Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TI6m5iKUoP0BxRoKzX_nJ_4Rp2k.roa
File: TI6m5iKUoP0BxRoKzX_nJ_4Rp2k.roa (raw, json)
Hash identifier: DNWaU2pW5DzSWUzhA94R7cUO7lWLSroFEXEDm8vhE+Y=
Subject key identifier: 4C:8E:A6:E6:22:94:A0:FD:01:C5:1A:0A:CD:7F:E7:27:FE:11:A7:69
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185C49691DD3CF7E84812E694DC0CFD0766
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TI6m5iKUoP0BxRoKzX_nJ_4Rp2k.roa
Signing time: Wed 18 Jan 2023 11:14:40 +0000
ROA not before: Wed 18 Jan 2023 11:14:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c4:96:91:dd:3c:f7:e8:48:12:e6:94:dc:0c:fd:07:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 18 11:14:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c8ea6e62294a0fd01c51a0acd7fe727fe11a769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e9:e0:b1:df:5a:0e:1e:46:04:c2:2d:fa:88:
dd:c2:fa:9c:01:17:e9:b0:8c:01:18:8d:06:52:82:
42:87:5d:5b:0c:60:39:db:bb:96:04:22:9a:2a:9a:
e3:25:c2:54:31:24:64:82:63:61:26:88:00:95:c5:
be:4b:6f:6f:f9:75:79:44:d9:45:df:fc:f2:51:1b:
9b:70:a6:ac:b4:79:b4:29:78:3b:68:57:9d:30:4c:
9e:5a:0e:a7:aa:75:68:d9:f0:b9:69:aa:9c:d8:57:
d8:0b:ba:15:e1:ba:00:ac:97:43:4e:45:c0:f7:28:
a4:05:31:b1:d7:62:a6:68:47:94:83:a8:38:dd:a0:
f0:d5:b2:4d:e2:97:26:56:fd:47:15:63:8b:d0:28:
51:82:ea:a9:8f:d6:3a:fc:7f:7d:4a:84:3c:d0:54:
64:a0:b1:ef:f1:47:cd:07:0d:23:dc:3d:74:c0:d3:
b3:0e:d4:a0:b0:5d:75:99:2a:c1:5c:3c:ed:8d:aa:
ba:01:d5:98:d5:e6:f3:52:58:09:2a:f7:3c:9e:f5:
7a:84:4d:e2:c8:95:00:bf:dd:e7:03:f0:85:21:b7:
82:3d:00:4d:f8:8a:67:23:a1:71:25:2b:38:1f:19:
78:46:f3:23:95:d8:60:a2:13:e7:2b:c2:28:b8:00:
5e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:8E:A6:E6:22:94:A0:FD:01:C5:1A:0A:CD:7F:E7:27:FE:11:A7:69
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TI6m5iKUoP0BxRoKzX_nJ_4Rp2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9d:08:b1:66:46:e4:94:89:ca:5b:5f:28:b5:a0:93:0c:a2:73:
18:cb:f4:a6:29:30:1e:a8:2a:82:df:9f:3f:0d:f6:89:37:99:
10:34:c0:39:99:52:b4:0f:1e:25:aa:07:3a:bf:24:a3:a8:ee:
91:b4:44:2f:c6:bd:92:7e:94:62:ce:c4:57:29:d1:da:2d:5a:
d8:82:bc:59:d5:11:9a:b7:8b:6a:26:4d:68:f2:35:a7:f7:b2:
67:13:0c:71:c9:ab:f2:96:02:d9:f4:0e:29:4a:bd:35:8a:5c:
cf:6d:d5:ed:e5:e6:ca:40:a5:95:9a:2f:89:5c:ac:17:26:80:
f7:7f:b0:d3:18:2c:3f:43:f4:a5:ea:78:ae:cf:ab:9f:ac:e1:
3b:db:44:67:c3:2a:97:3e:6a:b5:de:9f:30:42:95:25:73:dd:
f6:2c:4d:bf:71:f2:ae:42:cc:74:ee:77:e9:ba:7a:09:a8:44:
4c:f5:08:28:9a:7a:0a:6a:22:07:8b:45:5e:67:d4:df:36:10:
93:9d:78:ad:4a:9d:22:07:9e:eb:da:8c:4a:b7:3d:7a:09:b7:
ac:73:61:df:1e:f8:0e:95:c4:a4:5b:b4:1a:f1:97:6e:d3:45:
11:94:fa:6f:6b:41:18:f9:75:2e:81:d9:15:59:4a:31:87:0b:
9d:f4:45:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 00:02:58 2025 by rpki-client