Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RvIo51mRvPQvAu0_aS1Q8wit2NM.roa
File: RvIo51mRvPQvAu0_aS1Q8wit2NM.roa (raw, json)
Hash identifier: WKCUy5W6yPv4eZzLPsVKUJXz5f7tyO8cW2m4YJIq2xI=
Subject key identifier: 46:F2:28:E7:59:91:BC:F4:2F:02:ED:3F:69:2D:50:F3:08:AD:D8:D3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8FD582B8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RvIo51mRvPQvAu0_aS1Q8wit2NM.roa
Signing time: Sat 25 Jun 2022 23:11:13 +0000
ROA not before: Sat 25 Jun 2022 23:11:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2413134520 (0x8fd582b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 25 23:11:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=46f228e75991bcf42f02ed3f692d50f308add8d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d3:40:cc:75:14:ee:d5:8a:26:e7:f4:0b:be:
6d:ee:06:75:07:55:d6:35:61:b0:1e:ed:96:c0:21:
26:76:a6:5b:09:2a:00:01:15:9b:c6:14:ca:a8:b3:
48:37:7c:43:98:56:0a:df:c5:6e:b9:24:14:12:f7:
0f:bf:be:78:29:c7:fb:bc:73:36:43:33:31:a5:f0:
31:a3:48:ee:43:d4:61:3f:3f:58:fc:18:02:64:d7:
b6:e4:85:f3:07:c4:36:f3:3c:dd:1b:e9:51:1c:36:
7e:27:97:c2:5e:7d:7a:fb:94:35:49:83:28:ec:3f:
3c:15:1b:a1:da:68:90:88:7f:83:84:c3:7c:e1:68:
e2:e9:87:b2:a1:f3:b0:da:ed:8a:e3:92:f4:b4:fe:
21:55:a6:c3:d7:37:0c:46:5f:79:33:87:c9:37:d5:
df:c2:e7:9d:8d:00:0a:db:7d:76:d0:9e:81:3d:c2:
f1:e3:a5:da:f4:7e:8a:2f:56:91:a8:8f:f9:30:be:
7d:fc:9b:63:03:13:ec:c8:6d:0e:5f:9d:d8:5b:7f:
56:5d:b6:31:24:89:b8:f6:4c:02:a6:35:66:42:6a:
b6:71:4d:d9:2d:9f:b7:a6:4e:d1:ea:62:3a:fd:81:
da:2f:52:4a:84:c5:36:d4:da:65:8e:95:52:33:6b:
9e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:F2:28:E7:59:91:BC:F4:2F:02:ED:3F:69:2D:50:F3:08:AD:D8:D3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RvIo51mRvPQvAu0_aS1Q8wit2NM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9f:6b:0c:4b:0d:af:f6:09:40:02:0d:d2:33:2d:62:46:f5:fa:
bd:b7:68:f2:2f:c8:7d:62:51:3f:f6:41:fb:83:23:19:87:a3:
a6:47:db:55:0d:b9:7f:93:b7:1f:c6:bf:6e:f1:5e:fe:6c:4a:
2b:ac:26:c9:cf:89:53:91:29:50:ca:a7:88:48:d2:a9:de:7c:
aa:f8:43:15:36:bc:c6:52:1f:62:c3:24:33:22:2f:5c:71:2f:
9b:1b:37:80:14:6f:d0:15:c2:e0:2c:e4:11:fa:33:90:a7:0b:
0c:8c:c9:9c:01:b1:00:63:46:0c:4a:dd:ec:56:48:83:a3:a6:
09:60:b0:e3:04:e4:ab:54:90:34:8e:9c:27:f5:36:2f:cb:7e:
4d:38:b4:42:58:08:01:f5:da:bb:ef:ba:aa:12:66:4d:34:46:
18:39:20:44:32:03:35:3c:89:ec:85:07:77:a8:53:cd:4c:7e:
88:81:9e:2e:4c:7d:14:9f:cf:36:b2:6c:72:48:97:2a:de:da:
97:92:3b:cb:24:4b:90:c2:30:b3:7f:a9:83:de:cf:e3:76:db:
dd:aa:f0:c2:b3:75:0d:26:c1:2b:d1:44:ae:22:97:c6:e6:61:
3f:65:69:4e:90:ac:4d:5b:fa:ad:63:80:d3:94:02:cc:e7:f2:
86:84:0e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 23:52:02 2025 by rpki-client