Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/85lRsCPTxc_Q4_J2GR940S-O4hQ.roa
File: 85lRsCPTxc_Q4_J2GR940S-O4hQ.roa (raw, json)
Hash identifier: J/QrdZw80P3XOkAwzSTB27kphiIPNxltflmihTsvKj0=
Subject key identifier: F3:99:51:B0:23:D3:C5:CF:D0:E3:F2:76:19:1F:78:D1:2F:8E:E2:14
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018287ABDECEF447BB0BBFE9B6B0F86FDDC8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/85lRsCPTxc_Q4_J2GR940S-O4hQ.roa
Signing time: Wed 10 Aug 2022 12:12:44 +0000
ROA not before: Wed 10 Aug 2022 12:12:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:87:ab:de:ce:f4:47:bb:0b:bf:e9:b6:b0:f8:6f:dd:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 10 12:12:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f39951b023d3c5cfd0e3f276191f78d12f8ee214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:04:f8:77:fc:d7:d1:8c:8d:94:3b:18:6d:41:
b7:57:a3:ae:e3:b3:cb:db:dc:bc:09:09:f1:a7:13:
fd:82:6b:20:35:7c:04:46:37:9e:0c:22:7c:10:da:
b3:fe:b1:d7:61:de:64:0a:57:f8:8d:b3:9d:ee:b8:
66:f4:42:da:de:5a:67:b6:a3:f4:f8:6a:dc:1b:52:
cf:87:40:14:af:d4:89:b9:4a:fd:3c:39:fb:79:26:
bb:c8:1d:3e:1c:98:69:7a:05:59:e6:c5:6e:9b:e9:
0e:f7:4a:61:46:fb:e3:db:3e:a7:df:46:2d:81:c9:
6c:2c:48:2a:85:87:1b:f0:85:3d:7f:01:10:3a:df:
3c:86:f9:09:25:17:85:5d:ad:ac:78:a6:58:bb:bb:
40:98:44:2a:69:36:47:6d:74:1b:58:31:55:20:e6:
80:29:82:6f:59:34:3e:25:d1:4c:aa:97:6c:ed:47:
3b:4c:eb:23:f9:7a:97:d5:a4:bb:79:1a:65:db:b7:
4a:54:b4:9f:4b:68:9b:c0:b5:d4:e2:91:79:52:dd:
38:a8:99:8c:85:06:96:41:22:2b:2b:55:bb:80:be:
22:14:9a:b7:13:30:89:a2:31:e4:86:f0:d4:85:f0:
d7:81:92:48:ae:2a:ae:89:75:92:c7:b2:58:70:30:
f6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:99:51:B0:23:D3:C5:CF:D0:E3:F2:76:19:1F:78:D1:2F:8E:E2:14
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/85lRsCPTxc_Q4_J2GR940S-O4hQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
85:e8:53:36:f1:59:12:af:52:57:54:e3:1c:be:4c:4d:1c:7f:
f0:28:ae:2b:95:b4:9f:06:a8:c3:71:0d:24:44:f1:72:21:ac:
ea:e2:f5:b9:ac:90:df:f6:33:7e:c0:8f:38:9e:93:28:e2:20:
d5:8a:7e:79:a0:7b:4a:ef:3a:38:a9:f3:98:58:a6:78:72:ab:
0b:ed:b6:80:ca:99:c2:2f:e9:dd:e4:fe:be:d5:f3:c7:41:69:
50:56:da:50:06:3b:4a:bc:a6:f0:1c:ae:c8:2e:87:21:f4:5f:
e4:d3:36:57:83:dc:14:f8:63:47:1e:ec:4d:6f:6f:a0:3b:f2:
fd:4f:13:4f:46:97:1e:ed:af:a6:3e:20:8e:fc:f1:a5:37:02:
d1:a4:22:31:ba:d9:40:ba:f8:0c:25:8b:1a:c0:f2:8d:ff:b8:
e3:1f:bd:39:8f:62:86:a2:e4:00:7f:e1:bc:02:90:b0:66:65:
f3:31:d3:df:86:ed:83:9f:73:f9:43:4a:d8:1a:76:9b:00:14:
df:18:6a:7e:27:41:18:a1:a6:59:bf:d9:84:35:8a:20:e2:a1:
85:32:87:f1:30:eb:aa:99:2a:76:b7:67:6d:f2:3b:36:4b:95:
5f:d7:17:9b:22:55:6a:56:d7:1a:c8:ef:8f:cc:a9:ba:30:16:
a4:3e:08:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 16:14:49 2025 by rpki-client