Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/700oHnox9i342XXUIPfgoZWwAUo.roa
File: 700oHnox9i342XXUIPfgoZWwAUo.roa (raw, json)
Hash identifier: 6FD3+PvPobD8n8HBj/fHh/HU5Pa4UcM5GBdqxuCSO04=
Subject key identifier: EF:4D:28:1E:7A:31:F6:2D:F8:D9:75:D4:20:F7:E0:A1:95:B0:01:4A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01863B728D4F6AFFEC251A66C2FE38A21FBA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/700oHnox9i342XXUIPfgoZWwAUo.roa
Signing time: Fri 10 Feb 2023 13:10:08 +0000
ROA not before: Fri 10 Feb 2023 13:10:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:3b:72:8d:4f:6a:ff:ec:25:1a:66:c2:fe:38:a2:1f:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 10 13:10:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef4d281e7a31f62df8d975d420f7e0a195b0014a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:cd:b7:f5:eb:b8:9e:1d:47:6f:dd:3a:29:c8:
30:c2:2b:52:48:95:c5:5d:c5:44:58:88:4c:6b:42:
3f:f1:48:03:8e:4a:6f:b3:66:e5:ab:de:3b:34:53:
8c:bf:b9:2a:71:e1:9b:a3:1f:00:01:53:9f:9e:f2:
6a:19:b2:06:db:69:d9:36:98:ba:96:67:a9:4f:74:
5f:2e:ff:d9:d0:18:da:6e:ad:05:24:24:70:3b:5a:
aa:76:f5:e8:98:71:b8:03:06:31:ea:61:9b:e4:a6:
a7:c0:b0:40:d1:37:f5:5b:b3:d1:af:da:18:3c:d5:
e5:a2:a1:ba:58:53:dd:50:62:17:f5:0b:3a:18:27:
bb:de:c2:06:f1:27:d2:c0:f1:13:e0:c3:09:06:13:
85:b0:f3:97:0c:4f:6a:a9:eb:f8:93:63:fa:63:63:
2b:77:8d:5a:84:ce:14:fa:a5:c7:c7:b4:e0:0e:2c:
05:52:23:de:24:70:f6:77:cc:af:03:d8:91:fd:3b:
1e:b0:af:c3:c5:b2:96:ea:9a:04:88:98:7e:42:a0:
f4:6e:e5:50:7d:1c:0a:26:80:61:66:ab:ac:bf:e4:
5c:8d:67:f2:1c:97:af:ce:7a:1e:ba:0e:22:c5:0b:
e2:7c:fa:de:d5:14:5c:3e:f3:bf:5f:7d:41:21:f3:
29:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:4D:28:1E:7A:31:F6:2D:F8:D9:75:D4:20:F7:E0:A1:95:B0:01:4A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/700oHnox9i342XXUIPfgoZWwAUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4b:5f:0b:be:97:fb:7a:4d:ea:9d:e7:13:ef:02:88:47:67:a5:
b4:72:91:15:ee:0a:13:8f:0f:16:d9:a3:d9:f0:59:41:af:10:
d6:61:c6:e8:f7:fe:b3:de:0b:bf:48:cf:68:55:9f:2c:16:c3:
12:a4:88:7c:c9:70:80:11:22:6d:aa:c2:7e:57:34:37:9b:7e:
44:4b:51:9f:36:3a:93:4b:53:e6:8b:36:11:7f:e9:8e:3b:6c:
05:58:14:a6:cd:e7:e6:2e:92:45:5d:73:08:c6:e2:9a:be:2d:
1d:39:93:67:67:76:75:e8:75:05:2e:87:03:f1:c3:79:73:3f:
5a:3c:83:9a:ec:45:51:5b:a3:ab:59:5a:9b:36:b3:06:90:c2:
36:10:31:fe:d1:02:46:57:c8:31:12:44:52:78:b4:be:e1:6e:
d1:9a:5c:1f:a4:61:7f:3b:32:96:95:76:07:8b:44:54:5c:96:
a1:22:cf:6a:76:f7:5b:81:2c:5c:4d:a2:2e:4f:d3:95:53:c1:
c2:1b:2f:40:b5:7c:95:81:b8:53:a3:31:b1:be:0a:64:be:2d:
62:f6:b7:fd:cf:2b:9e:64:5d:8e:11:05:10:fc:8b:08:0c:9e:
83:69:5a:7a:09:6f:0e:39:2b:2d:ce:fe:80:f6:17:b7:bf:4e:
83:aa:4f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 04:05:56 2025 by rpki-client