Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/69455wqPuYtoSwvs8wZsssp5DAI.roa
File: 69455wqPuYtoSwvs8wZsssp5DAI.roa (raw, json)
Hash identifier: P9Rt1CFw58V80iKTkumosy7k+0Ui2MIVgPsAX82/G1Q=
Subject key identifier: EB:DE:39:E7:0A:8F:B9:8B:68:4B:0B:EC:F3:06:6C:B2:CA:79:0C:02
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01899B56898EE5766D5B3E085A5A688AAF44
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/69455wqPuYtoSwvs8wZsssp5DAI.roa
Signing time: Fri 28 Jul 2023 07:11:26 +0000
ROA not before: Fri 28 Jul 2023 07:11:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:9b:56:89:8e:e5:76:6d:5b:3e:08:5a:5a:68:8a:af:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 28 07:11:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ebde39e70a8fb98b684b0becf3066cb2ca790c02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e3:11:65:46:2a:ca:c3:98:58:e1:1f:79:f0:
d7:77:9d:7d:73:ac:7f:b4:8f:d8:63:4c:51:8e:83:
fc:65:bd:ac:65:81:cc:11:52:51:89:8c:17:0d:6c:
57:66:1a:df:46:45:e5:31:60:dc:e9:e0:84:04:71:
f9:51:68:e5:5b:52:70:0b:75:52:c5:9b:4a:fa:a5:
d6:ff:68:c1:81:7c:9a:0d:c4:6d:b7:6b:45:13:94:
c5:29:6c:9f:df:56:0f:aa:d6:51:d0:e9:09:54:9a:
28:b6:88:f0:08:ab:df:41:1a:71:99:f1:19:c9:21:
1a:05:e5:06:0f:6d:b2:76:e1:50:79:f8:c7:67:f0:
48:0a:07:cb:e9:e9:b9:ca:14:13:f9:bb:20:97:9a:
27:ab:66:d6:e9:35:da:8d:fc:e4:b6:78:c6:e7:3d:
4b:80:24:76:b2:f8:26:b9:77:69:11:54:5b:2b:09:
98:7a:fa:05:b4:dc:70:60:15:1c:c3:dd:58:f4:01:
ff:0f:90:de:a8:69:e8:e2:db:95:be:1b:64:c2:bd:
6b:0c:d8:60:f7:9d:6c:6a:d3:dc:12:21:54:83:27:
45:3b:2b:dd:7e:ec:d5:ba:83:34:85:5c:b3:ae:c5:
b6:d9:c9:9e:f8:70:71:1b:98:31:7c:74:0a:4f:f7:
7b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:DE:39:E7:0A:8F:B9:8B:68:4B:0B:EC:F3:06:6C:B2:CA:79:0C:02
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/69455wqPuYtoSwvs8wZsssp5DAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b2:1d:2b:cc:62:08:28:87:57:98:a0:96:5f:72:50:53:9b:72:
ec:6f:ba:d9:98:4c:b0:63:23:0f:f1:c3:6b:5a:99:8d:f8:f9:
f8:c8:5c:cc:42:61:78:3c:ff:1e:a0:de:65:9a:30:06:d3:fc:
c9:9f:67:69:69:dd:49:32:63:3f:3a:1d:72:8d:04:64:c6:89:
66:d8:ee:8f:cd:55:46:a7:fb:0b:1d:74:66:4f:d7:11:33:01:
8a:db:0d:62:67:a5:fc:91:a0:54:cc:ba:50:eb:a9:2f:16:b8:
a7:7d:39:a9:48:23:ac:21:96:73:01:bc:d1:5a:c3:76:9e:36:
9c:77:de:f1:85:73:63:70:ed:6c:ac:a2:6b:d1:ee:bf:e1:d9:
3f:3e:74:21:94:83:06:b8:d2:0d:8f:56:ce:24:3b:dc:1d:fc:
b1:01:98:44:75:92:c6:62:82:8a:54:ad:da:39:7b:31:ca:a8:
61:f2:7a:bf:a7:c9:f3:74:ab:bc:00:7a:a3:8c:01:84:65:73:
c7:dc:93:96:d7:29:d9:7a:5c:3e:20:38:53:9d:96:ea:8e:69:
37:0a:00:24:8e:b5:9f:ff:ce:2e:b3:b5:c8:88:12:74:17:3b:
30:23:fb:97:c3:c6:58:d7:e3:a1:15:4f:4e:ce:3e:02:6f:b4:
75:20:81:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 02:46:23 2025 by rpki-client