Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1htICqFyDDuE2b9XOxVlG0uptGY.roa
File: 1htICqFyDDuE2b9XOxVlG0uptGY.roa (raw, json)
Hash identifier: RU2CAOorbAi6ds/8229679gOQglBu2Y9RkC0Qg3qqgA=
Subject key identifier: D6:1B:48:0A:A1:72:0C:3B:84:D9:BF:57:3B:15:65:1B:4B:A9:B4:66
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185342915EF4A519A978F21DA0EB22208DD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1htICqFyDDuE2b9XOxVlG0uptGY.roa
Signing time: Wed 21 Dec 2022 10:09:45 +0000
ROA not before: Wed 21 Dec 2022 10:09:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:34:29:15:ef:4a:51:9a:97:8f:21:da:0e:b2:22:08:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 21 10:09:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d61b480aa1720c3b84d9bf573b15651b4ba9b466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:66:32:dc:00:8f:61:c6:f4:39:bd:c8:87:12:
42:9c:22:94:1e:5a:47:79:b8:ae:73:a5:dd:12:59:
09:5e:e9:c1:a2:df:40:fb:c3:dd:00:29:46:12:39:
44:bd:0d:c0:d1:f8:4c:9a:1e:34:c1:93:74:0c:93:
59:0e:a8:03:d6:13:be:f6:d6:6d:d2:0e:76:e6:4e:
84:04:3d:2b:79:fc:a9:d5:32:c4:05:6e:3e:0a:90:
3d:8a:a9:5c:64:ee:c2:74:ad:df:f4:1d:20:bd:76:
67:9c:9b:b4:2a:21:3a:f0:fe:cb:37:09:e2:4a:1a:
29:07:ec:b7:f1:79:41:de:1e:25:c3:fc:ab:c9:c6:
0e:7c:52:3a:32:5c:02:47:83:d5:11:e9:4c:79:82:
cc:30:25:f5:3e:e0:df:04:34:76:58:19:f8:90:f9:
01:e0:8d:d2:c7:13:bc:64:46:52:5a:d4:69:06:18:
a4:09:2c:2c:97:8a:57:57:ce:2a:3c:67:2f:07:7e:
29:b0:31:8f:e1:0f:67:33:76:cf:bc:08:71:5c:15:
e4:44:b3:28:f9:79:de:2e:fa:75:d3:01:ed:cd:db:
aa:a1:08:1e:cb:66:e1:22:0c:be:a4:ee:c3:66:43:
e3:36:47:3d:40:b3:57:0f:99:42:27:47:1c:d7:27:
4f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:1B:48:0A:A1:72:0C:3B:84:D9:BF:57:3B:15:65:1B:4B:A9:B4:66
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1htICqFyDDuE2b9XOxVlG0uptGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5d:e1:4c:d0:3b:15:86:b4:99:f6:ce:d9:7b:5e:25:2b:48:97:
8a:45:f2:48:b8:2d:66:0c:59:99:bc:23:6c:aa:cc:9b:89:50:
c2:a9:c0:60:0a:b7:6f:a6:95:e9:d2:c6:4b:87:fd:c6:7d:d7:
10:c4:e0:c6:1c:52:9d:9a:cc:ff:52:86:3b:10:f8:c5:4b:35:
a7:f2:ed:bf:84:96:59:94:bc:06:c9:62:01:24:91:7f:5f:4c:
b6:10:da:7b:13:40:0f:29:55:82:93:4a:f8:90:60:f5:00:15:
67:9b:07:40:a0:d3:50:71:2d:84:44:bb:54:2a:87:64:69:d1:
57:59:4e:3f:7e:ee:3b:06:53:f9:00:df:39:c2:3c:60:ac:5a:
65:15:0e:3d:83:32:50:ae:7a:68:71:94:8d:fe:48:e8:18:6a:
b1:bf:dd:b5:39:3e:56:d0:ac:78:fb:62:26:3d:25:6e:12:ba:
da:6a:b6:a8:2e:f2:6b:11:b0:d2:18:f0:eb:5f:74:85:25:a3:
28:a9:ae:eb:9a:7e:7a:4b:48:58:a5:b2:ed:ff:d8:f6:17:61:
4b:b2:69:f1:12:b7:32:84:ee:d5:cc:ec:2c:ae:e3:5e:40:d9:
d5:77:06:48:bf:54:b7:81:62:cc:7f:67:2d:79:e7:94:c8:e7:
0b:a6:81:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 07:58:17 2025 by rpki-client