Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PlqfN1U6sJ0pppuHadAqf21Ezsw.roa
File: PlqfN1U6sJ0pppuHadAqf21Ezsw.roa (raw, json)
Hash identifier: iS9KER46K5Uxe0MnOdEo3Cn+UE5b3s347jwGeOw7NIc=
Subject key identifier: 3E:5A:9F:37:55:3A:B0:9D:29:A6:9B:87:69:D0:2A:7F:6D:44:CE:CC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185206A4C1A7D56010689823201F2913E2E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PlqfN1U6sJ0pppuHadAqf21Ezsw.roa
Signing time: Sat 17 Dec 2022 14:08:35 +0000
ROA not before: Sat 17 Dec 2022 14:08:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:20:6a:4c:1a:7d:56:01:06:89:82:32:01:f2:91:3e:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 17 14:08:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3e5a9f37553ab09d29a69b8769d02a7f6d44cecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3e:de:ee:1a:91:c1:fb:e5:34:5a:98:7e:5f:
ff:72:07:4b:c8:fc:56:5d:9b:ef:d5:dc:3c:a8:0d:
55:11:d6:84:e4:8c:79:de:ab:16:d4:de:f4:21:c0:
6e:00:f4:36:32:5c:a5:7c:19:5b:48:f0:e7:3f:b9:
be:6d:ff:06:f1:38:f2:1f:14:98:a3:0e:e3:c3:57:
93:a6:e4:a8:d2:4b:1e:b6:18:29:21:d7:ef:57:7d:
fd:a4:a3:b5:48:e8:79:37:f6:e0:f1:75:ee:53:91:
9d:4e:6a:45:34:91:9e:81:ed:e3:76:25:f9:1c:07:
43:55:f4:89:88:90:f3:40:5f:ce:58:85:94:c9:83:
ff:82:7c:f5:3a:92:36:b6:b3:5b:43:94:07:0a:7a:
19:cb:35:b2:92:8f:26:ce:35:aa:f7:c2:7d:c7:ca:
e1:b6:4c:40:29:47:a0:0c:5b:08:e1:8b:97:ef:f2:
98:e8:3a:41:24:ca:18:87:21:30:0a:d1:b8:96:3d:
eb:6d:b3:c6:89:21:35:fa:15:16:29:bb:10:11:58:
29:c0:53:f3:6c:72:c3:0c:81:60:be:1a:58:42:8f:
d9:f4:49:4c:08:37:f2:e1:c1:7e:ef:af:60:a3:f1:
b0:69:cb:5e:0e:a5:98:52:b8:aa:17:fd:a4:77:15:
e5:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:5A:9F:37:55:3A:B0:9D:29:A6:9B:87:69:D0:2A:7F:6D:44:CE:CC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PlqfN1U6sJ0pppuHadAqf21Ezsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
80:99:97:7c:8b:4b:d4:19:4a:3d:90:73:69:46:2f:70:6c:2b:
ff:52:bf:a4:7e:c4:bc:53:29:f6:fd:51:c7:ec:41:96:15:3f:
09:1a:be:f4:87:a0:4a:c6:28:1b:06:3a:e5:46:6f:7e:30:62:
31:5a:e9:71:b8:81:5b:32:a6:48:6e:5b:37:e8:53:0e:f8:7f:
39:09:c4:b6:4f:71:73:be:36:37:28:34:6e:28:d3:ee:f0:42:
b1:21:72:0a:0a:bf:19:3a:37:f8:0e:39:21:85:9e:e0:fe:d0:
39:9f:1d:4b:aa:8f:a2:f5:1b:f6:af:e3:1e:0b:63:dd:f0:a4:
3a:0e:1a:9a:98:9e:67:4a:e5:eb:8d:4c:03:b2:89:b2:91:d9:
9a:47:ce:65:ef:ce:37:cb:4b:65:93:02:25:71:b7:9c:3c:d0:
d0:e9:9e:f5:56:85:6c:66:f5:e4:1a:e9:3c:2c:82:48:4c:0a:
02:23:da:47:6e:89:a8:d8:3f:b9:76:0a:a2:e6:f3:16:b4:73:
a6:bf:4a:c1:79:84:8e:53:bb:54:dc:b0:0f:2f:5c:6d:10:3e:
ae:c6:3a:c2:6b:2e:d5:59:16:b8:62:cd:e8:b4:24:29:14:50:
85:2b:25:5f:b5:51:67:f6:62:5f:01:8a:9b:b2:11:7a:80:72:
91:ca:3d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 23:17:33 2025 by rpki-client