Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1Npdzf9CaWTf9Hu-0cATpztjn94.roa
File: 1Npdzf9CaWTf9Hu-0cATpztjn94.roa (raw, json)
Hash identifier: Jb6PoeSYHfxlN33O3LyHqfpUt1wYnLt+y60JkNl2S7s=
Subject key identifier: D4:DA:5D:CD:FF:42:69:64:DF:F4:7B:BE:D1:C0:13:A7:3B:63:9F:DE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01856D3BEF92EF5F7A0EB30B04AC77780BA8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1Npdzf9CaWTf9Hu-0cATpztjn94.roa
Signing time: Sun 01 Jan 2023 12:08:42 +0000
ROA not before: Sun 01 Jan 2023 12:08:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:3b:ef:92:ef:5f:7a:0e:b3:0b:04:ac:77:78:0b:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 1 12:08:42 2023 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d4da5dcdff426964dff47bbed1c013a73b639fde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:97:10:1f:0f:13:63:4b:4e:d2:d8:20:01:a6:
ec:b4:7d:34:e0:77:25:61:f4:01:06:6e:32:3b:bb:
61:97:f1:f7:17:8b:90:35:a0:16:cf:64:63:e2:bc:
6e:2c:30:eb:c3:bb:1f:0b:9f:5d:8a:8d:2a:f1:00:
99:82:d9:b3:af:d7:68:7e:a3:b1:3b:d0:b2:1c:51:
f6:f9:5a:50:ff:15:bd:08:cd:f1:14:37:0f:c9:1f:
2b:76:34:ae:7d:a4:70:22:ba:57:d4:43:45:32:49:
7a:13:83:8e:d1:81:cb:e8:e3:33:20:30:84:f7:73:
01:d5:c5:93:64:78:19:f2:aa:54:ae:7a:0d:95:11:
9f:f3:b2:f6:5b:a6:3f:7a:95:ac:d7:15:0e:6a:21:
a9:75:54:96:0e:44:2d:ef:95:e4:92:9d:ac:8c:46:
32:3e:3e:c4:b9:7d:89:a1:62:10:d4:9b:d6:df:2d:
05:65:73:e9:20:e4:4c:e4:c7:23:4b:05:46:2a:d2:
1e:89:e9:cf:fe:80:e6:d0:44:be:f3:b4:75:b1:0c:
43:d1:d5:bf:d1:a7:bc:6f:27:ec:2a:3f:3c:48:7c:
5f:0b:ba:b6:03:f1:28:2c:70:eb:6b:50:f1:85:12:
94:e3:6f:95:56:24:9c:20:e2:2c:75:f4:7a:9b:66:
bb:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:DA:5D:CD:FF:42:69:64:DF:F4:7B:BE:D1:C0:13:A7:3B:63:9F:DE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1Npdzf9CaWTf9Hu-0cATpztjn94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5f:22:db:a4:ae:3b:44:d4:ae:41:d5:1d:ca:c1:0c:6d:43:58:
63:2e:c3:1d:d9:89:84:c8:c7:3c:1e:38:e3:05:de:fb:5b:e1:
0b:03:e2:7a:e9:e6:de:af:7d:2c:76:b0:01:0a:e9:c2:8a:d4:
77:a2:cc:b1:87:b2:6f:88:a7:6a:e4:b7:67:25:98:fa:58:67:
cb:c0:d4:e7:47:aa:57:61:eb:d8:d1:da:08:2c:7e:d6:f1:78:
c0:3e:01:20:96:b3:a8:4e:10:46:88:69:03:69:a5:c5:4e:4e:
db:6d:f9:eb:5f:69:59:8d:70:04:1e:e3:36:98:46:e4:fd:6b:
34:04:12:61:f4:60:4c:19:f4:4e:be:7a:ce:94:0e:81:f9:06:
7e:5e:43:7d:dc:ba:fc:ea:ac:13:c7:eb:25:94:c1:08:1c:99:
c2:65:09:5b:b9:a8:66:eb:ac:55:a7:d6:fc:d3:af:08:0b:22:
b6:cb:18:51:85:3e:2d:e2:8d:4d:06:7c:21:4e:11:da:15:eb:
7b:7d:8c:e3:e6:74:b8:b9:a9:71:31:19:55:df:03:23:c4:a9:
d4:25:2b:7c:5c:b6:4c:3b:1c:be:ca:da:25:4a:e2:1e:23:3a:
f6:cc:04:d8:bf:f6:47:c6:37:d9:fe:06:a5:09:82:9e:d1:42:
fc:de:ff:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 05:47:52 2025 by rpki-client