Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7WkxOWWTxAtYyzETTviRkPCN8Nw.roa
File: 7WkxOWWTxAtYyzETTviRkPCN8Nw.roa (raw, json)
Hash identifier: EnmntYiOjWkHRoVQUFAd1/Ag9yb9yt0fV8m10PLnoRE=
Subject key identifier: ED:69:31:39:65:93:C4:0B:58:CB:31:13:4E:F8:91:90:F0:8D:F0:DC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 84E5DEC2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7WkxOWWTxAtYyzETTviRkPCN8Nw.roa
Signing time: Tue 17 May 2022 17:11:28 +0000
ROA not before: Tue 17 May 2022 17:11:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:a810:6542/128 maxlen: 128
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2229657282 (0x84e5dec2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 17 17:11:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ed6931396593c40b58cb31134ef89190f08df0dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0c:f7:a4:6c:99:f4:52:7b:a2:a4:ed:c8:24:
6a:58:d3:42:c1:4e:ab:7d:8d:bf:84:d6:05:a0:e5:
8c:ec:bb:ab:b7:ad:30:50:25:47:66:0b:47:2c:b6:
b5:cd:d0:41:ed:20:72:10:fe:3d:90:0f:35:76:7d:
72:2d:ca:c9:30:7d:3c:26:1c:6d:e1:5f:ad:2f:8d:
5c:d7:dc:40:ea:c0:da:de:de:f6:60:81:b1:b2:ae:
28:14:8d:83:a2:4a:14:6d:53:ce:a7:37:fc:5e:09:
9d:be:26:c1:e9:d4:66:6c:24:8f:ee:be:d5:29:eb:
07:1e:1f:3b:f8:5b:7c:5b:b9:de:29:8b:eb:54:a5:
cd:24:e6:21:3e:2b:a2:5d:9e:bf:35:82:2a:20:df:
86:eb:07:b5:e7:72:0b:a1:84:d0:d2:9e:b1:e7:f1:
2f:1b:38:8c:d3:3e:43:87:76:b5:89:fc:43:1e:65:
e4:bd:fc:2c:b3:ac:b4:1c:af:2e:02:45:fe:d7:24:
77:c3:c0:97:02:12:12:ed:96:a0:72:05:a4:c0:09:
e1:6e:71:59:8e:b0:2b:50:49:aa:20:c2:78:3a:3d:
5b:5b:4f:19:76:a1:cf:16:c3:ff:5d:f5:bc:f7:77:
55:20:eb:42:25:a5:36:61:82:bc:73:83:ce:3b:e2:
9c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:69:31:39:65:93:C4:0B:58:CB:31:13:4E:F8:91:90:F0:8D:F0:DC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7WkxOWWTxAtYyzETTviRkPCN8Nw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
42:c3:b9:6a:a2:da:8d:90:36:9a:88:0e:32:39:67:42:b5:9a:
45:7e:e4:d8:ad:eb:f4:a9:5a:2b:a1:7e:f1:a0:37:07:d0:6f:
6b:84:f7:8b:64:c6:cb:b4:26:16:a5:7b:9e:c7:74:c1:f6:10:
3b:0d:56:36:7a:59:b4:70:13:b4:2f:6a:2e:0a:a6:03:1e:29:
da:f6:f4:ca:07:02:01:96:f9:84:c1:1b:38:c4:98:00:bb:e4:
79:81:69:52:f2:86:a8:ec:ed:3a:2e:04:9c:ba:11:e8:53:b9:
bd:ab:a2:18:2c:64:9c:57:c3:ed:91:9a:a8:9f:ea:2b:fe:fd:
00:6b:b1:42:de:69:f2:52:8a:16:4a:a0:7e:42:e8:97:28:3d:
96:aa:c9:ee:a2:db:ea:37:2e:53:c5:11:a2:ea:90:9a:23:15:
74:39:a1:36:90:c1:d2:c1:d7:14:e9:07:56:47:b7:60:e6:a7:
97:61:28:12:17:31:e4:5f:cf:e0:3a:99:42:ee:9d:e2:f9:ee:
11:3a:a4:89:ae:75:95:25:60:b8:bd:d1:cb:44:4c:fa:85:e6:
7d:4f:41:29:0a:3b:a7:3c:37:60:db:a0:21:70:cf:11:96:59:
5e:05:a3:c9:54:6b:c8:20:36:05:58:b8:49:fb:6e:9b:83:54:
ef:0b:54:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 09:38:23 2025 by rpki-client