Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/La9X2qyh3ydBIpzSxxxFWIEcmV0.roa
File: La9X2qyh3ydBIpzSxxxFWIEcmV0.roa (raw, json)
Hash identifier: scQ5ClsGXSz3JdvVCpHzDf+zsIRCDUz5SKTQmUQPZ3k=
Subject key identifier: 2D:AF:57:DA:AC:A1:DF:27:41:22:9C:D2:C7:1C:45:58:81:1C:99:5D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0181E34DEB483D21B63E99F90AB0E5593C98
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/La9X2qyh3ydBIpzSxxxFWIEcmV0.roa
Signing time: Sat 09 Jul 2022 14:12:23 +0000
ROA not before: Sat 09 Jul 2022 14:12:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:e3:4d:eb:48:3d:21:b6:3e:99:f9:0a:b0:e5:59:3c:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 9 14:12:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2daf57daaca1df2741229cd2c71c4558811c995d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ca:9b:a6:c2:03:ee:fb:8b:f2:3a:f5:ed:cc:
5a:3d:b7:a5:d5:dc:5c:45:0a:05:bd:d8:d7:63:b6:
91:00:0a:35:85:6f:14:5f:90:a2:e9:14:a0:9b:fd:
e0:e2:8a:f7:7a:cb:af:c8:7a:7d:74:bb:74:93:5e:
95:74:4d:d8:c3:3d:cf:92:d4:75:b9:a6:10:24:f9:
c2:b7:59:fc:6d:f0:93:9b:3f:bf:d9:d8:d6:10:9d:
a1:8d:28:04:46:38:3e:b4:98:f1:cc:41:f4:03:9f:
dc:28:e3:6d:d2:c1:3a:db:0b:04:61:ce:86:5a:76:
13:b5:46:dc:41:88:90:74:b2:24:6f:87:a8:60:dc:
fb:3b:40:e7:3c:c8:f3:b0:80:11:61:73:23:7b:4c:
fa:c3:ba:2f:0c:c6:f7:14:7d:c3:8c:3a:76:d5:40:
c4:16:7d:d6:fc:ad:0c:61:cb:8b:94:13:da:a0:3a:
9b:8b:c2:77:9a:a1:fb:3b:d5:f0:0b:5e:b5:f1:cf:
ec:e0:35:75:6d:93:69:b9:a5:59:7a:21:e5:b9:e2:
90:1a:b1:8f:8a:ee:67:42:14:b4:d6:d8:b3:2e:ce:
8a:f0:d8:c4:f5:c5:f9:af:31:19:ef:3a:c7:7f:22:
4e:a9:79:73:b7:91:11:61:b8:52:a0:5c:f0:86:a9:
a1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:AF:57:DA:AC:A1:DF:27:41:22:9C:D2:C7:1C:45:58:81:1C:99:5D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/La9X2qyh3ydBIpzSxxxFWIEcmV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0e:bd:76:9f:cb:cb:78:7d:d0:71:6c:df:dd:7b:45:bd:38:8f:
73:3e:ff:1b:19:b7:ab:2a:9a:93:9e:25:8b:c5:69:89:88:47:
41:93:c8:02:48:8a:7b:f3:8f:c8:5b:2b:57:f9:a9:9c:58:3d:
f6:13:97:d5:4a:72:9e:8e:7c:08:ac:f1:5c:6b:a0:4e:0c:b0:
7a:57:93:81:30:ee:93:97:94:50:03:ff:ce:a4:8d:64:a0:fc:
02:01:30:b4:d1:50:90:ae:90:39:36:93:33:d4:53:b0:30:92:
c9:7e:69:bd:3c:ae:80:e8:35:eb:e6:ca:d6:b8:9b:9d:6b:d3:
3b:a6:c2:5c:c0:59:e1:d8:30:92:3f:14:e1:e1:ec:0c:d8:a8:
d8:02:56:34:de:40:78:39:25:08:56:fb:68:1e:f6:28:a7:c7:
ea:0d:53:63:9b:ab:80:b9:8f:cf:aa:bd:8b:37:7a:13:55:50:
22:02:18:3a:70:c5:74:2a:75:43:f5:9d:55:fc:f2:a9:8c:ba:
67:ba:c6:0a:2e:48:b5:ca:cb:ca:61:3c:cb:74:f2:27:7b:1b:
22:3d:45:c0:c6:fa:98:8d:78:c9:d6:c8:49:d4:26:60:a1:ce:
d7:61:70:e7:92:60:d1:36:4e:16:4e:34:04:52:ad:a4:37:1d:
68:3d:99:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 13:59:52 2025 by rpki-client