Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/R13xPDU3rQBAMe4P4xhjpXHPc_I.roa
File: R13xPDU3rQBAMe4P4xhjpXHPc_I.roa (raw, json)
Hash identifier: LlAYYMjG1b+VRmVpLmWrTcqgEglpVcb1q3CfIGrqfPM=
Subject key identifier: 47:5D:F1:3C:35:37:AD:00:40:31:EE:0F:E3:18:63:A5:71:CF:73:F2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185AEAFB2AD4301D1C94A323BCAEB8DE48A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/R13xPDU3rQBAMe4P4xhjpXHPc_I.roa
Signing time: Sat 14 Jan 2023 05:10:28 +0000
ROA not before: Sat 14 Jan 2023 05:10:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ae:af:b2:ad:43:01:d1:c9:4a:32:3b:ca:eb:8d:e4:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 14 05:10:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=475df13c3537ad004031ee0fe31863a571cf73f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a9:68:3e:95:95:a2:71:f7:fb:67:c3:b1:52:
6b:e4:22:ac:ea:a8:60:2e:33:5f:20:cb:56:21:be:
1b:fe:e8:fb:54:bd:39:70:b1:2a:e5:a7:4a:af:9b:
e7:24:2c:7e:c2:15:08:b8:d1:2f:c5:51:8d:ff:d3:
6d:55:d8:23:82:9a:ca:72:82:31:78:51:94:50:c1:
7a:cf:a8:43:70:3d:d9:b5:f9:1c:b5:7a:3f:ae:5a:
52:ca:83:01:bd:42:9e:80:cf:c1:13:0c:82:ef:de:
54:3a:1b:22:ff:40:34:ad:df:0e:13:78:46:54:14:
37:9b:a0:88:9d:5a:25:3a:36:73:96:70:a4:de:20:
ad:1c:0a:ad:cb:e8:62:8f:30:1d:d3:18:38:9e:ef:
f4:3f:08:b4:84:16:ba:0d:74:ef:df:eb:8e:5d:75:
cc:fe:b5:ed:3c:16:39:47:42:3b:1b:4b:c1:27:3e:
21:2f:62:a2:79:46:92:25:bd:e3:25:6f:13:8c:31:
f6:e2:8c:e0:70:80:23:46:57:62:01:1a:33:53:40:
b4:bc:9b:57:be:e6:96:85:c7:a1:6b:70:07:1b:ed:
81:23:5b:2e:27:17:22:85:5d:ca:2a:65:5f:7a:6d:
fb:a0:28:3b:5c:4a:22:8a:bd:41:95:c3:26:a1:da:
88:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:5D:F1:3C:35:37:AD:00:40:31:EE:0F:E3:18:63:A5:71:CF:73:F2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/R13xPDU3rQBAMe4P4xhjpXHPc_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
02:f2:1e:d3:af:2f:14:18:f8:5f:a1:63:00:88:aa:c6:0a:7e:
37:bf:e1:0d:62:ac:af:05:97:8b:03:5a:20:dd:3f:a0:dc:87:
40:57:c1:c8:9e:2b:99:1d:13:26:bc:a9:d7:52:36:47:34:67:
1b:f4:fd:bd:f4:7b:32:95:8e:35:14:46:b4:ae:84:a8:4c:27:
09:0a:68:89:b8:c4:18:c6:f2:39:0d:b8:5b:7e:bd:6a:30:71:
0f:88:bc:90:c2:81:48:8e:75:4f:f5:dc:90:f1:fc:7e:38:b0:
66:87:79:31:0f:9b:3d:a8:91:03:86:70:92:0f:39:ff:dc:d4:
72:a0:15:31:63:f7:3e:1e:f0:4e:2e:80:79:f6:4a:21:b1:32:
42:87:18:46:01:68:9e:b5:f9:bc:c8:c0:a9:10:2b:c9:91:81:
01:5c:38:2a:ad:b1:db:89:3d:7d:1e:14:e0:d5:0f:fb:da:90:
2e:2b:99:1a:6f:ce:09:49:f6:f6:85:b0:90:11:01:19:f5:8a:
2a:2e:fa:43:e1:6e:99:ac:6a:62:3e:0f:52:96:d1:ec:80:73:
3f:eb:79:27:12:b9:88:e5:67:7b:b6:90:3a:6a:8d:18:3f:44:
0c:7f:24:87:53:33:2d:20:d7:86:5c:00:93:35:ca:ad:08:50:
ca:99:0b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:06:50 2025 by rpki-client