Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4oJWLHwYKMIpC-LlvNKc8MMUl9g.roa
File: 4oJWLHwYKMIpC-LlvNKc8MMUl9g.roa (raw, json)
Hash identifier: O2nsRV6V0WnADVywLoArJtH3lCLPv/I9fbrya4nMgZ8=
Subject key identifier: E2:82:56:2C:7C:18:28:C2:29:0B:E2:E5:BC:D2:9C:F0:C3:14:97:D8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6E48BE6F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4oJWLHwYKMIpC-LlvNKc8MMUl9g.roa
Signing time: Sun 27 Feb 2022 22:19:32 +0000
ROA not before: Sun 27 Feb 2022 22:19:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1850261103 (0x6e48be6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 27 22:19:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e282562c7c1828c2290be2e5bcd29cf0c31497d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0f:71:c4:31:0a:78:dd:08:3a:16:12:33:dc:
d0:6f:2f:fa:a9:3f:01:b8:4f:51:5d:2a:71:cb:a8:
66:06:10:72:21:b2:be:3a:f9:a6:f6:d4:e4:4c:19:
c2:c6:d3:26:c9:aa:fa:1e:d2:d7:ae:84:e0:78:16:
b6:6b:4b:5d:21:ca:b6:d0:4b:93:85:55:d0:36:22:
70:6b:1a:6d:60:c2:9a:29:4a:34:c8:d1:f7:46:72:
df:0a:4a:68:84:8b:8f:93:ee:a0:83:45:f9:dd:7a:
1f:be:c1:79:cb:a3:f5:0c:31:c7:61:b8:b8:39:4e:
d9:7d:53:a0:c5:81:e6:c6:a7:fd:77:c0:fb:4b:e0:
b6:72:7e:17:8e:8a:cf:89:e4:d9:bb:e0:2d:b6:a3:
5e:2d:f2:49:a6:c3:e0:9e:e5:8e:4c:01:d4:86:56:
e8:b2:6a:e2:4c:45:e4:70:43:23:f6:78:d6:8b:99:
c1:06:ce:a0:db:85:0e:e4:3d:bf:d7:3d:7b:bd:e0:
6f:72:ea:4b:6f:a5:f4:b7:59:4b:ec:56:88:dd:c1:
7b:2d:1f:11:6e:d7:30:a2:0c:05:05:37:a4:8f:a4:
1a:00:dc:55:52:9a:bf:9e:0c:d6:a1:51:cf:3e:48:
99:9a:cc:c1:24:bd:39:ff:5e:a3:fb:81:fc:4b:5c:
7a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:82:56:2C:7C:18:28:C2:29:0B:E2:E5:BC:D2:9C:F0:C3:14:97:D8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4oJWLHwYKMIpC-LlvNKc8MMUl9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7e:55:3f:d3:0b:69:b8:61:de:70:94:34:ad:ee:d4:84:b3:f2:
22:d0:3e:0c:84:9f:42:78:d8:71:15:f8:05:a4:93:2a:32:86:
28:64:e6:7e:78:1c:85:82:cf:90:27:3b:02:b0:2f:3d:fa:99:
d5:50:90:f4:f2:4f:d6:b3:97:f4:66:49:00:1c:a1:9c:9b:e0:
1d:3d:94:69:83:8a:fc:c4:ea:81:71:f7:c0:3e:3c:5f:6c:3d:
a6:79:8f:c9:27:63:a7:28:ef:3a:06:d2:e1:27:08:29:bc:3e:
4e:fd:0f:bd:19:f5:36:f3:b0:ba:d2:b7:e5:da:bd:22:38:0d:
4b:54:e2:2a:85:8f:52:d1:2e:6d:ee:f9:1e:11:bb:e8:c1:19:
7b:ed:3a:6f:e5:e2:a3:89:2e:af:e2:40:fe:2c:55:1b:8a:db:
71:c4:0a:7d:c0:64:47:29:75:a7:56:c9:ad:57:81:15:00:51:
09:70:35:d5:ff:99:82:76:51:c3:a4:13:eb:c9:fe:1c:b3:33:
e8:b5:b7:4a:18:cb:a2:85:9b:96:c2:85:ca:0e:94:31:8b:33:
67:ab:2c:11:9a:ac:c5:15:7a:12:8c:63:29:f2:82:1d:c0:19:
47:11:05:eb:1d:37:13:96:c8:0e:15:d3:39:ea:ed:85:bd:cd:
33:2c:5d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:12:49 2025 by rpki-client