Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4cdz0G07r-GVFLKCkDOlsxq773Q.roa
File: 4cdz0G07r-GVFLKCkDOlsxq773Q.roa (raw, json)
Hash identifier: 2qObfWnd5dcYmEY2XloQI0OupzbliXGTfpgTFloP/D8=
Subject key identifier: E1:C7:73:D0:6D:3B:AF:E1:95:14:B2:82:90:33:A5:B3:1A:BB:EF:74
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01820965E961658A251A46114895C2F76422
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4cdz0G07r-GVFLKCkDOlsxq773Q.roa
Signing time: Sat 16 Jul 2022 23:44:09 +0000
ROA not before: Sat 16 Jul 2022 23:44:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:09:65:e9:61:65:8a:25:1a:46:11:48:95:c2:f7:64:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 16 23:44:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e1c773d06d3bafe19514b2829033a5b31abbef74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:56:19:c6:71:aa:83:8e:cf:7c:77:84:7c:c6:
86:d3:95:2c:f5:dd:a6:10:2b:1e:96:7d:57:cb:0b:
43:68:5a:84:e2:c0:75:f4:37:c4:53:cb:4e:24:ed:
41:a7:08:dd:8f:78:3b:7c:e7:9e:6f:0b:6f:e5:a6:
66:5d:b7:4a:53:a7:8d:8b:d3:41:66:88:c5:fc:df:
d1:26:ad:4e:2e:9c:0f:d7:5a:76:9f:db:14:a9:94:
09:34:84:f7:1d:a3:b7:fc:c1:bb:89:83:2f:1f:51:
c7:48:8e:7d:d6:fb:27:2c:ca:8d:a5:d2:b9:52:12:
d7:5d:7b:f4:92:83:41:7e:9d:c6:1d:77:5c:aa:71:
ec:e4:1d:6f:99:ad:6a:48:50:a3:ba:ef:1f:4e:d6:
7e:25:bf:5b:46:bb:8b:f5:a2:47:24:76:85:d0:21:
e1:c4:ed:77:bc:e7:71:20:11:6d:69:f3:4c:48:52:
61:f4:4d:a1:19:59:d3:38:fc:0e:4c:b5:d0:d1:48:
cc:4d:ae:4c:f4:fb:3d:4b:1d:d7:4a:e1:77:16:63:
63:04:3c:3a:91:80:01:74:8e:93:37:6f:d2:59:e3:
6b:dc:1f:a8:18:b6:56:d8:6b:6d:02:a8:0d:13:89:
7c:f5:b3:cb:bf:f4:f8:e1:49:69:db:d2:32:39:52:
ab:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:C7:73:D0:6D:3B:AF:E1:95:14:B2:82:90:33:A5:B3:1A:BB:EF:74
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4cdz0G07r-GVFLKCkDOlsxq773Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
af:5f:fe:59:24:fe:1b:53:ff:43:e3:f1:6f:72:3c:e1:c9:ca:
a3:b8:df:42:ca:d6:dc:84:77:9e:f6:a9:f2:5e:be:af:84:57:
06:a8:b3:b0:56:59:dd:b4:28:fe:35:c0:84:09:c8:fe:13:0f:
ae:c4:d6:6d:57:6f:00:84:a5:a3:9a:cc:cb:c2:9b:6e:2d:4f:
5d:bd:47:0a:c0:a2:01:c4:66:91:ff:60:ec:9e:40:bc:b9:7c:
37:9c:1a:d1:6c:3a:4b:cd:06:54:93:1f:2f:64:85:8f:87:d8:
f6:bb:9c:a9:0d:64:98:3a:6b:48:f4:49:fe:ab:a8:72:a9:5e:
73:7d:92:53:26:d2:bf:12:ea:51:7f:3e:19:d3:9b:fe:d5:53:
51:9c:7c:6c:13:20:b8:7b:03:0e:f8:e5:3f:38:d7:a3:02:c2:
09:8c:ad:35:63:00:de:14:55:76:b4:2d:b4:51:5b:05:32:4b:
b0:91:22:10:54:38:f9:99:3b:1b:de:53:3b:ce:a3:1c:09:24:
8d:81:61:01:ff:7b:e5:a2:b0:25:0c:46:4e:8d:57:9a:48:38:
ef:a8:36:23:65:c1:7f:94:87:cd:fa:62:95:bd:2f:7e:0d:94:
53:a5:45:39:39:5d:7e:ba:69:c9:fb:34:e5:82:ef:54:96:53:
08:bd:c0:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 17:27:26 2025 by rpki-client