Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TxUZnAEcS0OKiqBmuqsKMcyTOhE.roa
File: TxUZnAEcS0OKiqBmuqsKMcyTOhE.roa (raw, json)
Hash identifier: 07VZsWgZeBFXuIvz8gQczmx5iurnunGGB+KDlxnmI1Y=
Subject key identifier: 4F:15:19:9C:01:1C:4B:43:8A:8A:A0:66:BA:AB:0A:31:CC:93:3A:11
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183BF35DDCB8F75F5C899BE69C58C74FAD4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TxUZnAEcS0OKiqBmuqsKMcyTOhE.roa
Signing time: Mon 10 Oct 2022 00:05:21 +0000
ROA not before: Mon 10 Oct 2022 00:05:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:183:bf35:b7ad/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:bf:35:dd:cb:8f:75:f5:c8:99:be:69:c5:8c:74:fa:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 10 00:05:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4f15199c011c4b438a8aa066baab0a31cc933a11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:24:1a:69:c9:93:0c:d1:3c:10:b8:95:b8:03:
67:d0:d0:35:64:7c:a1:35:0c:e5:b8:d2:00:e0:a7:
73:b8:a7:6f:38:d6:50:31:59:c2:76:fa:00:c5:d9:
3e:40:f0:fb:d3:ec:88:16:cf:c2:6f:4f:49:7e:c9:
6c:20:94:eb:9a:65:cc:f1:cf:57:b9:56:b3:1e:f8:
73:94:27:3f:ab:be:07:eb:f8:f8:d3:ff:a8:e7:be:
b7:d6:ac:7b:91:c0:5a:c1:48:6b:40:fc:34:95:e2:
a8:20:98:70:12:39:b9:85:93:6a:97:0a:08:54:41:
92:7e:e4:01:b1:09:59:d0:34:77:ae:ae:35:d4:1c:
5b:15:00:e4:1f:b0:ff:72:dc:26:75:63:b2:1f:57:
8d:62:6b:1f:71:03:e7:a9:23:1e:c5:01:7d:ce:ad:
1f:32:2b:5b:e6:78:91:7c:e3:87:9a:e2:f9:8c:70:
07:fb:3e:56:f5:71:9a:54:b9:34:49:fb:07:0d:1f:
10:10:39:fb:86:50:78:b0:f4:ea:71:12:a3:97:f4:
ce:a5:2e:f2:19:d5:43:2b:23:72:ef:6b:25:f3:89:
78:4b:a9:62:a1:ed:29:b9:1a:f5:79:c6:79:3a:b8:
25:29:73:f6:c9:fb:f4:40:dd:55:71:14:0f:de:d2:
5f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:15:19:9C:01:1C:4B:43:8A:8A:A0:66:BA:AB:0A:31:CC:93:3A:11
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TxUZnAEcS0OKiqBmuqsKMcyTOhE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8c:cf:bd:46:e1:54:b9:f4:65:c2:6b:3a:aa:1c:33:bb:94:ce:
60:72:b0:9c:31:49:00:69:9f:00:a7:d7:67:a0:3b:2d:09:21:
f4:0f:ca:85:3e:0c:ae:d2:83:8d:40:db:1d:82:09:08:a7:6a:
5c:77:4e:11:d0:8b:03:66:f5:a4:8a:71:d1:2b:5c:19:10:87:
94:5e:d6:4d:43:ab:41:2a:58:bc:37:28:41:ff:2b:d7:e1:23:
74:2f:e7:b6:0d:57:09:f4:92:9c:30:76:8d:dc:fc:83:83:07:
e0:43:d2:82:2c:95:2f:46:d9:ab:e8:31:53:a7:eb:f9:f1:80:
d7:25:c9:04:b2:7f:bf:50:39:04:d7:3b:f9:b9:2a:49:3a:68:
62:36:6b:36:de:8c:dd:43:fc:60:e9:e1:df:88:90:2e:be:5e:
08:c4:57:fb:13:d4:02:46:d4:e1:ab:19:a5:22:c0:85:f1:59:
7b:c8:40:e0:30:c1:6c:6b:94:44:35:cb:a2:24:8f:36:c3:95:
9d:80:17:d8:05:e5:65:48:3e:44:c8:6d:6e:da:e0:c8:39:46:
f0:82:4d:76:6a:a5:bb:a3:4b:52:ba:03:9b:88:a9:ec:07:a0:
a8:5f:c0:b4:e0:ea:f8:b0:f5:c5:b0:54:05:70:86:f3:62:58:
b6:fb:e0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 01:19:51 2025 by rpki-client