Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2rdZdfBHcxELuYAu2z4qUkoxHh4.roa
File: 2rdZdfBHcxELuYAu2z4qUkoxHh4.roa (raw, json)
Hash identifier: fB8z/ZrjDFxIf+aF4j1vieKE3m2ed0GhkBUuELP3K9U=
Subject key identifier: DA:B7:59:75:F0:47:73:11:0B:B9:80:2E:DB:3E:2A:52:4A:31:1E:1E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A2C26DEF024CF9D91EF4301618B011A36
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2rdZdfBHcxELuYAu2z4qUkoxHh4.roa
Signing time: Fri 25 Aug 2023 10:04:19 +0000
ROA not before: Fri 25 Aug 2023 10:04:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:2c26:ce99/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:2c:26:de:f0:24:cf:9d:91:ef:43:01:61:8b:01:1a:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 25 10:04:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dab75975f04773110bb9802edb3e2a524a311e1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8c:0e:9e:19:ec:a7:22:ae:59:82:9c:48:ea:
e2:a9:3f:a3:59:b8:f2:f0:fc:89:db:5f:63:55:46:
de:e3:48:53:54:18:91:0f:b4:cc:de:92:7a:e1:f9:
de:dc:10:57:16:fb:cb:f5:40:0d:d2:ed:7b:bf:56:
63:f6:ed:c4:96:9e:0c:98:0f:22:4e:22:0b:af:28:
5f:4d:51:29:f8:c7:df:b5:53:71:ac:21:3b:c7:ee:
a7:0d:7d:53:44:5b:f1:8b:d4:42:d9:ca:86:22:9c:
b3:c0:51:e7:d3:0a:71:6d:7a:96:02:35:2d:3c:cf:
68:9e:47:ad:80:f5:bd:ba:28:c7:9e:79:54:20:a7:
70:78:06:05:f9:79:a6:b5:d8:7f:01:d8:73:df:ee:
a8:d5:59:bc:05:00:60:ec:2d:af:e4:a1:f8:1f:4f:
08:1c:94:5a:3b:14:a2:79:62:48:6f:82:2d:07:4a:
36:2b:6e:c9:45:0a:05:61:32:5c:bc:2e:0e:63:40:
bd:d2:43:78:fe:05:ed:b9:8f:24:f1:ff:9d:5c:86:
34:44:cf:a2:f8:a3:f5:ba:29:b8:75:08:f8:3f:a9:
fc:c6:70:7a:e5:3d:ba:4f:d1:ad:75:42:01:1b:1b:
ce:34:58:7f:1c:20:9d:45:c9:09:7f:fe:8d:52:2c:
3b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:B7:59:75:F0:47:73:11:0B:B9:80:2E:DB:3E:2A:52:4A:31:1E:1E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2rdZdfBHcxELuYAu2z4qUkoxHh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4b:ca:7e:5c:e6:17:48:89:b2:a4:d0:fb:b2:43:e6:b5:e1:cd:
c4:49:7d:8e:5d:4d:c9:e3:18:85:4c:e7:60:e4:65:f8:05:ae:
ba:99:b9:f5:5c:af:cb:7f:ee:e4:da:d1:38:02:08:2d:03:69:
61:7c:3a:f9:4a:71:50:b0:be:6f:ef:2b:ff:37:40:88:c1:6b:
4c:1d:41:b0:d6:52:82:45:a7:80:e3:1d:7d:18:ed:00:f1:e6:
f1:d5:18:ed:ce:cb:c7:5d:e6:aa:3d:5b:7c:8c:48:48:f6:9f:
54:3d:9b:0f:78:30:f7:be:2d:1b:61:dd:bf:ca:ee:98:6e:22:
60:e6:11:14:5c:d3:fe:0b:76:3a:fc:75:2f:8a:df:f4:71:20:
89:84:ee:d3:2a:91:18:75:8d:d8:27:07:3c:08:15:9c:ec:fb:
33:0a:8d:1d:60:0b:13:2a:77:05:79:1b:6e:cf:7e:7d:82:7e:
81:99:76:06:15:97:0d:68:43:6a:6f:b8:2f:01:dd:f0:8c:04:
f3:ef:b3:3d:2e:d7:99:40:73:3c:3d:21:2f:2c:fe:d0:ea:a3:
02:38:2f:1e:43:5b:da:e2:f4:1c:96:b3:2a:8e:1e:9b:ec:78:
b5:16:39:3b:b6:b6:42:c6:3a:05:96:9e:ec:78:83:f6:44:38:
e6:3f:a6:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 13:37:55 2025 by rpki-client