Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SD_E4e5fXFGTulO1bVNMfIN4GCU.roa
File: SD_E4e5fXFGTulO1bVNMfIN4GCU.roa (raw, json)
Hash identifier: s6jMaj103njb7NwSQOh/WSEW3yOs1u9Hamg2I/RL3as=
Subject key identifier: 48:3F:C4:E1:EE:5F:5C:51:93:BA:53:B5:6D:53:4C:7C:83:78:18:25
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01856CCFE40822A3FD05BC8254D4E275AF2A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SD_E4e5fXFGTulO1bVNMfIN4GCU.roa
Signing time: Sun 01 Jan 2023 10:10:41 +0000
ROA not before: Sun 01 Jan 2023 10:10:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:cf:e4:08:22:a3:fd:05:bc:82:54:d4:e2:75:af:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 1 10:10:41 2023 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=483fc4e1ee5f5c5193ba53b56d534c7c83781825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:b8:f0:5c:a6:3f:1f:23:de:f3:43:b2:6a:7d:
89:0a:9a:37:74:b4:40:d3:44:f3:48:7c:f6:5f:4b:
b2:c0:4b:d6:59:5a:ef:71:61:39:5c:fe:2f:1e:7c:
45:71:79:df:f9:57:22:5c:af:db:ba:8f:14:b2:23:
10:86:e6:69:48:be:6a:d5:f3:c8:1d:3f:e9:14:be:
6d:cc:6c:29:b2:65:85:28:17:b5:0b:68:5d:e2:69:
2e:d0:07:62:64:58:83:34:e9:dc:d5:c9:eb:a4:f2:
c5:a9:1d:30:98:c5:28:1d:27:5c:6a:4d:86:71:f5:
8d:24:da:80:87:df:a4:5a:b1:f2:5b:aa:fe:f3:01:
64:ce:86:45:d7:b9:3b:4e:d6:e4:f1:1f:99:4b:3e:
a8:03:7b:ba:3b:e0:d6:89:0c:9a:7b:5d:5e:81:fa:
13:6b:21:f2:90:ae:e2:bb:9e:4a:5c:c3:20:3c:4b:
d7:75:f5:0f:e8:36:cb:70:ab:36:cf:66:02:b3:40:
00:88:c3:39:a2:1b:f7:d0:d8:0d:63:55:0f:ee:8a:
18:14:5f:ae:90:3c:10:5c:04:9a:f6:31:62:84:4f:
c3:a5:2f:97:0d:0c:20:99:5f:6a:f4:ec:21:94:d7:
de:67:3b:dc:28:e5:e9:19:48:44:11:c6:1e:7b:ea:
0a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:3F:C4:E1:EE:5F:5C:51:93:BA:53:B5:6D:53:4C:7C:83:78:18:25
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SD_E4e5fXFGTulO1bVNMfIN4GCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
af:a9:14:f7:71:22:75:ac:fd:09:74:a3:55:27:52:3a:14:40:
dc:61:b6:1d:59:54:e6:96:78:81:e2:b0:f1:8b:7e:9e:9a:2c:
1b:53:d1:dc:bd:45:88:4f:21:e2:25:5d:6f:49:47:c0:37:fa:
06:52:44:3a:92:2e:a6:1f:6c:70:8f:27:89:24:e2:06:72:4f:
83:92:9f:1b:91:7e:8d:20:1d:63:ce:ad:ca:fe:a5:17:3e:4f:
cd:57:bd:73:de:21:eb:b0:f6:a4:f6:a0:47:df:34:a2:8d:3f:
dc:64:8f:55:bc:ed:d0:95:1a:46:e2:a0:28:d3:62:83:16:16:
33:95:2f:ab:68:a7:da:dd:25:a4:d6:f7:63:87:39:08:76:f2:
67:4c:48:fc:a0:7d:5e:f4:b6:b3:24:92:ec:a0:cb:fd:45:e6:
d5:bc:a1:03:bf:a0:c9:d9:5c:14:ec:37:4d:d2:b7:18:ac:af:
e6:5d:db:b7:b8:36:e3:2e:55:a7:08:b4:f5:6e:bb:49:cc:54:
4d:b2:9c:30:77:07:d2:f7:1e:ff:81:64:21:e5:4f:81:b8:98:
a8:d4:3e:7f:b7:ba:49:f4:9f:1e:6f:54:19:23:9d:3d:74:1a:
cf:93:2f:db:8a:7b:41:ba:4e:e0:c7:50:7a:d9:59:48:22:23:
78:dd:6d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:06:16 2025 by rpki-client