Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_26oMCQYMuL7jDKGNoSIHV6-9f4.roa
File: _26oMCQYMuL7jDKGNoSIHV6-9f4.roa (raw, json)
Hash identifier: dG2IJkCUlUYFVdGPhDji/6fvPktrUN7ZHyTSec4rxjw=
Subject key identifier: FF:6E:A8:30:24:18:32:E2:FB:8C:32:86:36:84:88:1D:5E:BE:F5:FE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 795CA5CF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_26oMCQYMuL7jDKGNoSIHV6-9f4.roa
Signing time: Thu 07 Apr 2022 22:09:46 +0000
ROA not before: Thu 07 Apr 2022 22:09:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2036114895 (0x795ca5cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 7 22:09:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ff6ea830241832e2fb8c32863684881d5ebef5fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:32:19:50:d9:6a:65:dd:51:2a:08:d4:96:e0:
e3:8c:03:e8:79:02:77:bb:33:bf:35:70:b9:2d:7d:
25:e3:a7:97:0d:35:46:1f:ff:ad:8e:66:3a:8b:0d:
8e:e7:32:b7:fa:0f:5a:94:4b:e7:0f:30:66:2c:3c:
24:13:40:c0:70:11:1d:cc:de:2a:1c:d6:5b:30:a2:
59:42:76:51:2a:88:63:81:b3:70:54:42:d7:33:a6:
4d:e7:67:40:54:21:28:27:b5:f3:64:63:31:68:59:
78:ea:e3:f8:d8:17:0a:6b:4a:9d:6f:4c:97:75:77:
37:e1:5b:f9:eb:11:87:c1:03:83:e4:1e:eb:bf:69:
85:5b:25:cc:fd:1d:e9:a3:52:53:b9:34:c6:29:25:
d8:2d:e1:b8:39:36:ac:14:2d:b6:24:55:65:84:34:
25:57:8a:f1:4a:5e:52:d5:21:a4:7e:3a:44:40:9a:
c6:f0:92:7d:a4:01:2b:ce:7a:22:37:9c:70:c2:5f:
95:a6:fd:04:a0:01:39:1c:23:1e:5a:bc:b4:51:c1:
64:49:61:43:49:ff:f0:2e:a2:cb:8c:48:7b:dc:1c:
45:f2:ac:59:82:01:ba:ab:c0:f4:29:d1:b9:70:b2:
bd:fd:6d:a5:e2:34:7b:25:de:21:5c:be:29:b3:08:
1b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:6E:A8:30:24:18:32:E2:FB:8C:32:86:36:84:88:1D:5E:BE:F5:FE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_26oMCQYMuL7jDKGNoSIHV6-9f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1a:c2:d1:39:c0:c9:32:0c:b6:ac:90:ce:44:35:9e:55:a7:f7:
3c:1b:61:ba:99:86:22:1e:4a:92:bc:97:ff:7d:7c:17:14:17:
50:d4:27:a3:57:07:2b:e4:26:07:ad:c2:0a:5d:0b:53:68:89:
4c:ae:ac:57:65:2f:c9:8e:fa:8f:de:27:a0:c5:2c:ed:6d:c5:
62:28:9a:0d:d5:9e:ba:28:02:10:4b:c8:b2:6e:72:44:dd:18:
c9:27:75:0f:d3:1d:39:8f:9e:36:9e:3d:67:97:ff:5c:16:14:
12:98:20:d5:e8:0d:8d:c0:b9:dd:b5:82:b5:af:0d:07:ed:48:
b8:bd:53:82:44:6d:84:8d:35:f6:7b:1c:74:e9:94:ca:ef:32:
b6:04:73:07:06:a8:c7:de:1f:32:42:54:42:cf:1f:8c:31:5d:
d6:a1:e5:dc:11:9a:5a:ec:90:81:95:f8:7a:b3:8d:a1:57:ef:
af:a0:9c:d6:9d:2e:46:e2:b3:30:77:52:05:bf:92:be:9b:67:
f9:08:83:af:ef:e8:f5:b3:05:01:cf:c5:5c:7c:36:a8:32:9f:
5f:bf:dc:fb:d2:88:4f:17:41:96:35:e3:ca:14:0b:e3:22:7e:
cc:58:00:1b:61:a6:49:87:b9:5f:af:98:96:22:ef:eb:6b:1b:
5e:ea:c4:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:19:54 2025 by rpki-client