Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/60CrkicgbFcwbWtUX2YPSDuWV8Q.roa
File: 60CrkicgbFcwbWtUX2YPSDuWV8Q.roa (raw, json)
Hash identifier: dprwY9nr+MRU1/Criaya4rG8UXmQFoR1yJj6RQ8TAds=
Subject key identifier: EB:40:AB:92:27:20:6C:57:30:6D:6B:54:5F:66:0F:48:3B:96:57:C4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8963964A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/60CrkicgbFcwbWtUX2YPSDuWV8Q.roa
Signing time: Thu 02 Jun 2022 20:09:20 +0000
ROA not before: Thu 02 Jun 2022 20:09:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2305005130 (0x8963964a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 2 20:09:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eb40ab9227206c57306d6b545f660f483b9657c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:e4:6d:ba:80:12:cc:18:f0:32:31:e8:08:43:
2d:33:16:c5:13:88:14:0c:08:08:68:0c:f9:a6:ad:
bb:b2:c3:32:a4:b6:0c:bc:f3:87:b0:17:d4:49:e6:
5b:86:4a:28:b1:af:8f:b3:48:bb:96:38:b5:e1:21:
c7:67:7f:0f:48:41:1e:69:04:7d:b9:e9:b5:c9:65:
3d:c1:94:22:2a:6a:92:c0:73:3c:52:fc:ff:27:e7:
63:5f:7f:10:0c:46:c1:af:cd:4e:96:ab:f2:5f:a8:
e0:9c:4b:1a:58:2a:d9:f8:cf:f8:20:8d:93:52:78:
59:ec:d1:64:e8:1a:30:1c:82:73:91:d5:a4:82:36:
66:5d:ec:ea:25:6f:98:7e:44:4b:15:05:4e:c8:9a:
3e:d7:36:13:b8:a6:9c:41:db:6c:6f:c8:ef:0b:ed:
2d:79:45:e6:89:2f:37:3b:3b:c1:e8:4d:cc:ab:d9:
8a:29:8d:bf:e8:ab:87:5b:f8:83:65:b9:36:58:1e:
60:db:79:1f:c7:b2:79:4c:18:1c:9a:44:e6:b2:c8:
f8:d7:cb:64:92:36:11:4b:96:aa:3e:e1:d2:d5:ac:
59:d2:bf:a8:34:cc:42:ec:bb:6f:8c:e8:01:57:aa:
95:5f:c8:dc:07:c8:48:23:bc:10:c8:5c:a3:37:55:
de:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:40:AB:92:27:20:6C:57:30:6D:6B:54:5F:66:0F:48:3B:96:57:C4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/60CrkicgbFcwbWtUX2YPSDuWV8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
82:68:bc:66:b0:2f:8b:02:12:2c:dc:e2:e4:5c:d7:a1:95:3a:
df:f3:52:af:9d:d5:d1:fc:7f:98:11:58:12:54:84:79:65:4b:
e7:9f:56:97:e3:d8:93:ce:7e:e2:42:1e:2c:2e:70:ab:c9:07:
96:d7:04:3f:8a:ad:0d:eb:ce:75:66:65:da:74:8f:42:f1:ad:
ab:62:2f:c0:65:9b:93:23:2b:25:6c:1e:35:62:c7:e3:0a:ab:
b2:88:2a:5c:0f:2a:d8:de:0a:86:6f:dc:c9:fc:fe:5c:57:50:
ce:66:e2:25:e2:fe:0e:18:6c:db:84:15:9e:f1:7f:dc:25:f6:
2f:2d:99:90:1c:62:67:5f:3f:40:91:d5:21:a6:48:8a:65:6c:
bb:43:8f:e2:e5:5a:46:02:43:1c:55:08:29:e7:70:6a:a5:6e:
f1:f8:f4:c0:16:66:7f:0e:e2:d0:e2:b4:f9:0b:7e:a3:1f:53:
a4:42:e0:62:a1:bf:60:c5:ca:7e:aa:c2:b5:dc:6e:bc:a5:2f:
00:a0:b8:92:9a:6c:cc:db:d4:5f:3c:63:05:78:49:5b:a0:b5:
7b:d6:e2:f0:ae:ba:f2:ed:43:43:09:74:cb:77:4c:0d:e1:3e:
a5:dc:bb:18:46:76:0d:1e:6a:e5:42:ff:5f:a4:74:ad:ef:d1:
ca:d7:e3:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 15:21:06 2025 by rpki-client