Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9E8D4Xnt2afd3B9BKEilvWh23vk.roa
File: 9E8D4Xnt2afd3B9BKEilvWh23vk.roa (raw, json)
Hash identifier: +EQc3OAK9Rkn80QaCOE133Ma8SUXI1zUV3f/kOUdH4w=
Subject key identifier: F4:4F:03:E1:79:ED:D9:A7:DD:DC:1F:41:28:48:A5:BD:68:76:DE:F9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185161F624A7EF20F661030FF4BACB94AFD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9E8D4Xnt2afd3B9BKEilvWh23vk.roa
Signing time: Thu 15 Dec 2022 14:10:33 +0000
ROA not before: Thu 15 Dec 2022 14:10:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:16:1f:62:4a:7e:f2:0f:66:10:30:ff:4b:ac:b9:4a:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 15 14:10:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f44f03e179edd9a7dddc1f412848a5bd6876def9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:07:41:fe:c3:2a:25:94:0d:cd:ba:d3:1c:e9:
17:66:7c:6f:a5:eb:71:6f:51:0d:f4:82:9d:4c:fd:
db:44:83:87:16:27:8c:7f:7a:72:e9:f4:12:85:22:
78:22:b7:20:0d:df:42:56:1a:55:8e:2c:6e:6e:eb:
d5:40:6d:65:14:96:63:ee:c9:42:ba:b4:f2:85:16:
b8:12:6d:34:f6:57:3d:32:60:8b:eb:80:a0:e5:c7:
53:a8:72:15:a9:e0:ff:ef:3f:bc:33:c6:f2:87:a4:
f9:64:44:28:f6:56:78:a1:11:8d:09:3a:11:46:fc:
fc:e7:67:a2:2f:6a:09:c5:8e:1a:aa:2e:c3:3c:35:
8c:ea:fc:d8:fa:b6:64:ba:99:7d:f7:c8:29:e8:9d:
3d:44:60:db:12:64:9b:00:c1:a4:b7:a4:b5:99:4b:
c2:f4:ee:3a:ca:56:d6:81:dc:b9:b7:51:c1:18:d0:
25:39:d6:d9:6d:37:8d:ee:d6:aa:47:81:31:d8:9a:
76:7d:df:1d:64:e1:a8:f1:47:f4:82:d5:03:07:e9:
ec:a2:c7:01:a7:ed:ff:7a:e5:63:02:f3:f0:1b:a6:
b5:6e:76:64:75:73:cc:d5:d2:22:70:88:c0:14:9c:
aa:da:19:eb:ae:ae:ed:e9:4d:d3:17:5d:5b:d3:52:
50:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:4F:03:E1:79:ED:D9:A7:DD:DC:1F:41:28:48:A5:BD:68:76:DE:F9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9E8D4Xnt2afd3B9BKEilvWh23vk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b0:26:08:c8:0a:5f:ed:a4:eb:4d:75:8e:b1:bb:cc:00:48:71:
3c:d1:05:33:a1:bd:0f:c1:7d:09:f2:4a:17:42:1c:83:89:3e:
4e:3e:fa:52:d6:03:f7:c3:3c:a0:32:14:53:9e:db:5d:54:02:
26:8a:85:27:6b:81:5d:d8:8b:20:d7:d3:84:12:27:41:ad:76:
3f:54:ab:75:86:7a:1c:c3:37:5c:5f:b4:3c:51:12:e4:ce:99:
e9:aa:0a:36:04:e3:e6:e7:f0:cc:ce:a0:82:ed:2e:95:e5:c3:
5f:3f:af:dd:cb:cc:32:ec:fe:d9:91:37:f1:1b:93:cd:30:e1:
aa:c5:34:e2:7d:77:f4:73:c4:cc:33:36:f7:5f:21:89:fd:f4:
fa:5c:c4:ab:ee:35:2f:90:ff:3b:0e:b9:7a:f6:0f:fd:73:29:
1e:db:8b:54:ee:97:e1:65:35:09:e7:4a:06:2a:a0:15:be:ac:
b7:57:6b:cf:d0:3a:d6:b5:d5:12:de:86:c3:dd:83:9c:61:bc:
d3:ea:67:03:a7:53:50:e4:38:9b:bc:e8:71:54:7e:91:61:1e:
db:b3:d8:d6:a5:98:62:4d:1f:11:50:c8:6f:f1:b6:e4:77:f0:
bd:e0:59:71:a4:56:d2:b1:de:7f:79:28:8b:69:4d:9d:77:0b:
8d:8e:a4:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 09:50:53 2025 by rpki-client