Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7V0fx9PkVY6buMEBYtAkrQrLmbY.roa
File: 7V0fx9PkVY6buMEBYtAkrQrLmbY.roa (raw, json)
Hash identifier: s3wY95bFO1lD18NIzR812xNINwRCKnlAVxjcOtmaTA8=
Subject key identifier: ED:5D:1F:C7:D3:E4:55:8E:9B:B8:C1:01:62:D0:24:AD:0A:CB:99:B6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184EC7E2450B98797A8ECCD8E249CA7A941
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7V0fx9PkVY6buMEBYtAkrQrLmbY.roa
Signing time: Wed 07 Dec 2022 12:10:00 +0000
ROA not before: Wed 07 Dec 2022 12:10:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ec:7e:24:50:b9:87:97:a8:ec:cd:8e:24:9c:a7:a9:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 7 12:10:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ed5d1fc7d3e4558e9bb8c10162d024ad0acb99b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:07:b8:ec:eb:4d:2a:8d:c0:21:55:ea:23:ff:
f3:bb:de:33:41:41:52:ea:ac:2b:ea:d5:44:44:fb:
10:15:3e:8b:9a:b1:72:d5:b1:67:2f:61:f7:8c:e0:
1b:40:49:51:51:c9:ab:da:37:ab:2a:9b:ca:9a:40:
13:cd:e4:a9:78:da:c7:60:ee:d0:12:4c:55:9f:ab:
1b:56:65:79:5f:eb:2a:c8:c8:79:2f:95:d4:f8:4e:
56:c8:0e:f3:48:6b:ec:ec:de:89:96:0d:48:1c:c1:
e8:ba:ef:01:0d:5a:60:2c:00:ef:71:e4:7e:95:ff:
cd:14:61:2b:56:a2:d6:9e:bc:4f:01:0a:00:42:c7:
4c:a0:3b:51:ff:5d:03:8b:c5:3a:57:e4:fb:1d:d5:
b1:c8:78:2b:e5:56:f0:53:d2:1a:b5:ef:f6:65:2d:
46:c7:31:e5:1b:c2:82:ba:1a:73:27:3a:3d:af:9a:
cc:8b:1d:36:3d:e0:1e:a3:5a:84:3a:eb:83:ec:7c:
64:cf:d1:25:cb:88:af:f8:6a:93:ba:3c:03:9c:53:
f0:da:c2:81:39:9c:b4:ec:37:bb:a0:b0:8f:c4:69:
3a:04:af:7e:cd:34:b9:f5:21:2a:aa:1b:a0:8f:ca:
70:ce:28:33:68:06:1d:70:20:4d:b7:af:b7:a4:22:
91:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:5D:1F:C7:D3:E4:55:8E:9B:B8:C1:01:62:D0:24:AD:0A:CB:99:B6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7V0fx9PkVY6buMEBYtAkrQrLmbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9b:25:c2:28:34:f1:ed:09:00:b1:26:44:91:38:56:27:5f:18:
b7:96:22:e6:67:33:39:52:a7:ee:f2:c5:45:61:a3:99:0a:63:
6d:06:34:d8:33:f9:33:5f:cb:4b:82:f6:26:12:cd:90:d3:46:
6e:9c:71:4a:1f:18:cf:02:ca:72:6a:69:92:af:ec:d2:c2:e3:
25:b1:88:95:47:bc:94:0b:1c:70:c9:83:4d:9f:71:30:ef:f2:
77:4b:f3:c8:c6:1e:7a:35:c6:a2:52:60:99:bc:8b:e9:e6:53:
6c:8b:e0:e1:4b:f9:c5:fe:51:a9:6d:65:a4:74:c4:2c:2f:ae:
5c:8b:9f:3e:2b:0b:ed:24:ba:3d:31:bc:fe:cf:1c:6d:bc:e0:
a7:63:da:f8:a0:4f:1b:fb:ec:92:65:37:4c:71:e2:ca:36:03:
d1:2d:3d:a0:bf:ac:d3:6f:cc:e4:66:93:90:e5:e1:a8:cd:09:
59:d1:ea:46:3c:78:c4:4b:a2:e6:78:26:c6:3a:30:39:75:2b:
3b:14:97:43:1f:26:80:4b:08:aa:1d:d5:03:0a:96:49:a7:5d:
60:8e:72:01:c7:6a:8b:db:43:de:b9:72:27:84:d4:93:27:00:
ea:83:97:46:ac:ac:53:0c:7a:23:71:8a:4f:3f:d3:27:c7:81:
eb:af:62:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 15:03:57 2025 by rpki-client