Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Rxyt7l_FArR8IZFLuFLtRQFtxUk.roa
File: Rxyt7l_FArR8IZFLuFLtRQFtxUk.roa (raw, json)
Hash identifier: KcEksZUfVZWwEMelf2ZADpP/QxUQDXU2LS5gQ2XRKFk=
Subject key identifier: 47:1C:AD:EE:5F:C5:02:B4:7C:21:91:4B:B8:52:ED:45:01:6D:C5:49
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01846D0B8F711FEC4F22E98D378F430CCD62
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Rxyt7l_FArR8IZFLuFLtRQFtxUk.roa
Signing time: Sat 12 Nov 2022 18:13:04 +0000
ROA not before: Sat 12 Nov 2022 18:13:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:51c3:ad7c/128 maxlen: 128
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:6d:0b:8f:71:1f:ec:4f:22:e9:8d:37:8f:43:0c:cd:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 12 18:13:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=471cadee5fc502b47c21914bb852ed45016dc549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b8:87:85:eb:ca:47:f3:23:ec:28:fc:2d:74:
dd:95:82:79:0e:ff:89:0c:44:ad:3f:28:41:fc:a6:
b0:27:89:49:9a:93:e8:99:c4:f8:21:73:c5:4d:b4:
81:f2:5b:f6:84:47:e0:b8:75:d3:a4:fe:ba:bf:fe:
28:57:16:21:25:83:27:3b:b4:b6:fe:34:a5:22:87:
32:37:42:c3:c8:03:89:5f:67:7f:86:0f:4c:8a:9d:
9c:96:03:65:00:42:ec:71:98:fa:e3:0d:78:5f:e1:
20:d0:d9:4e:06:37:63:f2:58:ed:19:20:bb:30:a8:
bb:e8:11:f6:fd:9c:75:d5:ea:f8:60:84:09:c6:b5:
b4:40:2c:ab:6b:4c:a7:7e:6d:22:05:95:56:62:03:
0c:65:cc:ee:c1:9a:aa:2e:30:cc:08:8c:c8:ba:73:
60:69:71:0a:57:83:2b:97:a7:81:69:db:25:de:2f:
e1:04:88:80:c6:7a:d4:46:e6:37:52:0e:c4:87:a1:
dd:66:9f:38:8b:30:f3:fe:0e:34:cf:4f:c6:23:45:
e0:b4:72:33:df:c3:ec:c9:ad:e4:f4:1e:f9:e4:09:
5d:fb:a9:f5:b5:39:24:07:3f:01:c7:d3:74:51:74:
19:65:97:7a:c6:dc:0f:7c:44:ec:62:c3:c8:49:83:
bf:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:1C:AD:EE:5F:C5:02:B4:7C:21:91:4B:B8:52:ED:45:01:6D:C5:49
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Rxyt7l_FArR8IZFLuFLtRQFtxUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4b:f0:7e:4d:38:98:b9:b4:ee:66:c5:e8:2c:24:e1:7e:e3:7b:
b5:52:35:28:1b:cb:88:51:4b:c1:3c:b5:1f:1f:32:ef:4a:24:
bf:3b:51:99:bf:3d:5c:21:54:a6:82:97:7a:1f:78:50:85:44:
f7:79:7b:ff:02:99:5a:ab:8b:1c:d2:42:29:53:47:ad:9d:7a:
2e:bc:0f:18:2b:f4:f9:5d:fe:06:54:5b:33:34:46:80:47:df:
1c:73:c2:00:38:79:43:6c:18:9f:d5:29:e4:79:74:a8:5e:38:
65:7a:57:a4:46:ae:b7:87:49:57:a0:91:b4:0c:a4:fb:f6:e0:
36:d8:0c:51:df:e1:86:63:fa:4b:0c:86:dc:f3:96:bb:14:5f:
c7:87:f5:8f:48:a9:d7:de:a4:96:23:e9:e6:45:95:46:e0:12:
15:85:af:1d:48:fa:4a:80:dd:9e:51:14:ea:35:bb:78:c4:ce:
a0:79:9e:e0:56:58:3b:15:12:22:fa:43:9c:fd:e4:a4:36:e0:
ae:68:93:56:18:62:c5:4b:53:65:6d:c5:50:08:04:90:55:50:
dc:90:26:31:d7:31:d5:d3:fd:3b:2c:b7:27:28:d5:93:ed:c1:
04:a6:cb:22:3a:8e:4b:a3:b7:fb:4f:7e:aa:39:b6:b8:8b:44:
bd:7c:1b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 15:14:06 2025 by rpki-client