Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RIiqKvg-zoxHgylbpmm-rZkV5Pc.roa
File: RIiqKvg-zoxHgylbpmm-rZkV5Pc.roa (raw, json)
Hash identifier: Y/5UIORXLY3/zZ5zymg7vErvPaOpUsQlxcO0kh6oF2M=
Subject key identifier: 44:88:AA:2A:F8:3E:CE:8C:47:83:29:5B:A6:69:BE:AD:99:15:E4:F7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 77479709
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RIiqKvg-zoxHgylbpmm-rZkV5Pc.roa
Signing time: Thu 31 Mar 2022 17:08:15 +0000
ROA not before: Thu 31 Mar 2022 17:08:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2001180425 (0x77479709)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 31 17:08:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4488aa2af83ece8c4783295ba669bead9915e4f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d4:23:45:7f:5e:d7:c3:9b:e9:d0:62:3a:e1:
86:05:6f:90:e3:71:3d:c9:60:a4:28:89:cf:84:db:
e7:ef:de:cd:c9:e1:29:2a:46:6c:dc:e8:f5:c1:29:
64:50:1d:77:d2:b7:f2:e1:66:f2:d5:5c:1f:81:2e:
5d:2d:68:79:36:57:b3:94:cb:69:6a:6d:e3:8a:a0:
6c:cf:e4:c2:92:11:43:5d:18:0f:d8:c2:c8:8d:09:
bf:f3:84:be:f2:0f:48:52:f2:22:63:e6:8f:32:d8:
d8:8e:6b:27:ec:ef:2e:d9:0a:0b:ab:33:4f:93:38:
97:85:28:b3:ed:be:5c:a0:1e:d7:a1:68:df:87:69:
eb:9b:86:e1:16:8c:f8:e7:93:03:c1:49:be:31:c6:
0d:38:1d:85:f0:42:59:87:25:f1:f3:57:cd:63:d0:
c2:d9:c0:db:4b:97:84:b0:bf:ea:98:28:c2:88:4b:
11:ad:d2:e2:d0:c5:cc:51:03:89:f8:42:02:93:f9:
7d:1d:ad:1f:db:43:85:14:02:9e:2b:33:10:c9:b8:
93:67:05:82:75:77:81:eb:5d:28:2c:d8:6a:13:84:
a5:45:48:ac:83:8b:d8:ed:f1:b7:d0:b3:09:c5:42:
51:07:7b:c6:d0:78:68:2a:5a:af:c8:62:ab:4e:1a:
53:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:88:AA:2A:F8:3E:CE:8C:47:83:29:5B:A6:69:BE:AD:99:15:E4:F7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RIiqKvg-zoxHgylbpmm-rZkV5Pc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
60:95:ac:e6:3f:9a:cc:f5:93:dd:2b:c3:aa:5e:8b:a1:4d:84:
91:c4:82:c4:1c:bb:0e:f5:2a:8b:b3:6f:5d:4d:66:70:1b:3f:
51:48:83:1b:22:3a:57:7e:43:bd:67:4c:0b:a3:b0:f5:8c:52:
d2:d1:29:55:1f:75:d6:24:6a:d4:4c:a6:e8:2e:d1:08:98:24:
06:ea:5c:56:8c:93:96:c7:21:fc:d8:7a:91:e4:da:8e:71:1e:
1e:b8:1b:aa:27:c1:9d:83:c0:6e:9a:29:a4:12:9d:47:af:d2:
23:2d:e0:58:95:cb:7f:a5:9a:09:d8:e6:67:6e:83:ee:e1:dd:
d8:33:3c:9c:3f:22:b5:b1:28:1f:4a:9b:4d:e9:96:8c:5b:16:
f3:69:5d:78:cb:72:41:b3:b0:5e:2a:2b:29:45:30:58:0a:5a:
af:7b:61:ac:13:8f:51:b7:a3:44:0d:cd:94:42:04:02:e1:03:
8e:c3:f9:2d:96:af:2c:6c:d6:a0:e5:81:cd:d2:ea:eb:92:17:
df:53:7b:86:84:63:1a:94:d4:d6:e7:d2:81:a9:29:f6:c4:99:
fc:26:18:75:91:76:d6:f1:2d:df:5f:59:40:27:b4:f0:42:cb:
06:08:3c:fc:a6:9f:f3:18:80:4d:a3:f6:4e:4c:c9:e2:2b:4c:
47:52:c4:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 13:32:21 2025 by rpki-client