Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IGdRUTAJjdW84l9rtK-S-DV17Us.roa
File: IGdRUTAJjdW84l9rtK-S-DV17Us.roa (raw, json)
Hash identifier: dMnH56VZTS+QzlW7IARSHcLsPvutIUmt9zRZGCTMLKc=
Subject key identifier: 20:67:51:51:30:09:8D:D5:BC:E2:5F:6B:B4:AF:92:F8:35:75:ED:4B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018514D5CAAD545BF624FC450A2C9743C072
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IGdRUTAJjdW84l9rtK-S-DV17Us.roa
Signing time: Thu 15 Dec 2022 08:10:33 +0000
ROA not before: Thu 15 Dec 2022 08:10:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:14:d5:ca:ad:54:5b:f6:24:fc:45:0a:2c:97:43:c0:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 15 08:10:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2067515130098dd5bce25f6bb4af92f83575ed4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f6:b6:2e:a7:5b:b0:f8:ba:c3:b8:db:4c:e7:
54:69:dc:a5:7c:af:50:27:d0:f0:76:b9:4e:b2:c3:
3a:19:d0:68:53:f9:c5:64:3f:d2:b3:5a:68:f4:32:
29:05:e8:2e:42:8d:2d:6f:15:7e:dd:a5:ef:34:83:
88:a4:f8:08:1f:d9:44:0f:3b:77:dd:a7:e1:99:4c:
c9:37:98:f4:87:2a:77:a8:a6:07:3e:3c:3c:2a:6c:
27:c6:88:ab:a6:87:09:52:0e:a4:78:be:b4:5a:71:
1c:f3:a8:48:77:9f:67:a6:f8:39:66:e0:d6:24:27:
8e:a2:59:ac:fe:78:72:c5:9f:4b:77:f1:49:ad:7f:
a8:6a:59:43:83:f6:47:c1:b6:01:22:b3:08:53:6d:
e4:e0:ea:e1:74:50:f2:6b:40:4d:b8:ce:3d:56:fd:
28:0b:3d:26:8e:61:81:2e:ed:03:27:27:d4:f8:0c:
0a:cc:d9:16:93:80:91:97:66:7c:56:ec:f7:5e:ea:
e7:fd:e6:fb:38:23:49:50:d9:55:4b:08:84:dd:6f:
de:5f:14:87:71:9e:1c:54:11:61:17:fb:5f:f0:f8:
8c:07:0a:d6:65:3e:ca:29:44:28:49:6e:3b:3f:c4:
e6:8f:3e:ad:ff:c4:de:9e:67:a3:40:17:bc:fe:87:
ea:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:67:51:51:30:09:8D:D5:BC:E2:5F:6B:B4:AF:92:F8:35:75:ED:4B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IGdRUTAJjdW84l9rtK-S-DV17Us.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1a:4e:3f:b3:a8:39:bf:4e:15:64:77:3c:2b:a2:32:38:4c:a5:
6a:84:e7:58:a3:4f:0f:7d:d8:63:f3:df:ce:ee:6a:38:1e:a1:
6c:7b:04:ee:af:0c:28:dd:23:01:1d:b4:4b:77:fd:7d:98:a0:
04:9a:94:2c:7a:92:8a:27:23:8f:9c:36:45:e2:86:ed:6f:ee:
80:e7:6f:35:1f:01:65:82:2f:a8:92:4a:6d:57:e6:95:a0:ee:
c4:45:2b:03:05:e3:fd:6f:cd:56:dd:03:33:ea:99:45:fc:f5:
55:b4:66:cc:6d:6f:a0:d4:26:5c:fe:26:7e:2e:b2:6f:73:af:
ef:a0:73:d4:a2:7e:32:7a:fd:27:b3:a1:c2:c3:b4:3a:17:ed:
76:7d:63:8f:23:4e:7c:2e:8f:7b:76:ea:51:78:ff:fd:e5:b4:
18:ed:5a:f0:6f:3c:5e:b8:aa:a2:89:8d:ba:ef:ed:56:21:14:
00:d2:56:d5:b9:1b:2e:49:8e:01:8f:cc:b5:c7:15:11:b0:cc:
80:62:e0:52:07:10:13:61:e5:a6:ed:90:94:60:14:8b:7e:5a:
fe:53:23:5c:a2:d5:1f:b4:bf:e3:c2:f6:a1:65:13:b0:f9:01:
8c:80:cf:d7:93:80:12:2b:0a:24:ae:ff:c8:3c:c8:97:19:4f:
aa:3e:58:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:43:50 2025 by rpki-client