Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/N4FKgkTwPw_qVR-xJx7g7XE4Uag.roa
File: N4FKgkTwPw_qVR-xJx7g7XE4Uag.roa (raw, json)
Hash identifier: F/OCxj7cT1bUumNuruE3rRElQeBCn9itXb9gEASChrM=
Subject key identifier: 37:81:4A:82:44:F0:3F:0F:EA:55:1F:B1:27:1E:E0:ED:71:38:51:A8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185EBA05BCAAA6DDEDAEB90C37CCD36B991
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/N4FKgkTwPw_qVR-xJx7g7XE4Uag.roa
Signing time: Thu 26 Jan 2023 01:10:33 +0000
ROA not before: Thu 26 Jan 2023 01:10:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:eb:a0:5b:ca:aa:6d:de:da:eb:90:c3:7c:cd:36:b9:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 26 01:10:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=37814a8244f03f0fea551fb1271ee0ed713851a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:25:7c:c9:72:7c:77:88:94:a2:fb:db:ad:23:
41:75:b0:9e:dc:88:cf:33:35:d7:87:1f:ac:da:8a:
ef:c3:36:fb:b2:9a:fd:fe:e8:67:3f:6b:fe:d5:89:
84:da:24:8e:ea:5b:bc:c1:c7:77:76:cc:0e:f6:0e:
84:fe:66:38:48:9f:a7:8e:f8:83:d7:71:7a:d6:db:
72:9c:aa:8d:d9:70:67:08:d5:54:2d:3e:86:74:c4:
7f:89:b3:8d:99:f9:5d:b9:a2:14:f4:7c:7a:d7:47:
f2:9a:f0:92:3a:67:34:4f:32:4b:64:7b:e5:38:6f:
23:0b:35:8f:9d:eb:5a:50:55:fe:fc:3e:b6:61:4a:
7d:52:ec:26:0d:41:cc:63:69:94:57:22:dc:89:dd:
54:1a:10:80:ab:a1:e4:65:b8:29:cf:30:74:6f:9e:
c1:a4:c3:aa:d4:d0:6c:82:ad:22:d4:32:f1:4a:e0:
92:5f:b8:c7:e4:e7:d4:72:75:7c:12:6e:bf:5e:7e:
74:54:a3:0b:35:69:2a:da:03:bd:d3:e0:63:f9:41:
a3:a7:e8:c8:6c:7b:1e:08:88:2e:36:cf:8a:11:3a:
5f:c8:8d:83:3d:ab:64:f6:97:4b:00:ae:41:11:9a:
ae:c6:01:f6:04:b1:ce:ca:8a:99:8b:cf:17:9c:55:
b0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:81:4A:82:44:F0:3F:0F:EA:55:1F:B1:27:1E:E0:ED:71:38:51:A8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/N4FKgkTwPw_qVR-xJx7g7XE4Uag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b3:03:07:2f:4e:df:36:81:80:bf:05:35:f9:31:a6:81:b3:b4:
9a:1f:aa:44:03:43:c3:43:dd:bf:d9:e3:88:7f:8e:42:82:65:
c8:37:89:19:ec:eb:62:08:d1:a7:55:87:44:8a:38:ac:80:e8:
08:23:96:4c:96:d2:0f:1f:ae:e1:71:5f:2a:ac:3b:64:94:80:
ca:05:d1:6a:07:59:28:27:19:20:d5:5a:b4:81:7f:f6:14:45:
6d:34:b4:7d:7c:d5:5a:9e:cb:3c:e2:b2:84:09:25:af:a1:da:
e2:ff:14:bd:2f:f4:42:51:cd:8e:47:12:99:6f:00:41:2f:b4:
b8:1b:3f:90:59:45:73:ae:ad:76:e2:0e:23:8a:00:b1:5e:80:
12:93:63:c6:f4:2a:87:3d:81:37:fc:4c:65:16:15:de:53:fe:
0a:18:a4:16:4b:bd:f2:d0:0b:dc:f0:60:80:d1:e6:f4:e9:0c:
96:b8:6c:28:f7:f7:7e:ef:3e:9d:98:b7:d7:77:e2:1b:b7:50:
98:53:a3:12:c3:80:25:76:e2:b6:3e:2f:ea:c0:e9:53:b8:c1:
52:3d:3f:1d:e1:b2:46:16:64:82:d5:db:f7:50:d2:b9:d8:ec:
f6:9b:2c:6f:b8:04:cd:90:82:83:f4:c1:5a:e1:e0:81:2f:f3:
95:40:71:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 01:28:32 2025 by rpki-client