Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7uWvDDgUgi6I2koS9i7eln4XwPI.roa
File: 7uWvDDgUgi6I2koS9i7eln4XwPI.roa (raw, json)
Hash identifier: KNWLzbm3LTxtMYyVqqI2sl2RVGStxzsHv/ueWwziZ+4=
Subject key identifier: EE:E5:AF:0C:38:14:82:2E:88:DA:4A:12:F6:2E:DE:96:7E:17:C0:F2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018533BB39E4558420252633019A6AFCD377
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7uWvDDgUgi6I2koS9i7eln4XwPI.roa
Signing time: Wed 21 Dec 2022 08:09:46 +0000
ROA not before: Wed 21 Dec 2022 08:09:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:33:bb:39:e4:55:84:20:25:26:33:01:9a:6a:fc:d3:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 21 08:09:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eee5af0c3814822e88da4a12f62ede967e17c0f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:4b:e6:62:1c:c3:be:fb:fa:db:42:c4:74:24:
26:30:96:78:c0:89:a1:5e:52:eb:59:bd:fd:7a:87:
fa:1d:97:00:fd:f6:b3:89:93:b7:06:47:7c:51:47:
68:16:b9:0c:90:79:f6:44:3c:15:8e:88:12:0c:74:
bd:34:62:31:a4:da:e9:70:ff:f8:69:7d:b6:a4:77:
51:27:d5:5e:c7:75:5e:b1:5b:86:38:c3:79:00:33:
98:04:74:1f:43:a4:7a:80:db:cc:9e:26:81:99:66:
e7:16:e6:c9:d6:62:dc:76:7c:a4:2c:8d:62:b4:e5:
e2:c0:ee:06:ec:96:0a:71:37:b6:00:16:a8:a9:ff:
ea:b9:0d:d7:71:b3:fa:c3:1f:43:11:0e:c6:20:89:
18:c7:08:12:32:0d:3a:29:d7:b8:be:2e:1a:4e:af:
e2:84:10:31:de:0e:1b:f9:8f:f1:63:5d:fb:15:4c:
9e:88:84:46:ad:3a:a8:c5:4a:4c:95:c9:b9:79:a2:
87:18:15:8f:2f:e9:ce:d9:55:72:14:24:67:e8:4f:
b4:ce:35:f5:95:53:f2:c9:a0:ce:03:a0:08:d8:b1:
33:ae:be:30:1b:92:a3:2a:fb:4b:b3:01:2a:ce:5d:
58:cb:56:ad:d4:5b:fa:6d:67:9d:d1:73:68:65:a4:
6b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E5:AF:0C:38:14:82:2E:88:DA:4A:12:F6:2E:DE:96:7E:17:C0:F2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7uWvDDgUgi6I2koS9i7eln4XwPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
34:7c:1e:d9:94:ca:5c:99:0d:41:7c:80:0e:9d:9b:63:99:df:
60:30:ab:6d:63:fd:fe:ce:e1:d6:e2:55:70:b0:1b:09:6f:a9:
57:49:3b:7a:b9:8a:a7:82:67:c3:bf:be:21:27:ef:1d:37:07:
e1:46:da:ca:99:4c:88:20:aa:53:41:96:7d:07:30:61:1b:61:
ce:89:44:41:25:0b:dc:ad:b8:ad:c2:c1:5f:8d:3e:28:62:2e:
a4:a3:5a:96:de:de:65:45:66:0b:e3:24:78:e7:75:f8:b7:74:
f5:fb:20:84:9d:fe:3e:3f:fc:68:6d:45:51:a7:72:e3:3d:30:
21:96:a1:76:a6:18:f6:99:ae:49:4d:83:71:67:e3:d4:47:d0:
af:f4:29:24:99:45:68:4a:92:01:7f:70:ce:27:92:fd:8f:bc:
f1:23:29:92:7a:c4:96:fd:10:b3:af:3e:c4:ff:51:82:e0:c1:
f9:32:d7:11:92:59:4d:9f:89:fd:4a:2d:5e:9b:2c:5e:12:ad:
c8:80:cc:72:01:c4:58:e9:38:60:7c:dc:56:b6:fe:0e:e0:34:
5f:73:f5:02:0f:9e:64:e9:69:1c:15:1b:a8:1d:81:66:17:76:
c1:07:3e:55:c3:42:99:c4:5c:e3:2b:8c:61:29:e9:0c:c1:72:
2e:25:85:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:29:59 2025 by rpki-client