Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/I5Gjk70k3GNsti8j6eemyjnZ7mo.roa
File: I5Gjk70k3GNsti8j6eemyjnZ7mo.roa (raw, json)
Hash identifier: l9cg2gws/3usZDsMTPRmcI9VhJ9Nn5jH3ZNElrTjHnM=
Subject key identifier: 23:91:A3:93:BD:24:DC:63:6C:B6:2F:23:E9:E7:A6:CA:39:D9:EE:6A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 781E9FF6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/I5Gjk70k3GNsti8j6eemyjnZ7mo.roa
Signing time: Sun 03 Apr 2022 15:11:35 +0000
ROA not before: Sun 03 Apr 2022 15:11:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2015272950 (0x781e9ff6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 3 15:11:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2391a393bd24dc636cb62f23e9e7a6ca39d9ee6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:91:d6:0c:39:1f:61:41:f2:04:59:16:94:5a:
64:c8:61:75:53:3e:10:df:02:dc:f0:76:69:be:e1:
4f:2b:8c:1b:f2:f8:de:55:76:65:2a:68:30:85:24:
49:a3:5b:b5:46:a3:ac:a4:6a:89:73:d5:76:91:29:
bb:b4:a1:39:5b:ed:99:de:5d:58:12:7d:1e:c5:ae:
2b:21:5b:8b:64:15:52:dc:dc:98:58:ff:18:f8:10:
c0:21:56:50:37:29:d8:fe:9f:8c:b5:a4:09:00:01:
bd:69:49:54:82:00:33:b1:c8:04:7c:c8:68:9d:07:
a2:ce:79:fd:0c:72:b3:06:c7:8a:dc:a6:ce:04:a3:
70:a8:ec:f4:eb:3c:ad:08:45:97:97:86:63:9a:a6:
b3:af:d7:99:40:43:6d:fd:9c:13:c9:ba:e8:61:3a:
54:be:a6:8d:79:d0:9d:da:f5:62:38:10:73:3c:a8:
ab:df:22:e8:a3:41:ed:00:c0:08:a5:60:0d:87:10:
f5:94:b4:49:96:9c:f2:f2:7a:96:63:f1:16:33:2b:
0b:49:01:35:ea:33:39:11:b1:b0:d2:d5:89:6c:76:
81:60:49:63:20:03:92:7b:49:64:01:8a:f4:47:2a:
24:52:3a:cd:0c:ce:f1:c7:b9:6c:bf:40:7e:ef:46:
b3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:91:A3:93:BD:24:DC:63:6C:B6:2F:23:E9:E7:A6:CA:39:D9:EE:6A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/I5Gjk70k3GNsti8j6eemyjnZ7mo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a5:8e:12:4f:71:40:1e:ae:e0:b8:dc:7a:bf:23:76:d1:e9:b8:
7e:ae:19:4a:8e:e1:60:38:03:bc:94:c2:4c:ae:cb:fc:90:6f:
57:24:f0:af:25:de:ed:65:74:f4:e8:12:c1:8f:90:a8:65:1e:
a8:04:74:2b:0b:16:07:0b:6e:b6:67:e3:86:42:d7:1c:8c:66:
76:cb:56:8e:7f:b8:96:fd:73:81:b5:0b:1f:de:40:ec:88:a6:
b5:7b:ae:ef:64:d7:83:24:83:7a:d2:47:56:1f:bc:3c:c1:7b:
80:0c:2b:c5:5e:d0:9b:1d:f1:24:38:05:7f:d2:3b:d9:a8:e5:
c3:52:2d:40:1b:cd:ea:8d:76:84:fb:75:97:5f:f4:c1:85:f4:
b5:44:eb:14:25:db:00:89:69:6d:32:2d:62:89:50:7e:39:98:
73:1c:29:03:03:1e:24:6e:74:97:c8:34:dc:08:94:ef:e2:fb:
4b:34:3b:d0:99:b5:a9:30:02:d1:a1:97:b2:fd:0b:6f:e0:a6:
9b:45:58:86:6a:49:3b:ae:29:17:eb:aa:a8:90:1b:17:77:ca:
4b:70:b2:45:6c:ec:14:87:24:8b:1f:9b:63:0e:f4:ce:54:59:
aa:9d:eb:78:cc:26:43:85:72:bb:4b:17:cb:27:e5:88:5a:61:
d5:de:c5:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 13:54:28 2025 by rpki-client