Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KOEm4zODu0TzctVr0_yDjYfr1Nc.roa
File: KOEm4zODu0TzctVr0_yDjYfr1Nc.roa (raw, json)
Hash identifier: b+B6OAQ4rEmBEAts52w/+oNmZq+MrOpzfwtdfS3JMUQ=
Subject key identifier: 28:E1:26:E3:33:83:BB:44:F3:72:D5:6B:D3:FC:83:8D:87:EB:D4:D7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185157D556A5FCFCA75765AD7AE3DE454C7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KOEm4zODu0TzctVr0_yDjYfr1Nc.roa
Signing time: Thu 15 Dec 2022 11:13:33 +0000
ROA not before: Thu 15 Dec 2022 11:13:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:15:7d:55:6a:5f:cf:ca:75:76:5a:d7:ae:3d:e4:54:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 15 11:13:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=28e126e33383bb44f372d56bd3fc838d87ebd4d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:06:65:87:fd:ef:1e:6f:79:13:1e:1a:66:fd:
25:b8:70:2b:b6:dc:df:bf:c9:a2:8d:5e:49:9b:6b:
c7:70:18:b2:c9:13:55:30:f8:f3:d4:e7:21:13:69:
82:8a:0d:ed:f2:7d:e6:6e:3e:a3:3e:cd:d5:6c:d0:
7c:f3:cb:75:ed:74:7b:f7:59:69:0a:ca:2f:d5:16:
fc:d8:ae:5d:98:8f:e9:13:d7:b4:a6:b6:fa:48:b4:
20:20:46:01:23:d6:fc:6c:50:04:c2:46:bf:f7:af:
f8:e3:6b:ba:37:ce:8b:fe:88:6c:60:65:61:59:2c:
ad:ff:fc:1b:d2:81:25:04:d6:d4:ae:82:ea:f1:d5:
00:58:9d:61:2a:4f:fa:dd:15:ca:5b:44:79:fd:cd:
ba:7f:df:3b:c8:23:41:c9:63:1d:0a:b6:3e:af:e9:
ec:2f:8d:8d:29:35:06:ae:d9:f1:67:ce:db:d3:8e:
e8:ca:f0:8c:44:42:f3:8b:0a:51:51:a1:f0:69:b9:
f0:f9:42:3f:2b:ac:5e:ad:3f:ec:4e:fa:6a:9f:8f:
30:3e:9c:91:fc:d4:7d:45:e4:59:a0:db:a2:b9:c3:
1b:d9:5b:36:6f:f8:b5:88:a8:4f:1b:5a:f0:38:a9:
86:d1:e9:5a:46:dc:d2:62:b1:bf:04:6f:fa:eb:d5:
13:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:E1:26:E3:33:83:BB:44:F3:72:D5:6B:D3:FC:83:8D:87:EB:D4:D7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KOEm4zODu0TzctVr0_yDjYfr1Nc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
62:89:12:17:32:45:18:d2:1e:41:af:b5:7d:40:3f:e6:79:f4:
b4:85:57:a6:9a:6e:81:9f:c8:e3:9f:31:e0:33:d4:40:cd:56:
c5:f9:69:f5:3d:74:59:4f:bd:ad:d7:ec:13:18:3d:d1:22:47:
57:36:42:da:9a:aa:15:3b:aa:94:fb:bd:2b:7c:72:99:d2:c5:
54:e5:96:39:fc:3d:f2:63:4f:43:62:0a:16:07:13:7c:23:55:
91:e6:1e:84:a4:1d:2d:8e:ad:10:b0:92:db:18:7e:f3:3d:ae:
57:1a:8c:95:a1:d9:10:54:81:ec:98:3d:50:9c:e6:90:5c:f9:
fd:6d:25:33:e8:38:60:1f:74:69:50:53:16:84:e6:98:26:9c:
3a:77:13:a8:27:2d:a9:cd:7b:92:b4:32:b7:40:6b:19:57:41:
22:da:cc:74:ed:6f:29:f2:33:a1:e7:a8:5d:67:cf:ad:1b:c6:
2e:cb:8f:94:c9:98:c4:bc:6d:f7:ac:c1:79:ef:00:93:8e:5c:
b6:1c:2b:f9:6e:23:4f:22:1c:5c:ef:bb:85:69:ad:1a:e5:87:
7e:5e:37:74:e2:8a:a1:24:53:e3:bc:11:5b:2b:d3:f1:ec:2e:
92:d7:67:4b:cd:f9:6c:0b:ac:ff:f7:04:65:b1:ee:05:d2:92:
28:b2:f7:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:14:36 2025 by rpki-client