Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/I1CS8L4R-o3uPsPKz_vFezdBGFY.roa
File: I1CS8L4R-o3uPsPKz_vFezdBGFY.roa (raw, json)
Hash identifier: MOo9Zx8uu48qw42FFg5pQSJOxN3QYmjMOPgsEgVIFEw=
Subject key identifier: 23:50:92:F0:BE:11:FA:8D:EE:3E:C3:CA:CF:FB:C5:7B:37:41:18:56
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185203531FF1B4F42F38CDD80252582B04B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/I1CS8L4R-o3uPsPKz_vFezdBGFY.roa
Signing time: Sat 17 Dec 2022 13:10:35 +0000
ROA not before: Sat 17 Dec 2022 13:10:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:20:35:31:ff:1b:4f:42:f3:8c:dd:80:25:25:82:b0:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 17 13:10:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=235092f0be11fa8dee3ec3cacffbc57b37411856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5c:9d:8b:0f:e3:20:82:5f:7d:0c:15:42:de:
87:72:28:4c:64:71:69:c7:f0:6f:e0:40:22:32:cb:
de:15:a9:01:02:e6:46:14:de:af:c7:9e:f6:89:84:
6c:0c:91:6c:93:9a:90:22:19:55:bd:ca:8a:b8:ce:
1a:64:42:74:79:e4:dc:19:b0:6c:0e:8f:68:09:4a:
db:92:c5:c7:d1:13:c4:55:e1:ac:e3:4b:03:31:6d:
e6:d0:84:ab:1c:01:db:9c:ce:a1:92:6d:7e:54:77:
81:3b:55:c0:ec:f9:66:82:78:80:e2:f9:76:b8:73:
7e:98:a9:aa:27:c6:7f:a0:37:99:a8:e1:05:58:9a:
14:ac:a7:c7:58:01:9b:88:9d:05:a2:3d:03:b0:43:
4c:aa:1f:66:11:3e:72:65:18:76:c4:90:f8:91:c7:
f0:56:12:4e:e7:fe:5e:0c:b5:77:51:85:c1:b5:f4:
49:71:8e:c5:de:d5:f9:b5:3e:0d:fd:e4:4f:e4:e1:
39:7a:51:33:a7:6b:8a:9c:d0:17:c2:2e:0b:4f:37:
fb:2a:24:af:f1:50:e0:a7:1f:e2:3c:a9:a5:3b:17:
db:e3:31:d0:7a:6d:60:4c:27:a4:6b:1a:3c:e9:af:
52:d7:03:27:3c:f0:c4:71:bd:0e:4a:05:bb:49:60:
93:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:50:92:F0:BE:11:FA:8D:EE:3E:C3:CA:CF:FB:C5:7B:37:41:18:56
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/I1CS8L4R-o3uPsPKz_vFezdBGFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7f:f1:f6:74:18:10:e7:27:32:95:38:4d:ac:68:c3:d6:06:e0:
17:40:dc:c0:4d:68:e2:c3:e6:36:e7:48:1e:19:1a:31:6b:e9:
ff:0e:25:bf:37:4c:20:28:dd:a9:b6:7f:0e:9e:b4:e5:39:29:
e4:db:0b:ee:6f:70:16:36:bd:d7:a9:2d:a7:03:c4:3d:d2:bc:
8f:14:83:f0:81:78:be:5e:16:de:12:36:00:6a:37:a9:c2:8f:
ca:46:71:c2:a5:c7:d4:05:9b:1b:c7:d3:dc:3f:b8:f6:2e:bf:
d9:63:19:16:05:e3:9b:89:07:41:03:ea:8b:07:50:2d:e6:05:
26:b8:80:6a:c3:91:dd:d8:39:43:1e:d6:a9:24:3b:b3:52:73:
b3:df:a2:eb:9f:2f:79:54:ac:4f:96:f9:06:79:0d:0c:a0:5d:
dc:e5:f1:83:3c:a8:36:0e:45:50:62:bd:8d:59:eb:a9:15:bf:
41:fe:68:d1:ba:2b:52:58:37:68:f6:91:c0:16:78:45:77:f6:
3b:ba:01:09:fa:91:f4:46:aa:16:2f:b3:3e:50:e9:b8:e5:c9:
83:34:59:0a:f5:76:d6:92:bd:74:bd:8c:ef:9c:71:03:74:8e:
64:bf:37:fb:ce:db:59:2d:d9:4c:02:7e:ec:bd:b2:fc:d8:37:
0e:56:72:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:28:58 2025 by rpki-client