Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IfSonPgXXw3fxITmuE-Gd9UZmQA.roa
File: IfSonPgXXw3fxITmuE-Gd9UZmQA.roa (raw, json)
Hash identifier: gD94S5bwYMEgANhXcLqxfMdsxRTJJfbxm4ujUbnTAII=
Subject key identifier: 21:F4:A8:9C:F8:17:5F:0D:DF:C4:84:E6:B8:4F:86:77:D5:19:99:00
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018601B8B6D3B52D87F4C0A5B40472A28172
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IfSonPgXXw3fxITmuE-Gd9UZmQA.roa
Signing time: Mon 30 Jan 2023 08:08:47 +0000
ROA not before: Mon 30 Jan 2023 08:08:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:01:b8:b6:d3:b5:2d:87:f4:c0:a5:b4:04:72:a2:81:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 30 08:08:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=21f4a89cf8175f0ddfc484e6b84f8677d5199900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:38:64:20:8e:5e:57:f1:c8:cd:0e:e4:35:22:
be:15:76:4d:6f:44:37:45:c7:bb:52:6c:fb:26:3d:
4d:fa:e7:9c:6a:b1:99:d9:aa:e0:22:1f:26:e7:8e:
64:59:8a:99:05:6f:90:f2:92:1c:2a:17:dc:aa:0b:
f6:54:02:ba:01:a7:00:08:c3:fe:88:32:ec:75:69:
4c:48:1c:8e:82:3f:a5:29:ec:fe:25:57:05:7c:15:
01:50:30:f8:bc:58:cb:4c:6c:d5:70:10:61:3f:b1:
89:75:36:e9:2b:d1:fa:72:95:c4:09:87:19:7e:ce:
98:e5:19:29:9f:dd:a9:e1:09:22:0e:ce:25:34:11:
dc:34:02:93:7f:bb:38:25:31:4d:e5:6d:ba:1e:f1:
89:7c:4b:b3:e0:0d:f2:cd:7a:91:84:cb:3e:48:0d:
ae:cc:b8:bf:b6:4f:e8:d3:97:d2:24:9e:2c:47:5f:
38:b8:bd:bb:77:50:b2:36:6c:22:a0:1b:c0:f5:18:
c0:3c:45:ee:80:94:d5:37:5e:e0:b1:06:f4:19:21:
a2:ec:b8:97:f3:b4:36:97:45:c2:1e:f8:fd:46:64:
98:cf:e5:73:16:6b:78:2a:7c:94:56:c7:75:03:e1:
a2:6e:2b:6d:a9:8d:de:13:1e:16:4f:c8:90:05:a6:
4f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F4:A8:9C:F8:17:5F:0D:DF:C4:84:E6:B8:4F:86:77:D5:19:99:00
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IfSonPgXXw3fxITmuE-Gd9UZmQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
43:49:1f:06:b8:73:69:78:37:cd:6c:d3:b5:4c:60:20:03:ec:
97:be:77:73:e3:23:c6:c8:85:67:41:11:ec:34:c6:9b:83:5b:
bf:6a:e7:28:85:65:2d:6d:38:07:b4:63:41:bd:25:e9:d5:6b:
6d:92:b1:a6:f0:bb:eb:1a:ec:e9:7d:9d:da:c3:ac:b2:47:2d:
33:a4:f2:77:9d:5e:8e:47:b1:ed:f2:0a:dc:83:ba:16:ca:99:
27:d7:d5:3c:2b:8d:56:d6:99:36:3e:f7:17:0b:b2:73:4a:46:
b7:a6:01:13:11:2e:30:7d:fc:3e:ce:77:c8:51:da:c3:08:d0:
70:e8:29:5b:7f:7f:af:cf:49:9a:a2:77:7d:27:79:9a:d3:6e:
63:c4:ed:78:f9:43:cc:0f:5b:72:f6:5b:7a:dd:31:82:ac:4c:
28:ce:ac:9d:c3:d2:f8:e9:64:6b:d4:95:f7:8a:a7:96:84:df:
bf:0a:31:a4:16:52:05:13:9d:6f:97:b8:92:68:d2:16:99:be:
e3:8c:45:3f:7b:a0:f8:9d:16:d3:a0:15:bc:2b:95:56:b0:ab:
fa:7c:3b:39:77:ef:39:65:0c:70:53:3d:7d:b3:d0:9a:38:29:
2d:a8:03:c6:29:a9:1d:ad:df:ab:e6:10:10:19:d3:42:81:e8:
7a:8c:68:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:40:22 2025 by rpki-client