Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AQLCMjsWUZyGs1s9rEKWlnjNfeE.roa
File: AQLCMjsWUZyGs1s9rEKWlnjNfeE.roa (raw, json)
Hash identifier: l4RfXQi9YEm9WdfPu1KEm/hN//iHeuGin25UajuNNaQ=
Subject key identifier: 01:02:C2:32:3B:16:51:9C:86:B3:5B:3D:AC:42:96:96:78:CD:7D:E1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 79343F83
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AQLCMjsWUZyGs1s9rEKWlnjNfeE.roa
Signing time: Thu 07 Apr 2022 09:13:44 +0000
ROA not before: Thu 07 Apr 2022 09:13:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2033467267 (0x79343f83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 7 09:13:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0102c2323b16519c86b35b3dac42969678cd7de1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:68:5b:e0:06:10:99:37:90:2e:ce:a6:c7:9f:
94:aa:bd:d1:04:63:05:2a:09:bc:be:fe:43:63:9b:
95:59:be:a8:64:45:24:fe:75:4a:c4:85:c3:a4:39:
15:58:b5:bc:c5:6d:eb:b5:30:f3:e1:39:78:50:13:
cd:00:9d:cf:61:8a:99:f5:5d:28:a4:c8:94:fa:d3:
2c:6e:0c:dd:d9:af:19:30:33:70:d6:7a:a3:6e:0f:
cc:c6:e6:44:89:97:f6:40:bf:13:a6:97:17:5a:59:
be:2c:1f:57:73:c6:42:42:54:44:6d:f6:fb:1d:e7:
35:b0:93:7f:99:ca:e2:33:3c:b7:28:2c:89:28:ba:
d0:d4:a6:33:da:7f:5b:84:a0:a7:f2:d0:7f:d0:dd:
f8:f2:bc:c4:78:7c:bd:17:1d:a0:ec:2c:df:18:a5:
a9:54:a2:28:33:28:34:ab:41:96:5f:04:27:cd:9c:
2c:41:e4:bf:a1:bc:85:74:5c:d7:2c:b0:fa:19:55:
53:59:40:bd:11:83:31:f9:25:52:29:27:fc:7c:24:
5f:7a:65:0f:3d:5c:a1:a0:0c:2a:c6:bd:7f:17:5d:
4a:f5:cd:c7:73:4f:70:87:31:43:c3:3b:b9:1e:9a:
52:33:0c:a6:a6:08:17:b6:07:ac:66:42:f3:0a:8d:
f3:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:02:C2:32:3B:16:51:9C:86:B3:5B:3D:AC:42:96:96:78:CD:7D:E1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AQLCMjsWUZyGs1s9rEKWlnjNfeE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2e:87:04:0c:a6:52:44:25:2c:b6:30:9d:9a:2b:2f:38:58:a9:
86:b3:cb:9e:32:f5:39:16:5c:a7:59:9d:a6:cb:b1:11:78:4b:
3d:f6:bb:f6:d5:2b:1b:3d:4d:eb:bb:20:9f:b0:f3:b7:92:b6:
01:d6:04:4b:97:92:a3:7b:9e:00:76:8b:ed:89:24:86:55:f2:
ce:69:2c:39:db:fc:1f:b6:af:aa:9f:51:a0:54:ca:02:be:5b:
d4:d2:4e:73:ba:dc:f5:75:67:fa:2f:19:6c:d7:79:2f:ad:bd:
c0:3e:12:4a:bd:56:6b:af:60:a6:a3:bf:86:fa:20:c5:fe:3b:
7f:4a:3b:05:74:86:d3:28:47:49:be:14:67:fd:1e:87:4e:8a:
79:c8:60:3f:47:53:8c:76:51:7d:20:6c:81:d5:7b:f3:68:26:
7c:d6:aa:da:70:3a:19:4c:d4:c8:51:a9:59:67:64:54:7e:26:
54:32:44:8f:31:c8:10:0a:59:16:01:36:c9:8e:a1:0f:c6:83:
3e:ad:7d:6b:ce:e9:6d:6a:54:ba:ec:cb:fd:98:1c:87:7f:b0:
3b:4f:11:3f:4f:63:a1:f5:4c:18:37:75:cb:df:7b:b6:dd:fb:
5a:90:ef:9f:40:96:77:f3:1b:95:b3:6d:3b:94:a9:ff:ce:01:
e6:64:8e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 17:58:50 2025 by rpki-client