Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/T2wN3nW13-xntLXaNFN59V6LbCs.roa
File: T2wN3nW13-xntLXaNFN59V6LbCs.roa (raw, json)
Hash identifier: 4OWuzYxnn+U5djOqYgCGUAZr79QWJr31myo2/wtjtCQ=
Subject key identifier: 4F:6C:0D:DE:75:B5:DF:EC:67:B4:B5:DA:34:53:79:F5:5E:8B:6C:2B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183FE87BCA7295079B809E5774A5E4C0375
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/T2wN3nW13-xntLXaNFN59V6LbCs.roa
Signing time: Sat 22 Oct 2022 07:10:52 +0000
ROA not before: Sat 22 Oct 2022 07:10:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:fe:87:bc:a7:29:50:79:b8:09:e5:77:4a:5e:4c:03:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 22 07:10:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4f6c0dde75b5dfec67b4b5da345379f55e8b6c2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b1:46:40:24:15:15:2f:88:4a:2e:22:fd:49:
e2:3c:a7:99:f9:8b:43:06:9d:aa:26:5f:16:5f:6e:
ae:e0:14:f9:fa:6a:6e:29:08:86:f2:e5:b5:a6:02:
28:3c:48:2f:79:f9:7f:36:3a:13:0b:dd:72:4b:cc:
61:b1:8e:7a:1c:e2:25:25:16:bb:57:72:20:cf:d2:
72:03:09:4f:d3:46:58:53:26:b8:bd:dd:73:27:45:
93:dc:19:06:53:9b:8a:b5:ee:0a:9c:42:28:0b:4c:
6c:72:49:d2:1e:04:ad:3d:ca:07:be:0e:f9:e9:27:
dc:bb:be:3c:13:07:8b:a1:48:f5:7b:53:fa:7d:9a:
54:dc:62:57:90:2d:1b:a4:92:91:ca:24:fa:27:e6:
dd:ff:5b:aa:21:a2:27:cf:da:dc:8e:a4:a6:72:ef:
bb:18:8e:81:47:d3:b6:e1:b0:d8:f1:d1:4a:f5:a7:
50:4b:ce:33:a3:6e:7f:16:80:3d:f2:09:e7:d1:6a:
ff:54:9a:ab:3d:d3:83:3f:98:11:b6:ce:ca:71:5a:
63:e2:8b:3c:fa:95:46:d6:7a:c4:08:dd:e0:05:44:
ab:80:19:33:a4:5f:87:e5:6d:98:45:5c:a6:d1:59:
ca:f3:3e:04:c1:08:1c:f4:34:74:c6:ed:3b:fe:70:
88:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:6C:0D:DE:75:B5:DF:EC:67:B4:B5:DA:34:53:79:F5:5E:8B:6C:2B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/T2wN3nW13-xntLXaNFN59V6LbCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6f:64:4d:92:26:f9:ea:f7:19:e6:9f:39:9f:e8:e0:cd:83:e3:
47:53:76:48:d6:56:2d:d4:a6:36:6b:fe:8d:39:a0:25:77:3a:
cd:1f:d2:e0:de:01:fa:05:4f:9a:13:5c:14:27:fd:4c:32:bb:
08:0a:f0:52:18:ed:eb:0b:24:10:a0:14:dd:8e:22:9b:df:68:
af:1c:9c:d4:4a:72:69:8e:60:cb:59:e2:79:68:c5:f2:10:1d:
bb:4e:e1:5b:8a:dd:21:ce:e9:3e:5c:ae:06:1b:34:f6:91:35:
3d:52:8d:17:89:a0:3a:3d:d5:65:6d:0a:57:9e:9b:df:26:7b:
0c:7b:e3:e5:14:32:65:ec:73:bf:5b:6f:4d:ee:06:65:50:9f:
da:b7:be:42:b6:9d:3b:67:09:29:9d:fc:61:b0:b8:a3:bb:d0:
74:e2:69:de:c0:97:30:34:1c:f8:f6:91:f9:e2:4f:5e:4d:ae:
af:5e:47:40:38:a6:1f:f0:d1:e9:c2:f7:60:80:04:95:19:df:
e6:bb:a4:e3:d5:64:32:90:c6:e7:6f:5f:7c:23:21:07:4d:eb:
af:10:4e:c8:d8:af:7a:f9:c1:e0:34:fb:fe:28:dc:7e:60:3e:
7a:3a:1d:30:f6:a2:6a:01:b6:42:42:8b:1f:18:b4:ff:04:6b:
a7:2c:d8:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 13:47:46 2025 by rpki-client