Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SiBxQMI7kEEsdcG0_fJY4rOM-q8.roa
File: SiBxQMI7kEEsdcG0_fJY4rOM-q8.roa (raw, json)
Hash identifier: myBsrCqK882Cw3mKYSuiM+xH5tt7d41AIyX1Ug3SUoY=
Subject key identifier: 4A:20:71:40:C2:3B:90:41:2C:75:C1:B4:FD:F2:58:E2:B3:8C:FA:AF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6AE2534E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SiBxQMI7kEEsdcG0_fJY4rOM-q8.roa
Signing time: Tue 15 Feb 2022 18:21:39 +0000
ROA not before: Tue 15 Feb 2022 18:21:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1793217358 (0x6ae2534e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 15 18:21:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4a207140c23b90412c75c1b4fdf258e2b38cfaaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8b:c0:80:55:78:7e:88:d5:ec:33:50:e7:97:
45:dd:8f:a6:df:93:9f:1b:0b:82:3a:e1:a8:8f:da:
b2:52:2a:24:a3:29:28:7b:70:78:17:28:1d:60:79:
94:97:f5:bb:ac:5e:8a:33:9a:9a:7c:11:94:85:a9:
41:ec:83:65:bc:ae:e9:0a:6b:49:27:79:ff:18:ac:
61:36:8f:c4:7f:8f:21:77:3a:7f:bd:f3:08:08:d3:
be:8e:ae:6b:6d:d5:ee:91:d7:ec:f4:be:23:e5:7f:
84:45:d4:19:9f:d8:cf:6d:86:cb:64:dd:dc:72:52:
b0:be:dd:9b:3b:9a:4b:0b:a5:17:a5:47:9b:8f:70:
1c:cd:24:cf:5a:37:45:70:11:46:af:de:7b:b9:8f:
2c:34:34:10:46:cb:ea:1d:6d:cf:97:b0:04:16:6a:
6d:33:5f:a9:1a:a3:3a:a5:5e:d4:6f:a8:b8:79:2e:
7e:33:73:1f:c8:d2:20:69:c0:d9:1a:87:c5:90:4a:
b8:95:e9:5f:c5:d9:f7:e6:69:0d:ae:b8:0c:cc:0c:
9c:e1:e2:d9:c1:fb:60:9d:11:16:b1:84:9f:9d:d0:
91:7a:5b:84:9f:70:e0:a7:86:09:97:c7:c9:af:7b:
72:4e:62:b9:1b:6e:7f:52:50:12:a0:a7:8b:71:b9:
bc:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:20:71:40:C2:3B:90:41:2C:75:C1:B4:FD:F2:58:E2:B3:8C:FA:AF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SiBxQMI7kEEsdcG0_fJY4rOM-q8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
57:e8:68:35:05:ed:56:99:ae:80:c2:63:d3:70:fa:5b:c3:4a:
80:10:dc:99:f1:15:a9:85:01:f6:26:c2:f6:0a:c6:29:f5:ae:
8a:b1:cf:be:fb:10:f2:1a:df:53:90:d2:8d:2f:33:58:73:f9:
a9:e7:46:9d:99:d5:69:e8:84:38:7a:04:b8:ce:51:51:48:71:
c7:31:dc:64:07:1a:25:4a:88:ca:58:05:2a:bd:05:b0:a2:0c:
75:d5:fe:58:6e:2c:08:b4:35:26:2e:af:75:b4:ba:f2:04:be:
3d:21:d7:4f:3a:ad:86:e4:8d:82:d8:01:1c:fa:21:6a:0e:cc:
33:c2:09:1e:5b:c8:16:d4:17:16:0f:bb:2f:cd:5f:f4:59:ce:
eb:0e:e3:2b:8d:4a:76:c7:2c:73:5d:88:f7:aa:23:8a:8f:08:
0d:f7:52:b0:5a:4e:03:98:20:e4:19:80:18:87:33:94:9f:b5:
bc:09:b1:9a:82:52:ab:19:5e:36:3a:da:ce:35:75:6f:0b:60:
01:f8:af:75:e8:de:60:80:94:a2:a8:62:d7:91:9e:86:ca:07:
bf:e6:82:b6:1f:4b:72:11:21:d4:06:3b:13:df:a4:fb:60:b8:
2b:c0:06:7d:d3:cd:ed:c9:bf:8e:9e:1f:d6:d3:9a:ee:0d:14:
8d:67:d9:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 18:00:39 2025 by rpki-client