Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/S1s2T_JH15J37GU9OCgTfLl9ajQ.roa
File: S1s2T_JH15J37GU9OCgTfLl9ajQ.roa (raw, json)
Hash identifier: jGPJBOwqenDQ+yd1mMtgzIHdB89SJoT2Vjo29t6hStk=
Subject key identifier: 4B:5B:36:4F:F2:47:D7:92:77:EC:65:3D:38:28:13:7C:B9:7D:6A:34
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182EC89BD3DBA395ED19C0E7915F4B42C86
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/S1s2T_JH15J37GU9OCgTfLl9ajQ.roa
Signing time: Tue 30 Aug 2022 02:17:06 +0000
ROA not before: Tue 30 Aug 2022 02:17:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ec:89:bd:3d:ba:39:5e:d1:9c:0e:79:15:f4:b4:2c:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 30 02:17:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4b5b364ff247d79277ec653d3828137cb97d6a34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:44:ee:af:00:6e:49:c3:92:3c:9f:94:77:7a:
ac:5f:de:c1:18:78:3e:cc:8d:c4:84:35:56:53:cb:
85:91:e5:9e:71:81:86:40:4e:4d:10:29:64:90:55:
6e:02:49:a2:d7:aa:3b:76:c3:96:58:90:17:f5:f6:
dc:36:81:d1:14:dd:99:3d:b0:95:25:ee:f3:66:7d:
1b:71:17:d9:33:6f:0e:3b:33:bc:0f:11:81:cd:e9:
21:a4:13:e0:0b:b9:04:e9:fb:ac:d4:5f:3c:ba:d0:
49:2b:d6:f0:01:79:3a:46:57:fc:3b:b2:6f:5a:ea:
a4:36:8e:18:dd:dd:b7:4d:e8:05:15:b5:e2:00:40:
c5:4e:ab:ca:75:42:28:f6:da:00:c8:a3:ed:7f:57:
f0:e6:d3:28:97:17:e8:62:0a:02:36:70:63:46:0d:
97:39:9f:51:1c:63:ed:1e:4d:a5:08:9c:2f:c5:5b:
c6:d0:46:50:8e:9c:f1:da:5b:9a:be:fe:d7:e1:c6:
83:f4:e5:e0:a0:6c:6c:5e:47:31:88:00:cf:58:3b:
9c:78:7d:92:03:16:9b:c6:a3:63:18:29:3b:d5:f4:
2d:99:08:94:99:79:7a:95:bc:60:44:f7:dc:7b:05:
68:d9:7f:55:13:23:b5:af:7f:79:b1:a1:48:5a:0f:
0f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:5B:36:4F:F2:47:D7:92:77:EC:65:3D:38:28:13:7C:B9:7D:6A:34
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/S1s2T_JH15J37GU9OCgTfLl9ajQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5a:55:47:dd:01:91:53:78:b8:f4:75:01:1d:fa:46:fd:55:45:
83:8e:78:15:40:18:62:83:19:b6:68:73:5d:55:e7:1d:fa:19:
61:e1:99:9d:dc:79:a6:a6:71:e0:9f:74:76:d3:30:5e:e8:6b:
83:32:7b:16:4b:b9:a0:a7:62:c8:74:92:6b:b5:6e:bb:1f:c7:
74:a4:26:46:d3:89:ee:af:3f:52:18:6b:72:21:89:5d:bc:f3:
05:78:a7:ec:1f:5c:61:d3:72:15:b5:e9:02:1e:62:e1:69:f4:
61:ca:be:ab:50:11:1a:f3:7e:c9:ce:14:02:bf:b7:55:5b:16:
39:64:27:56:31:85:d2:fa:6e:a8:88:1f:90:cd:31:31:5a:31:
44:43:20:fb:27:13:6e:c8:78:83:bd:aa:34:1e:2e:a4:dc:ab:
5a:07:66:3b:11:9e:97:7b:79:ae:e3:0c:d8:db:05:ee:bb:20:
79:9f:74:90:37:ba:a1:a8:cb:f9:e6:9b:61:f9:4b:fd:12:af:
e9:48:3e:19:9f:71:7f:61:cb:29:b4:27:51:3a:52:00:b2:56:
b3:23:67:27:55:c9:78:5c:ef:92:05:30:72:d4:12:99:81:9b:
45:a2:23:47:35:9c:ac:51:1d:cd:40:5b:51:df:60:95:35:71:
42:1c:3f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:31:05 2025 by rpki-client