Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Sx3FyCq3GWagZHHW2t8XFg8flII.roa
File: Sx3FyCq3GWagZHHW2t8XFg8flII.roa (raw, json)
Hash identifier: aBW8t0uYcvnzt1OflD4C3wbjc59n3KH+lukoaD3Q7R8=
Subject key identifier: 4B:1D:C5:C8:2A:B7:19:66:A0:64:71:D6:DA:DF:17:16:0F:1F:94:82
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185B43EA9FA36AA89D6ED6757E7283C7AE2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Sx3FyCq3GWagZHHW2t8XFg8flII.roa
Signing time: Sun 15 Jan 2023 07:04:43 +0000
ROA not before: Sun 15 Jan 2023 07:04:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:b43e:376c/128 maxlen: 128
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:b4:3e:a9:fa:36:aa:89:d6:ed:67:57:e7:28:3c:7a:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 15 07:04:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4b1dc5c82ab71966a06471d6dadf17160f1f9482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f7:8c:ac:23:e3:9a:71:0a:d6:a1:f4:60:e7:
40:84:af:50:2f:89:31:a4:2b:50:52:7a:99:10:a3:
1c:66:96:6b:80:88:6c:36:be:de:f9:34:db:60:4e:
be:51:f9:81:2d:8f:3b:70:f8:ed:05:f7:02:13:0a:
2b:a8:c4:d1:f9:05:90:43:25:9f:fd:d6:1e:fb:c7:
9a:b4:8d:a0:7b:62:c3:c4:39:bc:66:81:26:44:4a:
7c:b8:7a:ac:40:2e:04:1d:fd:9d:4e:8b:1c:6c:d9:
e5:15:c8:75:43:0a:ac:54:7b:e2:9b:e6:e3:e8:88:
95:3e:31:9a:24:b9:13:41:10:4f:0e:62:2b:de:30:
f9:14:7c:f6:e3:e0:e9:0b:15:2e:85:be:47:a0:36:
2b:9b:47:f6:68:19:56:18:7f:f4:b1:5b:b3:2c:db:
5b:31:81:0d:ae:9c:0b:f3:d1:4a:78:54:ba:5e:26:
76:97:33:a4:4e:5e:2a:62:d0:2e:1a:b1:b8:d2:47:
d5:cf:7d:b9:89:ab:f8:49:15:57:17:81:7f:56:78:
c6:42:42:9d:98:34:55:39:72:19:c0:f3:d8:06:90:
05:a9:06:9b:c7:6f:1e:1e:45:c6:be:ca:92:75:6b:
9d:d6:f7:fc:6c:b1:c0:2e:85:9e:6e:77:df:1e:27:
c7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:1D:C5:C8:2A:B7:19:66:A0:64:71:D6:DA:DF:17:16:0F:1F:94:82
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Sx3FyCq3GWagZHHW2t8XFg8flII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
97:ca:79:cc:b4:73:f9:9c:d2:3f:57:8a:b0:2a:80:72:c5:2d:
87:6d:a1:49:d9:63:a2:03:5f:e4:7b:e8:15:46:8d:01:f8:e1:
3a:3d:9b:f8:ef:e2:71:cb:c7:8d:99:a3:37:d6:9b:43:04:6f:
98:ff:ad:91:d7:3d:a9:b1:af:8b:7a:81:95:03:27:dc:90:c0:
de:f2:67:82:29:6e:23:40:7e:c0:43:7d:be:86:2d:99:7c:6a:
ad:26:f6:77:d9:74:c5:61:6c:6f:77:b2:e2:f2:3e:91:df:28:
f4:e2:19:4e:dd:29:14:21:e3:68:64:20:e8:5c:95:da:93:bd:
ee:8d:c2:b9:ee:bc:fb:d2:0f:86:4b:e2:12:2c:df:b0:75:50:
7f:41:ee:86:00:2e:18:c7:9a:75:a8:61:45:93:d6:7e:81:50:
48:46:04:d8:6a:59:52:6a:5d:b6:8f:de:52:fe:8e:34:78:e8:
2d:b8:7a:ec:c9:8c:3c:c3:d2:d0:af:7a:6c:a8:28:ec:21:c0:
51:87:b8:96:59:d8:7c:4b:0c:4a:41:a6:93:0a:72:2d:7c:57:
fa:35:88:ce:b6:41:d9:5d:8d:a4:63:d0:7e:8a:f1:ca:39:12:
9a:17:f7:16:7c:b8:08:d0:60:e9:98:40:3a:8d:ae:ba:49:ad:
ae:71:60:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 07:07:13 2025 by rpki-client