Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1yCTuViCl10Za7MV9raJTNoag4Y.roa
File: 1yCTuViCl10Za7MV9raJTNoag4Y.roa (raw, json)
Hash identifier: R2/fdnjzmIS3/qfIX7AXKBvPqQjOi3bKhs8ogcXen7s=
Subject key identifier: D7:20:93:B9:58:82:97:5D:19:6B:B3:15:F6:B6:89:4C:DA:1A:83:86
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01864106C5AFCD583FDF3EABC8836F8B39BC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1yCTuViCl10Za7MV9raJTNoag4Y.roa
Signing time: Sat 11 Feb 2023 15:10:08 +0000
ROA not before: Sat 11 Feb 2023 15:10:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:41:06:c5:af:cd:58:3f:df:3e:ab:c8:83:6f:8b:39:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 11 15:10:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d72093b95882975d196bb315f6b6894cda1a8386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0b:ed:6b:8f:ed:01:f2:a6:48:94:f8:6a:9e:
36:cc:b6:9c:26:80:49:b7:81:f0:31:29:ac:08:b8:
69:50:2d:67:3a:09:41:44:93:1d:cf:a3:5c:74:26:
bc:f7:b3:34:9a:49:c2:9b:fa:ba:81:28:e6:1f:db:
a3:7d:3f:5d:d8:cf:fb:66:44:93:b1:9b:44:92:a6:
ea:4d:60:e2:19:1b:f7:03:da:cd:17:a7:93:f8:2c:
6f:6d:8a:ed:99:44:a2:49:0f:36:af:0c:20:0a:52:
c0:44:19:6c:47:ac:e3:22:29:06:bc:55:7b:9d:c5:
52:ff:46:85:4f:93:08:3b:11:5e:cd:42:a4:26:4a:
a3:90:51:04:36:96:f8:17:d0:34:c9:e3:1d:20:f2:
6f:65:af:c1:6f:d0:8f:77:68:b6:eb:2b:a4:47:94:
95:7a:27:e8:ab:10:8b:77:a0:50:a4:46:8d:e2:35:
6d:b1:db:08:27:85:b1:8a:26:a8:9f:0f:4a:cd:98:
aa:8f:e5:92:00:69:e2:ce:28:ae:48:ac:4f:b9:d8:
a9:9c:ad:54:a1:43:d4:d4:45:ce:1c:77:70:66:a5:
97:48:50:d6:c3:18:f8:bb:dd:14:9c:c2:78:c3:f9:
1e:ff:aa:d2:71:31:6f:a5:d6:ba:7a:80:71:d3:6e:
a8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:20:93:B9:58:82:97:5D:19:6B:B3:15:F6:B6:89:4C:DA:1A:83:86
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1yCTuViCl10Za7MV9raJTNoag4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
04:fd:34:62:0f:1b:bf:f2:e9:ac:10:92:4d:15:23:fc:09:6e:
ef:99:2e:02:99:6a:06:65:3b:dc:f0:11:a7:26:af:9c:20:e7:
4b:45:b1:65:de:12:dd:31:1e:ae:ab:11:99:61:5a:b3:4e:b5:
10:6f:53:37:7b:50:3e:24:c2:51:7f:7d:7b:0b:83:5e:8e:16:
26:fb:de:79:c7:31:e1:90:6b:07:74:58:85:76:cc:92:db:2c:
86:d7:7b:f6:13:38:a5:25:fc:27:a1:2e:90:79:89:0f:a1:f6:
9c:56:8b:ce:04:5e:73:a8:9c:b7:e5:ca:19:41:41:68:72:5e:
c4:ac:55:76:8a:bb:55:6d:91:fc:e3:43:1d:79:48:48:49:65:
c2:01:0f:fe:1d:1d:3e:a0:25:5b:e6:fe:3a:45:d0:c0:b5:4d:
22:22:e9:c1:41:6c:28:15:57:47:22:3d:4a:61:79:b4:98:f7:
99:15:3c:7f:7c:24:31:ae:fa:80:06:4c:59:f5:13:c1:c7:c4:
2d:07:d4:98:ad:3a:26:7d:e5:8f:4c:e1:08:d0:8d:0f:a8:26:
80:2c:17:46:59:3f:8a:4d:46:8d:f1:2b:b3:0e:09:36:99:ce:
79:29:9c:af:8e:f8:b1:63:41:9d:73:40:f0:2f:4a:29:ea:cd:
7e:35:8c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 19:50:41 2025 by rpki-client