Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/P9Ee15idxCpApadi650I44ZacPQ.roa
File: P9Ee15idxCpApadi650I44ZacPQ.roa (raw, json)
Hash identifier: 5ebT+M3kLd9zPd5pnWkh9WuNcRs0szD+Fwg84L2p0fA=
Subject key identifier: 3F:D1:1E:D7:98:9D:C4:2A:40:A5:A7:62:EB:9D:08:E3:86:5A:70:F4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018650B2AE68435C222BCB2501D91789EBBE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/P9Ee15idxCpApadi650I44ZacPQ.roa
Signing time: Tue 14 Feb 2023 16:12:12 +0000
ROA not before: Tue 14 Feb 2023 16:12:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:50:b2:ae:68:43:5c:22:2b:cb:25:01:d9:17:89:eb:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 14 16:12:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3fd11ed7989dc42a40a5a762eb9d08e3865a70f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5e:b9:f7:de:54:de:43:5b:03:6c:df:7f:be:
db:36:28:2d:d8:e3:87:5d:34:4d:2b:57:9e:92:94:
3a:dd:b3:fa:62:a2:a1:fa:4e:dd:37:39:92:6d:50:
a1:9a:aa:a6:d3:c0:fc:4e:27:46:63:b7:76:cd:c5:
58:50:39:e0:40:b2:6f:d6:2a:07:3e:4e:30:8d:65:
9e:08:5b:08:3a:f9:c1:27:a4:fd:b5:c0:0d:37:bf:
c5:53:d3:d6:5e:2b:6a:7f:9d:d0:f6:98:2a:d6:ce:
e0:f7:8f:7d:a5:56:e6:09:3c:07:f2:87:70:c1:21:
86:c3:b3:d1:4a:b6:7e:99:c0:ff:eb:78:07:2c:58:
89:5d:7d:57:9c:2f:c2:29:47:78:55:9b:4b:3a:0f:
ce:2b:57:d4:b5:45:2f:56:a3:d6:7b:12:3c:ab:98:
58:e3:41:c3:16:37:47:b7:1e:21:44:09:1b:b6:6d:
b8:34:83:97:1f:ee:5e:05:d6:57:ca:87:64:e7:15:
c9:c4:b2:87:44:5e:86:13:ca:e6:c0:17:3a:93:bd:
25:44:05:b1:34:b9:48:86:39:da:21:83:53:95:c7:
e4:1b:bb:7e:cb:37:e4:34:c8:88:13:c9:1a:69:05:
b1:9a:e8:59:4a:7c:53:a5:1d:cc:4f:b5:be:9f:b5:
7b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D1:1E:D7:98:9D:C4:2A:40:A5:A7:62:EB:9D:08:E3:86:5A:70:F4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/P9Ee15idxCpApadi650I44ZacPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
34:ca:2c:2e:e0:30:74:b6:80:2f:1b:79:4c:ec:79:b2:5b:1a:
d5:25:e6:cd:d6:c2:4d:52:84:ba:21:dd:f3:7d:17:3c:af:50:
cc:bc:da:db:c2:25:8c:c0:cc:d8:ff:d1:66:ba:f8:84:75:55:
4a:f3:c1:18:c8:48:ee:46:17:2c:da:73:14:2a:14:6e:aa:fd:
86:ea:49:4d:e8:3f:7b:76:00:14:f3:49:03:7b:cc:4a:2d:a0:
35:3a:7b:53:07:65:64:06:64:20:78:2a:65:3b:a8:0b:4a:31:
33:79:b5:64:85:c5:3f:e8:db:e9:3e:eb:b5:36:57:fa:2e:09:
a8:9d:6d:8d:f9:ee:db:c9:1b:0b:d4:13:1e:fd:c4:51:be:96:
87:25:2f:f9:17:69:c0:76:a4:45:fd:01:4f:01:1c:d9:85:05:
29:6d:5f:f9:8a:9a:0f:17:ef:ce:76:07:11:fc:2c:10:3b:92:
39:5a:93:92:59:b7:a8:65:99:0c:20:8d:bf:69:c2:78:6d:aa:
05:d4:e8:93:31:a9:66:1c:6b:a3:be:60:cc:4b:9e:c3:08:ed:
53:44:04:20:0f:57:b8:d9:4c:09:c8:56:84:06:89:3e:52:2c:
35:c2:2b:15:6a:c0:5b:00:33:d2:06:1c:dd:37:92:68:38:58:
15:b9:89:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 08:31:47 2025 by rpki-client