Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AdDeAUjlatPlnaW-iKLPAc5am4k.roa
File: AdDeAUjlatPlnaW-iKLPAc5am4k.roa (raw, json)
Hash identifier: hzzBmhsgSnbzHridRvQgmHIIVCGetSVNCrRKXyIO4x8=
Subject key identifier: 01:D0:DE:01:48:E5:6A:D3:E5:9D:A5:BE:88:A2:CF:01:CE:5A:9B:89
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184E9EBE0065C8ECA7D5C94B0DB620B16C2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AdDeAUjlatPlnaW-iKLPAc5am4k.roa
Signing time: Wed 07 Dec 2022 00:11:00 +0000
ROA not before: Wed 07 Dec 2022 00:11:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e9:eb:e0:06:5c:8e:ca:7d:5c:94:b0:db:62:0b:16:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 7 00:11:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=01d0de0148e56ad3e59da5be88a2cf01ce5a9b89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5c:b6:e1:d8:db:71:0d:dd:b9:93:5f:35:dc:
a2:f4:ca:6a:68:1f:93:fb:5b:31:5c:4d:e8:0f:df:
f3:3a:46:67:df:ad:64:f0:07:fd:cd:86:27:bc:6a:
22:97:7b:17:f6:67:3e:26:b9:9a:ff:3e:67:de:c8:
0f:0a:27:a8:21:71:9c:47:78:a4:6b:28:6f:fa:04:
b9:1a:74:ad:be:b3:85:bd:c9:ef:22:a9:23:fd:da:
39:19:76:30:cb:53:28:e3:7b:fb:76:39:d9:40:a2:
fe:4f:b1:51:3f:49:91:7c:4e:46:b9:c2:57:16:78:
cb:b2:93:bb:8a:93:5d:e3:d3:e0:68:de:1f:a3:28:
9e:0d:6f:ba:bc:48:4e:2a:55:fc:9f:aa:71:f4:f8:
0c:64:01:9b:01:1b:b8:76:db:77:22:36:9d:fc:1d:
56:fa:50:2c:6b:dc:65:1c:31:17:5b:71:8b:bc:42:
25:db:d2:dd:7c:01:48:37:7a:07:f2:96:3d:f2:f8:
49:8e:1a:ec:1f:0d:ef:b0:24:48:1b:21:f4:5f:fc:
f9:4c:b9:95:f7:b5:62:23:92:21:fc:28:b9:6d:df:
7f:1f:f0:ab:25:23:04:7a:a8:90:1a:1b:d4:d9:c0:
d2:53:a5:af:04:fd:b9:a6:21:d2:77:f3:5e:47:a9:
9c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D0:DE:01:48:E5:6A:D3:E5:9D:A5:BE:88:A2:CF:01:CE:5A:9B:89
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AdDeAUjlatPlnaW-iKLPAc5am4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
09:d4:a5:e6:e5:3f:05:39:06:bb:ba:14:46:17:48:3c:a4:50:
83:71:3f:06:23:c5:0a:68:b3:1a:3e:15:29:3d:2d:e0:c1:be:
a1:ba:dd:9b:3f:06:d1:d0:4c:2f:ab:c6:21:8c:a2:67:9c:44:
47:e6:dd:1d:5f:01:ee:b8:38:d7:2b:ce:86:38:95:6d:e0:6f:
c5:18:3d:66:cf:f1:6f:50:3f:40:d4:50:f8:d9:c0:d8:8a:08:
d2:3f:42:1d:47:16:f1:39:b6:08:23:89:8d:9c:80:f0:2f:ee:
b7:9d:4f:96:5c:4c:b2:91:9e:1a:e3:60:75:fd:86:22:13:19:
16:3b:9c:00:2c:5f:7a:2d:12:fd:c2:6f:e4:62:25:64:8d:98:
7a:0f:c1:30:92:9c:a0:e2:25:ee:c7:e8:bd:52:6d:a8:91:8c:
e4:9e:d1:ad:b8:8f:b1:2e:18:2a:c7:55:e0:65:dd:d9:be:22:
11:d5:75:13:fb:5b:35:54:70:df:8c:21:75:c8:8a:22:8b:19:
58:80:de:98:17:dc:04:99:ed:39:f8:19:71:b7:02:76:c2:83:
88:cf:75:25:f2:00:ca:96:92:46:1f:2c:60:7e:67:73:a6:9f:
26:ba:2a:bf:57:d6:2a:49:98:bf:80:a2:88:4e:23:9f:19:f2:
85:d6:75:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 03:11:22 2025 by rpki-client