Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5vbOMhmyJke-h5JRchmXcabVyuI.roa
File: 5vbOMhmyJke-h5JRchmXcabVyuI.roa (raw, json)
Hash identifier: sAcdZsVjPIe/k7xE/02hdxNcn0TY+KhJwaY5X6jy/To=
Subject key identifier: E6:F6:CE:32:19:B2:26:47:BE:87:92:51:72:19:97:71:A6:D5:CA:E2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 77A6E71A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5vbOMhmyJke-h5JRchmXcabVyuI.roa
Signing time: Sat 02 Apr 2022 02:10:45 +0000
ROA not before: Sat 02 Apr 2022 02:10:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2007426842 (0x77a6e71a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 2 02:10:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e6f6ce3219b22647be87925172199771a6d5cae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:12:4d:05:29:7b:2d:5d:fa:b4:6a:4c:30:c6:
5d:8e:67:4a:15:0a:e0:16:6e:b8:ee:cf:f9:7f:26:
8e:0e:9c:84:ca:c8:a9:80:85:2e:8e:2b:ac:75:2d:
6a:f6:a9:41:b6:75:31:02:18:bb:a9:8b:85:27:b0:
0e:82:92:eb:61:da:e0:12:87:4b:01:59:4d:b5:96:
d7:84:e6:ae:bd:06:bf:b5:30:1e:15:0e:97:b1:51:
50:70:08:c4:dc:e6:5c:8e:fd:77:1c:2f:6c:49:b7:
bf:07:be:97:92:4d:fc:70:d9:6d:76:26:be:db:9d:
03:5d:5b:57:45:79:c0:c0:75:7a:4c:16:e5:24:2f:
d2:d2:c8:5a:08:ca:7e:ab:fc:af:fd:07:86:93:a4:
7b:8c:10:44:fb:76:ea:77:9d:52:f4:5b:02:5b:76:
f1:2f:b2:6b:7b:83:19:37:f5:b2:60:d8:e2:05:e9:
58:3f:ac:fd:8b:54:e8:47:e0:8b:86:bc:59:75:f4:
62:75:35:c6:5c:34:db:71:9e:a8:8c:7c:f2:7b:fc:
64:ba:3b:6a:db:a2:ca:43:61:d1:e0:fe:57:6e:30:
5e:eb:30:19:6a:22:13:48:56:c7:20:ba:51:b8:a5:
4b:8d:3d:3d:60:0d:e1:d5:5a:6e:9b:65:03:0c:c4:
a2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:F6:CE:32:19:B2:26:47:BE:87:92:51:72:19:97:71:A6:D5:CA:E2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5vbOMhmyJke-h5JRchmXcabVyuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
52:e2:15:94:50:47:f8:2d:27:b5:a3:ba:bc:c1:dd:58:a0:7a:
0c:7c:f6:7b:36:77:4a:bb:c9:ed:80:67:ba:39:38:e8:37:84:
c4:b8:0e:52:60:88:60:df:18:7f:f7:cb:53:86:d7:fb:2a:ff:
0b:9c:0e:57:2c:27:a3:73:a5:ef:b8:e6:57:47:32:e1:f1:e1:
21:64:b4:ac:dd:2b:f8:ce:5d:1f:04:4f:8b:b3:11:1b:bb:6b:
a3:69:37:55:91:5e:08:10:6b:ee:95:db:86:52:ad:c0:65:10:
29:c1:e3:94:c4:7a:d7:ae:b4:b5:82:17:ac:8c:1b:8c:5c:66:
2c:1b:a1:41:7f:66:0f:9c:17:64:f2:ff:ed:d4:65:91:bd:a5:
b4:89:27:3b:77:2a:63:26:1d:40:1b:44:a8:4d:7e:03:f6:82:
de:3a:ff:52:84:76:93:91:ad:25:2f:8f:ce:3e:5e:a2:1f:27:
d6:77:c5:75:53:cf:25:17:21:d3:6b:00:27:37:85:48:69:71:
3b:d6:d9:ee:54:75:58:73:d0:9a:60:37:57:13:6e:76:6d:3c:
db:54:43:89:20:7a:81:b8:68:e2:e7:46:75:6e:1b:09:f0:8a:
e0:12:a1:e8:87:ea:da:90:a9:6a:4a:4e:92:ca:cf:65:b2:2e:
3a:6b:54:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 10:21:45 2025 by rpki-client