Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4lgJ6JYpvJRByO_vgXL0jDyv998.roa
File: 4lgJ6JYpvJRByO_vgXL0jDyv998.roa (raw, json)
Hash identifier: QyptP7kz/FBoedPmlo8/KvW2xkyk8pVqglsq1RaJMhs=
Subject key identifier: E2:58:09:E8:96:29:BC:94:41:C8:EF:EF:81:72:F4:8C:3C:AF:F7:DF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183FEF599717956179D7AF806999417E3F3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4lgJ6JYpvJRByO_vgXL0jDyv998.roa
Signing time: Sat 22 Oct 2022 09:10:51 +0000
ROA not before: Sat 22 Oct 2022 09:10:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:fe:f5:99:71:79:56:17:9d:7a:f8:06:99:94:17:e3:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 22 09:10:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e25809e89629bc9441c8efef8172f48c3caff7df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:14:fc:98:43:85:76:66:77:61:d9:e6:b0:63:
88:08:18:a2:03:c8:d8:51:c8:ca:dd:1e:01:60:c1:
e7:48:4b:ec:a6:34:16:07:66:36:7e:ef:a2:99:1d:
b4:5f:11:d9:6a:39:b2:62:b3:f6:62:ca:ee:95:60:
5b:24:fa:74:24:05:ec:6a:d6:4b:50:f5:10:51:6c:
00:96:6e:6b:b9:92:36:77:11:ea:41:41:44:dd:a0:
f6:bf:b9:fc:a9:5c:e3:40:fc:c3:1a:6e:36:d9:9c:
ed:3a:1a:a4:81:20:16:11:3e:b8:89:7a:41:02:10:
7a:3e:98:b9:14:fc:98:c3:77:cf:a8:82:f4:9a:10:
0f:be:4e:f7:18:5e:e3:65:1f:cf:1e:9d:46:8f:cb:
fb:18:d3:d4:5e:87:25:14:03:64:80:e2:03:b2:13:
a4:c0:d0:52:7c:5b:d6:04:12:bb:6a:11:d1:cb:33:
ac:63:6b:43:99:e6:00:d8:16:14:15:c8:97:1e:eb:
b9:db:bd:36:26:6e:3c:9a:b1:c4:84:11:09:2e:7e:
a1:f3:26:9a:c2:bc:54:15:87:f4:71:d6:16:e2:46:
07:98:06:5d:3b:ce:64:64:2c:7a:b5:ea:f0:bd:e6:
df:f8:ed:f3:7e:f1:78:62:4d:c8:b8:f8:f0:00:e6:
99:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:58:09:E8:96:29:BC:94:41:C8:EF:EF:81:72:F4:8C:3C:AF:F7:DF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4lgJ6JYpvJRByO_vgXL0jDyv998.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
69:86:41:04:25:99:09:11:01:1a:da:e9:54:52:bc:cc:39:3e:
43:b6:53:7f:34:ec:79:fa:14:70:48:77:d5:60:78:8a:62:d2:
fd:dd:cd:5c:21:c9:03:5c:11:19:a9:f6:66:78:88:e3:0e:2c:
c5:4b:8d:cd:8b:8a:c5:ea:8a:9f:86:0a:7f:11:94:67:03:11:
3b:29:33:da:31:8d:11:28:54:89:81:81:54:19:10:3d:5a:20:
e3:e5:d4:df:1d:a9:95:35:7c:5b:79:42:39:52:0b:f3:0f:da:
91:af:ab:49:f8:49:2c:9f:f1:b0:a2:d9:bc:75:88:9e:5d:85:
26:fd:6c:51:08:d6:34:b0:10:b5:b1:38:02:0c:20:41:40:ed:
02:2c:90:45:4b:52:70:61:d8:bb:4f:96:1d:9a:f1:79:0a:38:
1e:d5:65:a5:4e:b1:90:b9:f3:e4:18:82:74:bd:6a:7a:cc:bf:
e9:1b:6c:16:fa:f0:77:e6:61:69:33:95:34:7d:2a:4f:e2:cc:
f7:f9:52:1c:ba:19:78:f2:79:ab:ef:3c:81:ca:2d:bb:89:5f:
8f:fd:21:f0:28:07:4a:a0:a7:11:b8:ce:89:ba:0a:9d:c2:2e:
11:97:67:35:f8:ae:09:41:d4:f1:0b:74:f6:d9:09:d3:2e:5a:
fc:b2:c8:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 23:53:11 2025 by rpki-client