Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/E829CjeSMCGvnvBV3GH2eTDbaf0.roa
File: E829CjeSMCGvnvBV3GH2eTDbaf0.roa (raw, json)
Hash identifier: DF2YNDwCLudTs6RBpAYGkYIHk5RK7T/L02OcdCkRTPY=
Subject key identifier: 13:CD:BD:0A:37:92:30:21:AF:9E:F0:55:DC:61:F6:79:30:DB:69:FD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186150BA3D289AD51BA9BFBAE84ECD56869
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/E829CjeSMCGvnvBV3GH2eTDbaf0.roa
Signing time: Fri 03 Feb 2023 02:12:09 +0000
ROA not before: Fri 03 Feb 2023 02:12:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:15:0b:a3:d2:89:ad:51:ba:9b:fb:ae:84:ec:d5:68:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 3 02:12:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=13cdbd0a37923021af9ef055dc61f67930db69fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:14:ba:d9:71:16:56:03:6f:46:3a:a3:54:57:
23:c5:bd:06:9f:04:c1:74:7d:4a:f2:41:39:e3:4e:
a1:9e:97:6d:a4:55:9e:4d:12:14:fe:28:83:c8:df:
a8:4f:01:85:17:bf:a8:48:70:72:2b:a1:52:34:d1:
64:45:f3:0c:87:35:85:6f:ec:15:3b:f5:43:2c:36:
01:67:a0:0f:c5:95:d6:43:c3:77:db:8e:dc:71:fd:
70:37:87:9a:85:9c:3d:2a:60:6d:6a:89:8d:c9:cd:
c3:86:65:35:a1:a7:99:0d:bb:8d:89:db:0d:b6:0e:
a3:a7:ec:77:2b:0b:cd:f7:7f:39:63:43:6e:1a:61:
5b:e3:c5:00:7b:de:10:ce:65:ef:1d:d6:c7:4f:60:
46:17:c9:ad:a3:7c:b0:a2:93:ba:92:0e:f3:44:f6:
7c:25:aa:e6:76:13:e3:2e:6c:48:e4:f2:38:31:18:
50:be:bf:3e:51:89:cf:64:11:11:1c:a7:76:53:94:
b3:17:aa:56:33:8f:bf:22:9b:10:d2:fc:92:c5:e0:
e8:2d:81:27:b7:97:07:e7:d6:5a:46:58:af:2d:37:
3d:5b:04:c1:85:c8:bc:bf:27:41:17:ab:55:44:3f:
23:98:a4:93:95:c6:1c:bd:be:6f:d3:d4:16:ed:03:
fb:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:CD:BD:0A:37:92:30:21:AF:9E:F0:55:DC:61:F6:79:30:DB:69:FD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/E829CjeSMCGvnvBV3GH2eTDbaf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5a:a7:b1:98:4f:dd:bf:44:c6:ac:9a:bc:5c:05:d5:e1:00:ed:
93:8b:cf:09:fd:c2:ee:46:2b:60:b4:78:37:99:70:6f:21:54:
82:6c:39:7c:3c:da:68:b0:c1:9b:fd:33:b1:07:13:b8:d7:c3:
ec:59:75:a5:b8:e5:79:5f:81:ca:32:20:58:93:e0:71:eb:7e:
9b:16:37:de:31:42:df:08:eb:0f:12:2d:37:a2:da:59:16:53:
79:95:b4:3b:28:77:6c:7e:1e:77:f9:ae:09:bd:7b:fd:01:50:
ce:af:76:ae:9b:29:4a:67:6a:7c:54:96:4d:c9:0e:c6:94:51:
fd:fb:54:00:e8:f0:a8:a4:ca:0c:62:fe:83:8f:73:5d:b5:82:
c4:e7:30:ab:dc:18:3b:02:e9:9d:25:03:de:46:1d:8e:69:9d:
16:53:64:b7:4e:0d:e1:2a:fc:0b:11:db:05:7d:0d:9f:94:10:
62:28:3a:18:c7:2a:eb:09:89:c6:ae:31:70:38:ed:b0:8d:43:
5d:3f:d5:10:ae:46:5a:5d:c3:bd:f4:fb:1d:47:79:a1:a5:44:
bf:7c:95:51:3c:33:6b:41:02:4c:14:02:56:f4:b3:bc:22:26:
c3:07:01:f3:89:f2:82:5b:25:21:35:61:51:f1:4b:d2:1e:98:
8b:40:2e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:30:39 2025 by rpki-client