Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SpDTKFxn0FlDSfLfj2aONYNDV1o.roa
File: SpDTKFxn0FlDSfLfj2aONYNDV1o.roa (raw, json)
Hash identifier: 33pqJYw+QMHIKCVxA05EG6uslcqyFSu1tMUNQEXTBro=
Subject key identifier: 4A:90:D3:28:5C:67:D0:59:43:49:F2:DF:8F:66:8E:35:83:43:57:5A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01845161E94E4E0E75866BFF5A00BCDF269C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SpDTKFxn0FlDSfLfj2aONYNDV1o.roa
Signing time: Mon 07 Nov 2022 09:18:01 +0000
ROA not before: Mon 07 Nov 2022 09:18:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:51:61:e9:4e:4e:0e:75:86:6b:ff:5a:00:bc:df:26:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 7 09:18:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4a90d3285c67d0594349f2df8f668e358343575a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:51:ce:f5:66:c2:40:14:09:cc:b7:e4:86:ea:
22:56:f6:63:15:60:1a:4c:02:3f:08:94:89:aa:5c:
21:ba:86:bf:ef:01:13:10:67:1a:66:13:42:56:23:
ce:30:fa:6d:4b:bd:28:e3:5b:fa:78:cf:ef:2d:43:
72:f9:aa:92:da:9b:c0:9b:77:e5:21:b5:15:90:89:
6f:81:e5:0f:d9:a8:70:e4:03:e5:8d:87:6e:5d:24:
32:8e:2c:df:ac:8c:28:1f:fa:10:4b:1b:5b:88:29:
11:14:1b:d4:31:ca:59:0d:8e:f3:82:65:de:fd:f8:
4b:a3:fd:3d:d0:46:5c:b4:b3:b9:9f:73:92:5f:cf:
41:80:83:07:07:c7:1e:7f:aa:86:8f:c3:31:af:54:
d4:cd:cc:71:ea:b0:6c:e9:dc:eb:ad:e8:e6:c7:74:
ae:d7:55:ff:ca:c1:fb:0d:cf:40:1d:19:a9:b7:d6:
b4:32:db:84:3b:da:5c:e5:e9:aa:ff:86:37:26:d9:
d3:cd:1a:6b:71:05:18:a4:dd:d0:92:50:e8:3c:07:
92:e0:5e:08:fa:8a:9c:38:b5:99:b7:ae:dc:1d:11:
87:68:cc:a9:38:a4:47:37:1d:00:2c:30:b7:8a:33:
bc:20:a7:08:3e:e9:6e:2d:a9:bb:9e:19:71:70:a1:
b6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:90:D3:28:5C:67:D0:59:43:49:F2:DF:8F:66:8E:35:83:43:57:5A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SpDTKFxn0FlDSfLfj2aONYNDV1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
28:2d:57:a4:96:81:b7:c0:e7:22:1a:71:ad:c2:21:d1:53:aa:
ec:56:0d:98:13:6a:1d:fd:8c:c8:ac:09:2e:5d:b4:21:5f:c6:
89:95:ce:f4:58:c9:db:ed:69:49:34:1a:04:b2:aa:f1:28:37:
81:67:41:c1:36:fe:da:c9:3d:82:21:b7:ef:af:d4:d8:a1:43:
35:1f:b6:9c:74:1e:78:cd:8f:51:67:58:1d:66:b8:fd:a0:6f:
77:27:da:98:f6:2e:9c:be:8f:6e:d4:dc:ec:9c:5b:b3:ca:88:
38:9f:51:fc:19:55:30:da:b9:14:17:3a:28:1e:b9:08:c6:29:
5a:c9:9c:a0:cf:80:87:fc:b2:63:9b:15:b1:4c:d9:17:68:c6:
c7:73:12:5b:04:91:9e:ca:f9:05:12:b0:e7:d1:9d:b8:38:37:
66:7b:77:02:e4:e3:0a:db:ab:02:59:74:b6:16:a4:e3:16:d9:
ac:de:88:48:5e:43:3c:2b:f3:b4:a2:08:9a:29:89:2e:bc:38:
d5:85:1a:a1:24:23:29:18:72:98:af:0a:24:ff:d1:d7:ad:31:
2f:da:3a:6f:45:b4:99:33:e3:07:72:b1:c3:d1:a8:72:d7:1a:
16:c4:89:72:03:65:64:22:74:69:5a:4b:ec:47:f0:5c:09:30:
e8:30:c8:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:10:16 2025 by rpki-client