Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1AJR81JIAEQpTnVZuHLpIn2kOPk.roa
File: 1AJR81JIAEQpTnVZuHLpIn2kOPk.roa (raw, json)
Hash identifier: i6AAhDcAuyn/5D9h1RL6RUBoXu6CAzR2qctwCUiRi48=
Subject key identifier: D4:02:51:F3:52:48:00:44:29:4E:75:59:B8:72:E9:22:7D:A4:38:F9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183F060FF2E00807BE0FEDBB21F9FDCC93B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1AJR81JIAEQpTnVZuHLpIn2kOPk.roa
Signing time: Wed 19 Oct 2022 13:13:52 +0000
ROA not before: Wed 19 Oct 2022 13:13:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f0:60:ff:2e:00:80:7b:e0:fe:db:b2:1f:9f:dc:c9:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 19 13:13:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d40251f352480044294e7559b872e9227da438f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:19:64:9f:6e:a3:59:0a:eb:70:e2:6f:3b:41:
32:55:3f:ed:e3:0c:76:65:51:31:b2:75:c7:60:c9:
09:c6:09:da:38:31:53:f2:c2:bc:16:8b:9f:57:76:
6e:bf:eb:09:bc:6c:93:ce:2f:12:47:08:59:a1:49:
75:55:07:ae:07:14:a6:6a:bc:e0:fd:30:a1:e9:73:
58:1a:53:d4:28:1f:35:09:ef:5c:2f:62:ae:ca:5c:
7b:28:f1:54:f3:7b:78:24:a8:d3:f9:78:65:0f:ac:
12:b4:25:a9:88:9d:fa:16:fc:c0:82:62:68:8f:dc:
42:b6:74:77:79:09:f8:72:6f:ac:aa:72:ff:52:22:
13:6d:c9:61:f6:56:f2:aa:ee:6a:0a:3c:71:2f:71:
d0:a7:2d:a2:02:45:09:16:29:c9:d7:e5:0e:59:ac:
e4:fb:09:77:15:04:99:85:fd:3c:bb:31:26:77:11:
68:d6:62:82:41:bc:44:de:30:49:97:e3:8a:8c:d6:
4c:89:f4:9b:7c:bb:de:36:58:7a:38:6e:59:7d:71:
24:d4:f8:89:02:e6:13:5c:58:c9:7c:1b:57:03:b0:
8e:f9:ac:2f:a3:a4:7b:f1:35:e5:09:95:66:eb:5a:
35:2f:a7:f4:2f:38:46:75:34:49:48:84:f5:66:6f:
1c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:02:51:F3:52:48:00:44:29:4E:75:59:B8:72:E9:22:7D:A4:38:F9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1AJR81JIAEQpTnVZuHLpIn2kOPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a7:85:88:b6:9e:ca:0b:0d:eb:17:5f:8a:31:3d:bc:60:9f:29:
2e:c7:8e:a2:0f:76:a6:c4:08:f1:84:c1:0e:9d:30:e1:29:90:
ae:c2:ca:28:49:73:28:20:ab:a4:80:93:f6:de:3b:52:85:45:
b6:b9:b2:70:2e:13:54:0d:51:95:b2:8a:cc:0b:d4:ba:ae:6b:
94:b4:5f:3d:11:fb:8f:0e:4b:ad:08:4f:5c:15:ff:da:12:2e:
c0:47:ce:d2:89:7c:97:6a:09:87:ba:6f:3c:e9:7b:fa:f2:5b:
09:da:f7:84:b4:b9:06:4f:8a:56:b2:46:d2:ca:73:72:92:b2:
d6:89:0e:d5:af:21:5f:22:e1:b7:b4:1b:f9:d7:d6:52:65:e2:
97:5a:7a:50:6a:80:63:3e:3f:71:17:f0:2e:ed:fc:65:ce:66:
8a:0b:db:66:42:31:a8:7f:22:e3:c5:05:db:72:14:73:16:fa:
e4:dd:9e:a2:2c:80:a6:17:8e:4f:75:7e:e4:b7:34:b9:60:4b:
48:f5:83:50:27:1b:40:35:76:33:08:2b:34:15:8c:fe:69:20:
8e:a4:6d:ef:b0:6e:8a:1e:f1:c3:0e:16:d7:58:98:b8:c9:b8:
b4:a3:1e:d5:1f:9d:f2:86:e3:bb:3d:93:bb:92:d7:8a:7f:f1:
66:ed:76:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 04:33:51 2025 by rpki-client