Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/753AMXYpSzaYLxdn1g6IpNItK9I.roa
File: 753AMXYpSzaYLxdn1g6IpNItK9I.roa (raw, json)
Hash identifier: mtHq2Xh1N+Gylywjhb6Z4GRAPOJdyLrV7egM3zX93tc=
Subject key identifier: EF:9D:C0:31:76:29:4B:36:98:2F:17:67:D6:0E:88:A4:D2:2D:2B:D2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183D4775C4009756C8AC933BD5691E7AC7D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/753AMXYpSzaYLxdn1g6IpNItK9I.roa
Signing time: Fri 14 Oct 2022 03:08:55 +0000
ROA not before: Fri 14 Oct 2022 03:08:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:183:d474:22f8/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d4:77:5c:40:09:75:6c:8a:c9:33:bd:56:91:e7:ac:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 14 03:08:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ef9dc03176294b36982f1767d60e88a4d22d2bd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:40:88:9e:42:df:3f:2f:87:36:6e:73:2b:a3:
a8:ab:41:77:d2:19:4f:2b:bb:9e:e5:56:1f:b9:fc:
f0:21:31:48:5d:d6:c9:f0:5f:40:d7:da:36:c6:0f:
fb:5d:8c:60:37:5f:45:ca:c9:b0:71:76:78:99:37:
3c:82:12:b8:14:6b:42:04:76:9e:14:e0:bd:41:00:
3f:78:60:94:93:7e:88:6c:b8:7d:b7:21:b8:9e:3e:
b6:ee:80:f6:5c:19:2d:7b:07:b2:46:62:18:71:12:
bd:44:d3:35:02:67:04:e7:46:6d:7c:a3:bb:6a:58:
b8:a0:d1:b3:29:2a:76:bb:fd:64:8a:75:93:0a:68:
2e:d9:51:2b:b8:d7:dd:16:ee:70:95:20:d7:29:51:
17:37:7e:89:07:7d:ff:99:2e:85:c3:1d:8d:a7:11:
ea:ae:72:e2:58:aa:41:7f:44:a4:40:5e:63:7e:5f:
8e:56:11:dc:ac:90:1c:83:bc:4e:72:20:02:1f:3d:
38:7c:1f:5d:d2:ce:f7:e5:b2:34:81:4f:94:d9:93:
8b:d4:1f:e5:95:aa:84:8c:f9:3a:b8:f1:b6:3b:0f:
6f:1c:f6:b7:95:99:a7:c8:21:61:4f:af:7a:22:1e:
e8:3d:ba:d7:d8:23:79:3f:9a:31:f7:ed:67:17:3f:
c1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:9D:C0:31:76:29:4B:36:98:2F:17:67:D6:0E:88:A4:D2:2D:2B:D2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/753AMXYpSzaYLxdn1g6IpNItK9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
66:29:a4:da:6e:f0:2c:1a:c5:ba:34:4d:28:bd:b1:64:30:c1:
f1:ec:04:fa:4c:46:b9:8d:9a:ad:20:19:4d:b1:a9:91:e8:59:
27:c8:f9:95:3e:b6:32:08:bc:cb:15:76:19:e5:32:0a:86:6c:
c2:90:5c:f7:49:bf:97:a7:62:91:a8:17:a8:bc:69:b3:cd:08:
7a:b6:d2:c9:7e:61:16:53:04:00:df:60:ef:75:16:0c:25:bb:
40:ec:9e:d5:22:88:8d:5f:68:8f:53:ee:cc:93:a9:9a:08:ce:
25:7a:d4:53:4a:7d:cb:98:f9:8a:f4:ef:b3:f2:0c:59:02:1a:
2a:d0:07:d4:3d:42:dc:9b:64:4f:08:a9:d5:5c:6d:6e:ff:2f:
a9:56:f2:4a:78:44:4d:d3:4f:d2:02:79:ef:4d:cc:41:aa:45:
85:42:fa:b7:1c:81:87:0c:1b:24:45:21:9c:9d:bc:0f:f4:57:
eb:01:81:b1:40:49:79:c8:ce:8c:2f:e7:3f:41:50:c1:c3:27:
58:c2:bf:7f:9a:64:9e:b0:bb:2d:45:7f:7a:bc:5d:16:99:e8:
fc:f8:dd:dc:02:cb:e9:18:05:5f:85:ed:1a:f2:7f:8a:57:9e:
68:b4:56:69:9c:e2:0d:31:1a:62:9a:b4:af:b3:dc:64:4f:bb:
8b:eb:84:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:04:56 2025 by rpki-client