Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/F4J54nBGa28JAdlpS81z4ZIK1Nw.roa
File: F4J54nBGa28JAdlpS81z4ZIK1Nw.roa (raw, json)
Hash identifier: AOwGyrr3GQ4pah/bYRp8fAEWESnJtO7OnN04mtynUy8=
Subject key identifier: 17:82:79:E2:70:46:6B:6F:09:01:D9:69:4B:CD:73:E1:92:0A:D4:DC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A1B42EBE294B8753C1146FEF60EE29E5B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/F4J54nBGa28JAdlpS81z4ZIK1Nw.roa
Signing time: Tue 22 Aug 2023 03:21:25 +0000
ROA not before: Tue 22 Aug 2023 03:21:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:178d:7ed9/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:1b:42:eb:e2:94:b8:75:3c:11:46:fe:f6:0e:e2:9e:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 22 03:21:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=178279e270466b6f0901d9694bcd73e1920ad4dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f3:21:82:e4:1c:ab:f3:ef:d9:17:3d:6e:a6:
40:51:db:72:14:02:5a:0a:eb:af:45:64:78:73:b1:
f3:b1:b6:96:2c:56:2b:31:21:42:17:57:de:ed:74:
2b:d9:a8:10:d1:4f:0c:14:6a:51:d3:b1:ff:9e:4c:
f9:25:6a:f0:f4:2e:f0:a8:e4:1c:a9:bf:49:28:c4:
98:ef:ea:12:6c:0a:17:0d:cc:44:36:b4:dd:5d:df:
4b:fd:bc:1f:1c:64:a8:6e:2e:df:09:fc:4b:3a:11:
59:46:39:19:33:5a:aa:af:2e:d9:d0:ab:3a:73:5f:
09:e9:dd:31:95:b4:c2:56:33:4a:24:dd:d7:9e:8f:
a3:51:ff:b7:00:b4:5a:4d:ae:9d:bf:36:51:b9:f2:
88:22:d1:65:de:be:bb:b5:0a:76:db:3f:07:b6:f7:
4f:43:41:88:e8:05:b8:7d:5e:c2:60:a0:8e:ab:a0:
5d:7e:db:73:80:c8:01:95:c7:81:26:63:57:9f:d9:
56:db:ee:d9:17:9e:67:d8:6b:33:5a:bd:e2:50:e3:
c1:19:2b:bd:bf:9d:3d:99:66:b3:c8:b5:a8:f3:c3:
f3:95:9d:0f:e1:da:98:14:35:d4:8e:ce:7d:f9:59:
8a:a3:ac:06:ed:02:08:b4:87:9c:93:c1:48:eb:5d:
bc:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:82:79:E2:70:46:6B:6F:09:01:D9:69:4B:CD:73:E1:92:0A:D4:DC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/F4J54nBGa28JAdlpS81z4ZIK1Nw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
22:40:86:2f:27:c6:30:83:80:27:80:fb:3f:2e:33:93:94:7f:
dc:3e:9d:4d:20:60:f6:56:85:ba:c6:d7:7e:93:10:ed:8b:cc:
98:db:d3:45:9b:8c:42:95:66:49:3d:34:3d:cc:32:65:26:8f:
40:25:31:2c:a8:e6:2b:68:7f:be:24:92:8b:21:ab:a5:a2:a7:
4b:3e:ba:a8:f5:72:b8:b3:be:a0:58:f7:ed:72:c6:f8:94:00:
d7:b7:e8:68:e7:cf:a0:63:ae:53:af:ba:b0:f5:ab:e4:ea:d4:
60:0b:7e:4f:bc:9d:ae:fa:32:c3:d6:8d:99:f0:98:0a:29:e7:
ba:ab:18:84:53:e0:f0:38:43:f8:af:77:f9:82:71:fc:74:72:
de:71:ae:5d:85:f8:66:4d:ea:63:b1:9f:38:1b:1e:65:38:27:
2a:a9:7d:24:6c:6d:54:75:64:0a:69:41:77:ab:bc:af:5d:ea:
16:66:7f:8d:96:48:d5:eb:e4:d6:39:b6:ab:f3:94:be:5b:bb:
db:6f:2c:6a:35:6b:be:a3:fa:ba:25:3c:fd:3e:35:9d:50:28:
28:38:e9:ae:5f:fc:14:1f:2d:8a:a6:98:ea:ba:2c:c9:16:29:
7f:f0:0d:cb:2a:75:5b:62:8c:c6:91:e8:d2:d7:52:23:59:0d:
94:60:67:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 19:30:18 2025 by rpki-client