Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/95rkfs5Lvjjjsw3uo6M8HcDDX0E.roa
File: 95rkfs5Lvjjjsw3uo6M8HcDDX0E.roa (raw, json)
Hash identifier: U5e4ygdp5yUzW1gaFFBi1BjTjA0AgUMFPjCKPD9eYtE=
Subject key identifier: F7:9A:E4:7E:CE:4B:BE:38:E3:B3:0D:EE:A3:A3:3C:1D:C0:C3:5F:41
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 72684EE7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/95rkfs5Lvjjjsw3uo6M8HcDDX0E.roa
Signing time: Mon 14 Mar 2022 09:10:39 +0000
ROA not before: Mon 14 Mar 2022 09:10:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1919438567 (0x72684ee7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 14 09:10:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f79ae47ece4bbe38e3b30deea3a33c1dc0c35f41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bc:4d:05:5d:53:f9:eb:39:f1:49:59:67:60:
51:d9:5b:ce:c0:bd:fd:35:11:d0:60:1b:87:c6:3d:
59:7f:44:9a:50:50:4b:c8:c3:10:7e:89:8c:3d:e7:
97:ac:c3:76:06:b9:af:41:02:5a:78:96:21:de:3e:
5c:18:0f:88:80:57:43:1c:37:60:ca:a8:04:01:44:
fb:01:a9:89:84:80:b9:e8:3e:b6:0d:da:8a:3e:86:
ef:7f:aa:20:fb:5b:62:af:41:aa:42:dd:a6:34:5f:
7e:77:d7:d3:10:43:2d:1b:cd:43:3c:df:57:03:3d:
f2:41:60:f4:33:8c:fb:9f:5d:2c:51:ce:a9:cb:68:
f3:11:99:18:60:3b:0e:88:b2:29:76:4c:ee:87:f4:
3f:38:8c:62:aa:be:9e:b0:bf:ff:35:26:43:26:16:
f7:6c:b0:a2:18:64:3d:b6:2d:77:0c:ac:99:52:35:
44:ae:c0:8a:09:a9:9f:79:10:a7:66:68:f9:89:a6:
d2:c6:60:d1:4a:3c:1d:c3:20:61:a4:4a:7b:77:f7:
16:06:91:5a:bd:82:52:7a:bb:d2:7c:ee:d2:95:13:
8c:2f:5f:97:7f:db:da:68:58:c3:a6:65:27:e9:b9:
25:bd:e6:53:0d:11:80:c1:8d:c0:a3:a4:4f:1a:13:
bc:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:9A:E4:7E:CE:4B:BE:38:E3:B3:0D:EE:A3:A3:3C:1D:C0:C3:5F:41
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/95rkfs5Lvjjjsw3uo6M8HcDDX0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
34:2a:46:59:83:3e:ff:e0:27:37:0c:c1:2a:83:98:09:ed:12:
93:62:24:c4:65:e2:9c:c9:48:59:f5:4e:6e:9f:2b:83:53:4e:
91:97:1a:a0:ec:f5:29:a9:04:97:62:61:3f:2c:c4:1f:92:c8:
94:df:24:49:0f:49:50:ec:ba:5a:65:c9:2e:87:a3:b6:31:ea:
20:03:ed:eb:cd:e0:af:d5:2d:35:d8:9c:65:d6:02:5f:ea:41:
59:2d:eb:df:65:b9:06:80:65:2a:0b:44:41:67:d9:20:ff:6b:
c5:97:dd:cc:38:be:a7:56:c9:87:b2:13:d9:bc:42:61:8f:a8:
c4:52:74:0f:83:54:54:34:da:08:7c:de:97:e2:13:fb:fe:3f:
9e:a9:57:13:74:8a:3a:7e:84:67:84:a2:19:c6:13:0f:81:69:
49:cf:00:c8:57:d9:0d:9d:ab:f9:bb:21:bb:ad:a1:d0:74:24:
f0:77:4b:87:b1:6b:de:8c:bb:5e:cb:44:b5:82:68:e4:47:28:
3a:05:19:c4:d5:fe:85:ca:09:d0:27:67:84:66:7c:f1:fe:7a:
95:5f:48:ec:87:7b:a9:9a:61:4e:52:31:da:f9:ff:60:ad:ef:
8f:e5:2c:b7:a8:b5:ee:fc:42:cc:4a:86:f3:81:4c:dd:a9:d3:
5d:9a:f1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 22:01:42 2025 by rpki-client