Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/24L_aaEPl2QCp31RS7xy6csseoM.roa
File: 24L_aaEPl2QCp31RS7xy6csseoM.roa (raw, json)
Hash identifier: GGS3eIBFgWyz07mZn4/uoFwJDZtWgRdT8XMFmCNt5pU=
Subject key identifier: DB:82:FF:69:A1:0F:97:64:02:A7:7D:51:4B:BC:72:E9:CB:2C:7A:83
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8B998502
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/24L_aaEPl2QCp31RS7xy6csseoM.roa
Signing time: Fri 10 Jun 2022 16:11:02 +0000
ROA not before: Fri 10 Jun 2022 16:11:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:181:477e:58d8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2342094082 (0x8b998502)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 10 16:11:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=db82ff69a10f976402a77d514bbc72e9cb2c7a83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6e:ec:0f:7c:db:db:b4:13:10:ce:3c:8e:91:
74:64:4f:61:7b:6c:a5:d8:30:3d:5e:6f:ac:19:5b:
ea:48:45:eb:0b:a4:f0:bd:83:05:7a:51:95:3a:a0:
a8:28:9a:93:cc:76:b2:43:50:ff:52:d6:de:a8:af:
d1:1c:de:2e:e1:fc:74:75:03:17:4c:b8:80:99:07:
a7:82:79:26:95:80:08:d4:be:23:f5:cf:80:07:99:
69:4a:1c:1d:2a:1e:26:72:ba:f1:f8:cf:bf:3f:fd:
a9:c0:54:ee:cb:49:85:80:15:2e:51:03:48:cb:3e:
d9:26:e1:32:b8:8e:d6:a3:0a:78:64:00:66:6f:7f:
e1:5e:7c:3f:4b:ea:bc:d0:b2:d9:94:b5:d9:26:d4:
bc:2a:7e:c1:20:6a:80:88:1d:28:19:9f:05:a0:f4:
bc:2c:23:87:35:8a:46:cc:8e:86:5e:4e:df:9f:52:
2c:d2:75:08:29:6b:7f:0d:00:f3:6e:91:a8:f2:f4:
18:11:d3:2d:23:4c:c6:b1:63:32:2b:e2:51:ac:c6:
f8:8d:ba:cd:3a:af:0d:b4:d3:82:37:70:f0:46:91:
84:8c:5d:19:1a:bc:67:88:e6:84:17:ed:ed:2a:1c:
35:50:b2:0f:42:94:23:28:f8:ac:2a:b8:13:cc:6c:
87:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:82:FF:69:A1:0F:97:64:02:A7:7D:51:4B:BC:72:E9:CB:2C:7A:83
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/24L_aaEPl2QCp31RS7xy6csseoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
08:78:1e:63:5d:92:04:f5:b1:c9:d0:d7:42:99:99:76:26:5f:
c6:8d:36:eb:fd:7a:bb:6c:cf:31:76:c3:01:d0:c3:06:7a:1a:
e9:a7:ea:96:91:c3:8b:8f:3f:87:bc:1c:85:78:83:28:b3:9a:
32:5b:70:59:4f:ff:44:40:63:9f:fd:df:aa:0f:85:28:3b:f8:
54:96:97:aa:dd:8b:49:4d:cb:71:85:5c:dc:8d:ac:f5:2c:39:
85:7a:34:9e:ef:6f:8c:c3:f1:34:66:1f:e1:43:ac:1c:56:24:
a6:bc:62:ee:0d:7e:f5:bd:47:7c:bd:34:a2:72:5b:ae:6d:15:
1c:36:2c:14:9c:dd:63:2f:4f:c7:f3:4f:d6:ee:8c:b8:49:ed:
73:fc:0c:5b:51:e0:44:5f:78:4b:4e:e9:45:c3:47:0f:64:53:
b8:34:ce:b1:be:fb:cc:2e:da:3a:05:33:13:6a:1a:cf:09:e1:
2d:ca:99:31:86:b3:7e:21:f2:62:ee:bc:54:e4:56:3c:2b:d6:
a1:d1:74:bd:67:e5:7e:fd:45:16:84:67:0c:98:4b:f5:d4:78:
e5:57:a6:2d:f2:53:70:d9:40:1b:b9:8a:99:83:bf:7f:61:5e:
92:b0:91:81:41:b8:49:6e:52:59:31:37:68:c2:44:4d:11:e0:
88:19:a4:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 11:05:27 2025 by rpki-client