:73:f0:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:40:06 2025 by rpki-client