Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FiF07lIiUf2gDIYAlOHZLaoJvwo.roa
File: FiF07lIiUf2gDIYAlOHZLaoJvwo.roa (raw, json)
Hash identifier: E3K+m5KPGN6Knrbz9hpIj32AtcN/xxAwZt3gRUBn97I=
Subject key identifier: 16:21:74:EE:52:22:51:FD:A0:0C:86:00:94:E1:D9:2D:AA:09:BF:0A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A2993B0C01EAD405D305F403C951B3140
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FiF07lIiUf2gDIYAlOHZLaoJvwo.roa
Signing time: Thu 24 Aug 2023 22:04:19 +0000
ROA not before: Thu 24 Aug 2023 22:04:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:2993:8d5f/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:29:93:b0:c0:1e:ad:40:5d:30:5f:40:3c:95:1b:31:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 24 22:04:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=162174ee522251fda00c860094e1d92daa09bf0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:97:5f:e6:b9:a9:c3:70:70:b2:07:4a:e3:f1:
e0:b8:c4:76:a1:9b:37:5d:b6:e9:8b:11:51:88:04:
a0:ee:44:92:2c:78:3f:95:56:ce:43:ce:43:3d:18:
e4:1a:8a:e0:21:68:8b:68:93:01:d1:24:b4:4c:d3:
e7:95:f8:af:99:76:6f:44:99:41:c2:84:78:8d:64:
6a:64:cc:c0:c8:12:84:e7:b0:52:84:7a:9a:aa:b1:
f3:3b:8e:45:27:9f:39:05:76:4a:fd:59:a6:14:d5:
70:20:88:98:1b:b5:29:24:dd:ea:c9:a8:3a:3e:70:
a8:d4:b9:2d:d4:24:60:49:e1:ad:96:16:2c:8e:cb:
80:5e:97:f7:f6:39:66:2f:7a:8d:92:80:f6:ea:d4:
05:07:ad:92:70:2a:34:5b:1b:fe:6e:d3:1f:32:3e:
0b:de:58:97:c5:fa:fd:bc:95:75:ff:c9:19:13:16:
a8:e7:5f:c1:77:a0:16:01:8d:08:57:37:73:62:01:
d6:a7:b3:b5:bb:c5:f7:5f:30:de:bd:17:61:93:4c:
8e:7e:1a:ec:ab:3d:15:18:21:d5:4c:a0:34:d2:52:
42:ce:d1:d0:ad:16:64:c8:6d:3f:45:19:34:20:a7:
b4:ce:bd:6c:93:6b:dd:6b:ef:52:e6:4d:04:02:37:
08:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:21:74:EE:52:22:51:FD:A0:0C:86:00:94:E1:D9:2D:AA:09:BF:0A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FiF07lIiUf2gDIYAlOHZLaoJvwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
48:c1:a6:75:ce:1d:d9:f9:e3:d7:16:4d:8b:03:71:37:a6:1c:
15:28:d8:ba:d8:71:f7:35:6d:5b:cc:85:3d:d9:05:2b:47:d9:
fe:ae:02:73:8d:17:0f:15:71:05:d2:a5:5a:30:b8:7e:ba:89:
f6:0c:43:ae:15:65:33:c0:11:39:15:ed:5e:38:99:83:88:b2:
72:2e:d4:90:cc:ae:c4:65:20:27:87:0f:e9:85:b6:90:1a:84:
d8:38:bf:7e:2c:ad:87:f5:58:bc:1e:99:43:a0:ad:21:28:53:
86:2c:05:9a:80:13:39:69:0a:19:5b:9f:4f:93:cd:8a:9c:a7:
e2:27:fb:99:d5:cc:c3:d2:6c:3b:d5:57:41:db:e5:09:68:72:
36:93:85:91:08:53:70:22:f3:3c:4d:a2:1f:1a:d3:c0:25:74:
13:e5:37:59:8c:3d:b8:69:69:e4:39:6e:ad:30:09:f8:f5:3b:
e7:72:01:eb:64:5b:7c:0a:99:d4:9c:04:ef:92:a0:99:f2:c8:
ad:ca:23:eb:a1:ee:a6:7b:6d:ef:4e:0a:ab:9e:ed:9f:d8:27:
04:15:0a:93:b3:14:e8:85:9c:6f:3e:94:c1:29:f6:62:e7:32:
b6:8e:15:92:a1:61:90:e2:0d:08:75:6c:67:4d:a0:1c:b3:1a:
74:3f:d0:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 11:52:28 2025 by rpki-client