Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ArvPdpzaTD9qkhXqv_TDVZlPHVw.roa
File: ArvPdpzaTD9qkhXqv_TDVZlPHVw.roa (raw, json)
Hash identifier: qTR2tna9PoJUqjF75fVdViiz32y5dKYw6fUfdu0fRX8=
Subject key identifier: 02:BB:CF:76:9C:DA:4C:3F:6A:92:15:EA:BF:F4:C3:55:99:4F:1D:5C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184FD3BB906F62D532E4D75A1D22E250BA6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ArvPdpzaTD9qkhXqv_TDVZlPHVw.roa
Signing time: Sat 10 Dec 2022 18:11:00 +0000
ROA not before: Sat 10 Dec 2022 18:11:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:fd:3b:b9:06:f6:2d:53:2e:4d:75:a1:d2:2e:25:0b:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 10 18:11:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=02bbcf769cda4c3f6a9215eabff4c355994f1d5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ba:db:60:66:8a:b6:5f:63:8c:b8:ea:00:ce:
43:90:cd:37:71:c9:fd:5e:a3:d5:33:65:2f:db:e5:
e6:00:a2:94:b7:a0:ef:ea:7f:4f:0e:74:75:c2:8b:
4b:fc:a3:f8:39:c9:b1:00:7a:c8:dd:d0:ae:dd:65:
99:56:42:57:f0:59:12:c6:91:f1:2d:c0:23:d4:cd:
8b:f0:c0:cd:8b:01:ef:e4:5f:4f:56:f4:16:05:04:
82:3b:b9:58:8a:4f:a4:e0:fa:80:55:34:f6:df:eb:
5e:59:4a:01:05:87:81:0b:06:a5:b5:15:8e:5e:e3:
f7:f1:e6:a3:97:6e:4b:7c:8b:6a:77:9e:c3:de:5b:
08:4e:99:6f:b7:45:5c:60:a7:3f:de:ea:2d:ca:20:
23:44:f8:4b:da:08:8b:e7:ee:dd:7a:57:6f:2d:59:
02:ad:cc:8b:9a:34:fb:ed:ac:1d:a9:15:40:9f:df:
e5:33:49:90:79:8a:15:bd:c9:e2:14:e2:9f:20:d1:
af:00:3a:ed:55:b2:18:c1:d9:b6:53:6c:82:10:90:
d0:fc:47:ec:5e:2d:83:c7:78:39:19:d5:a1:4e:66:
7f:bc:e2:a4:af:76:c6:81:39:28:a8:59:e2:ce:7b:
36:b7:fe:31:1e:9e:35:ff:43:82:76:20:9b:3e:e0:
30:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:BB:CF:76:9C:DA:4C:3F:6A:92:15:EA:BF:F4:C3:55:99:4F:1D:5C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ArvPdpzaTD9qkhXqv_TDVZlPHVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8a:6b:db:3c:6b:28:7f:ed:be:0e:99:07:07:36:31:2b:1a:0d:
f2:22:2c:cd:0a:3b:9c:b7:2e:a7:4b:cd:fb:0e:b4:f0:a2:f8:
89:b2:ea:d6:95:db:dd:cf:c6:30:5f:99:1f:45:bf:a7:0f:d8:
f5:ee:83:f3:3d:ff:ed:9e:84:7f:18:78:ce:98:39:b4:7f:f5:
40:08:2a:9d:6c:73:ea:5b:a9:c5:d7:0f:a9:ec:a2:b2:c8:b7:
9d:9a:45:f9:60:c5:71:1b:7b:63:83:65:11:ef:34:71:fc:41:
67:b6:4b:1f:8f:dc:dc:c8:c9:46:c4:79:ea:a1:5c:23:4d:ff:
8f:d0:1a:a9:3e:52:32:dc:bc:87:60:1d:04:f2:73:d6:63:bb:
ef:38:0b:63:6a:c0:35:d5:ba:5e:86:59:b4:79:35:cd:9b:90:
58:e4:f8:bb:39:c9:4a:80:0b:45:41:31:63:25:f7:58:e5:18:
62:21:79:9c:ec:9a:bc:c1:b1:ac:a4:f9:47:e9:5e:f1:52:39:
d8:01:23:39:00:1d:a1:41:85:8f:b4:f3:68:6f:e0:ba:50:86:
a4:66:32:cc:06:41:82:25:62:9e:0f:a9:ca:06:1c:35:d1:d8:
54:24:71:f7:74:53:12:38:53:ad:95:55:a6:60:01:36:9c:e7:
89:3b:fb:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 16:18:08 2025 by rpki-client