Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-urqoOQyrrPXxhj31SQi4bObJOE.roa
File: 1-urqoOQyrrPXxhj31SQi4bObJOE.roa (raw, json)
Hash identifier: gNmq9sqEc+Q5wwPIAmwrG8jqgvBjOD48j2ZS69uLHDQ=
Subject key identifier: FA:EA:EA:A0:E4:32:AE:B3:D7:C6:18:F7:D5:24:22:E1:B3:9B:24:E1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6636828C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-urqoOQyrrPXxhj31SQi4bObJOE.roa
Signing time: Sun 30 Jan 2022 00:11:16 +0000
ROA not before: Sun 30 Jan 2022 00:11:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1714848396 (0x6636828c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 30 00:11:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=faeaeaa0e432aeb3d7c618f7d52422e1b39b24e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c7:4b:7b:83:eb:51:09:64:84:bc:e7:57:d7:
b6:24:cf:d5:1c:ed:0c:a5:22:da:16:ee:f5:9b:53:
00:b7:6d:c8:53:96:fe:e0:4c:74:ad:42:61:60:cd:
5a:55:de:d8:5d:e8:da:f5:75:c8:c6:72:b1:a6:f4:
7b:1d:7f:25:8c:c5:70:c6:c5:83:79:6a:d4:b8:24:
4f:16:30:f8:c9:0e:e8:de:c0:44:bb:24:fe:d7:b6:
40:76:b1:89:e5:02:be:b3:56:cf:54:b7:41:42:de:
3e:11:5c:f7:04:16:c6:b3:e0:33:8c:53:02:6f:f6:
4d:d7:d3:e3:46:86:c3:96:6b:dc:eb:68:d3:62:fe:
34:b1:72:49:c3:96:8f:6f:05:f5:7a:ae:01:2a:dc:
20:b3:be:f0:ba:31:04:00:84:ad:a5:9e:fb:ee:18:
ee:8b:75:07:8c:4e:ed:0a:33:04:a7:71:46:28:6d:
3e:04:20:98:44:f8:a2:f6:32:aa:70:95:06:39:8b:
b3:36:18:cd:ef:04:31:02:07:80:20:50:99:8e:cc:
f7:37:49:e1:8d:c3:f5:be:c2:94:29:8b:13:b0:45:
bf:6f:a6:47:96:0c:61:51:e6:71:2c:d7:1e:33:9f:
ca:64:c3:5d:20:d9:3c:b1:17:e1:75:34:b0:29:b1:
38:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:EA:EA:A0:E4:32:AE:B3:D7:C6:18:F7:D5:24:22:E1:B3:9B:24:E1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-urqoOQyrrPXxhj31SQi4bObJOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
82:f8:db:92:e6:53:5a:44:79:ce:ec:af:c7:54:10:13:e4:d9:
35:9f:a9:b5:0a:37:44:2b:b4:f8:f8:7a:fe:10:f6:8b:f6:44:
c9:4b:72:6e:f8:52:e5:8a:a3:e0:bf:dc:9a:78:df:47:5c:05:
90:3f:87:c5:b6:95:9f:68:07:29:4f:f5:d1:76:bd:69:1e:76:
04:0a:bf:90:d4:5e:87:29:1f:c0:c2:d2:1e:01:73:95:c6:8d:
28:e1:39:47:d7:37:2c:0c:40:80:50:07:26:19:96:ae:3f:9f:
23:bd:6b:1d:bd:79:22:4a:4f:f2:46:90:d7:2c:66:66:f6:f3:
f1:3d:a3:b4:dc:33:49:b0:36:a2:21:d3:12:f4:a6:11:d6:31:
ac:f3:f7:53:92:5f:d5:c3:32:55:21:6f:6e:3b:df:9d:7a:e0:
7b:77:a3:dc:56:8a:09:3b:c2:d4:47:e3:5e:80:22:86:9c:b0:
53:2f:cb:c4:a2:8e:29:8d:c3:52:14:c1:65:6b:7c:6f:dc:ac:
9a:72:a3:6a:96:e2:cf:81:6c:5d:bc:21:f7:6e:da:18:dd:0f:
0b:59:d0:ab:74:0b:e2:b0:ed:a6:36:b6:9f:89:4c:65:c2:a5:
b3:81:6c:3f:33:78:9a:ef:e2:82:30:e0:9f:26:d4:3d:0c:87:
35:c6:1d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 19:59:53 2025 by rpki-client