Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/As4n4pOMJ9SBMN8eSZ8GehiPFOY.roa
File: As4n4pOMJ9SBMN8eSZ8GehiPFOY.roa (raw, json)
Hash identifier: 6TNqzf/DJmEUnGhbfFmNZWtcXTUowzwMyaSB9X49KhM=
Subject key identifier: 02:CE:27:E2:93:8C:27:D4:81:30:DF:1E:49:9F:06:7A:18:8F:14:E6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185D32C0CB993D742DA272A4A3A86E29B26
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/As4n4pOMJ9SBMN8eSZ8GehiPFOY.roa
Signing time: Sat 21 Jan 2023 07:12:37 +0000
ROA not before: Sat 21 Jan 2023 07:12:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:d3:2c:0c:b9:93:d7:42:da:27:2a:4a:3a:86:e2:9b:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 21 07:12:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=02ce27e2938c27d48130df1e499f067a188f14e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6e:9c:eb:c6:42:79:fb:12:be:e5:bb:4f:6f:
6e:76:6c:31:de:f1:3d:13:23:df:ba:f4:a5:20:8a:
cc:4f:57:d0:be:91:65:9b:f2:c9:a6:ff:a2:5e:6e:
04:1a:1f:e3:66:39:cc:d9:3e:21:b5:08:73:89:e4:
4a:fe:cb:a2:c9:3f:65:79:bb:c7:de:72:0d:80:96:
41:53:03:f4:a9:cd:60:c1:ad:75:14:8a:d2:7d:60:
1b:20:76:e6:62:2c:ec:b4:08:2b:d7:4c:33:4c:e1:
42:34:05:a8:15:95:62:2a:ba:2c:13:ab:d7:55:b3:
f1:40:35:dd:f3:3e:f5:0f:74:05:70:47:b2:29:70:
cb:3a:73:e6:68:c8:8f:d0:a1:22:04:45:98:75:25:
83:a3:97:24:aa:32:fd:f1:c0:fb:df:79:2d:82:e7:
f5:9b:92:3f:e7:6d:f5:93:bd:dd:ca:f3:f3:0c:eb:
a5:81:cd:04:c2:d5:2f:8e:ec:0a:ab:22:85:73:ac:
bf:de:29:8f:f1:61:da:d7:45:f5:eb:89:3d:f7:83:
08:6f:d7:7b:22:3b:97:3a:30:64:3f:8a:29:6b:d4:
12:a4:50:b3:50:59:5c:56:88:6e:2b:7f:a6:d8:3e:
ed:5a:e0:18:f7:5e:b1:51:73:07:2c:c3:fb:e6:18:
54:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:CE:27:E2:93:8C:27:D4:81:30:DF:1E:49:9F:06:7A:18:8F:14:E6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/As4n4pOMJ9SBMN8eSZ8GehiPFOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
80:77:8e:35:65:9a:43:cc:00:07:b5:25:28:eb:30:ba:76:c0:
44:07:cf:bc:95:31:c8:23:48:79:97:94:32:17:10:c6:23:d0:
dc:a5:e7:5c:40:4e:3c:45:61:09:cd:53:15:9f:66:ae:d8:2e:
b0:cb:92:98:8e:b1:45:02:f5:6d:1d:7e:c8:93:2c:f4:47:8a:
56:29:7a:f0:9d:5e:67:1d:d2:89:b3:bc:ad:c0:19:c2:5f:45:
2b:e1:c6:e7:f4:27:38:4c:36:54:1f:81:8b:63:e6:0b:d3:ff:
4b:d7:8f:a5:ed:62:f7:39:c6:a0:ed:be:3e:ac:7c:a1:46:66:
ad:f3:f8:2a:5b:da:f6:95:c9:ce:2d:7f:84:77:33:f5:00:16:
db:fd:63:de:a6:8a:8a:45:6d:31:8e:00:ab:d4:39:ff:db:92:
b7:e2:73:e0:a7:53:fc:41:89:a2:e3:95:86:b3:a9:21:2d:f3:
f8:55:e4:b4:88:a0:60:96:b8:36:53:ce:d4:e0:82:8d:22:ad:
fd:66:3e:82:9b:53:9a:93:cd:dc:1c:16:ac:44:00:1e:74:61:
c8:4a:47:a8:1a:05:ae:04:d9:3e:e9:61:b9:21:a6:07:bd:cf:
c2:2d:a7:f7:80:b9:74:29:a0:43:fa:33:77:fb:a6:ec:b4:f0:
5a:56:b1:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:12:30 2025 by rpki-client