Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/95C1fp4OGGJuE6kB26GArGo3cKI.roa
File: 95C1fp4OGGJuE6kB26GArGo3cKI.roa (raw, json)
Hash identifier: Av783y896N87OxvuGMZKp9igxq+vdrkT6vrQFBusQ6U=
Subject key identifier: F7:90:B5:7E:9E:0E:18:62:6E:13:A9:01:DB:A1:80:AC:6A:37:70:A2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01828E8A90B06B1D5A8B9FE3C68D61F27F6C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/95C1fp4OGGJuE6kB26GArGo3cKI.roa
Signing time: Thu 11 Aug 2022 20:13:41 +0000
ROA not before: Thu 11 Aug 2022 20:13:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:8e:8a:90:b0:6b:1d:5a:8b:9f:e3:c6:8d:61:f2:7f:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 11 20:13:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f790b57e9e0e18626e13a901dba180ac6a3770a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:81:d7:53:d6:f0:94:5a:04:cb:10:b6:41:bb:
cb:80:46:79:bb:77:c7:85:0f:70:ae:62:a0:2e:d7:
2d:6a:c0:12:d0:53:06:3e:56:65:8c:97:1e:9b:d2:
32:b5:e9:1a:e7:7d:81:ac:62:eb:f0:e6:be:00:ab:
a9:59:d0:f3:30:53:a6:0a:ad:51:89:cf:f4:2d:98:
89:4b:20:c7:57:5f:ea:86:6a:54:8e:6d:75:64:aa:
2d:d0:64:00:da:e2:13:9e:ef:16:c0:31:a2:b5:d1:
ad:76:ce:50:2c:5c:7a:e7:cd:7f:5e:3b:ca:ac:db:
d5:4e:cf:af:0f:c8:45:40:4d:d4:a2:62:35:77:e0:
17:21:ed:6f:1e:15:ba:05:c6:4d:92:ad:83:1c:5b:
96:9f:de:97:d5:68:fc:b4:47:6d:ef:16:29:a1:a2:
b5:e0:99:b0:b3:ac:5f:cb:96:64:26:9e:1d:33:cf:
51:3f:63:2d:e7:9a:3e:d9:84:79:2f:47:b2:0f:ea:
d2:2a:a1:89:22:3b:cf:b2:3f:88:8a:2d:16:01:e1:
5a:64:42:71:e5:a0:dc:51:6d:d9:a4:9e:b7:f4:bd:
f0:81:f8:0c:d6:37:0b:52:21:7e:ee:34:d3:87:34:
3f:9e:81:c1:c0:30:21:09:f3:92:1d:66:81:02:b9:
12:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:90:B5:7E:9E:0E:18:62:6E:13:A9:01:DB:A1:80:AC:6A:37:70:A2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/95C1fp4OGGJuE6kB26GArGo3cKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7b:2e:61:42:6d:aa:ff:3a:d3:2f:53:6f:90:be:48:bc:65:17:
87:04:44:e6:d7:34:64:11:5b:6b:26:ef:b8:c4:cb:93:7b:fd:
67:7c:d7:60:e0:45:0b:1c:66:df:2d:22:ea:9f:06:c2:da:b6:
f8:54:6d:95:ef:71:6b:73:22:3e:2b:86:bf:32:e0:39:2d:f8:
60:f7:e9:4e:3a:c6:1e:fd:8e:32:22:50:2b:6a:ef:e5:22:e5:
6b:de:29:be:84:26:f1:f3:b5:0e:9d:c4:4b:b3:2d:fd:db:2c:
eb:dd:f1:7c:d1:a7:76:d5:f8:07:4b:e6:65:04:1f:1f:bb:a4:
37:7c:e3:7f:79:db:72:49:5d:73:bb:4c:19:74:b2:14:85:49:
ad:55:d3:db:a3:a0:fe:1a:86:21:51:27:70:09:e2:50:dd:36:
77:57:35:d9:d3:e0:22:81:1e:36:1b:c6:79:58:9a:38:15:2a:
98:c6:e0:6e:0c:c9:13:56:59:b3:bf:a6:0d:89:8b:68:0d:cb:
f7:09:a3:fd:73:c6:9d:84:a6:1e:41:63:5a:96:6f:e3:12:be:
fc:29:cc:d6:cc:c1:b0:42:1b:84:91:ce:ce:0b:ac:ef:a5:08:
71:56:3e:ad:45:70:10:7e:b7:50:50:7b:1c:e2:42:4a:eb:9a:
bf:81:9f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:50:52 2025 by rpki-client