Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_LEmi2rAm1pHwk0l8wXixBDkQh4.roa
File: _LEmi2rAm1pHwk0l8wXixBDkQh4.roa (raw, json)
Hash identifier: b+onzlbgMsw/OKuS/dqT8gkoIl/o6xbofvWFzEr0t8Q=
Subject key identifier: FC:B1:26:8B:6A:C0:9B:5A:47:C2:4D:25:F3:05:E2:C4:10:E4:42:1E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7DB4F402
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_LEmi2rAm1pHwk0l8wXixBDkQh4.roa
Signing time: Sat 23 Apr 2022 03:11:41 +0000
ROA not before: Sat 23 Apr 2022 03:11:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2109010946 (0x7db4f402)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 23 03:11:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fcb1268b6ac09b5a47c24d25f305e2c410e4421e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0b:d5:ad:e1:ae:30:e6:8f:c1:b9:d2:c4:b3:
9f:36:21:51:ee:b0:85:38:13:ed:d9:92:d3:16:31:
1f:cf:f1:d1:e5:bd:8e:78:22:15:e0:8d:04:28:af:
e5:90:b0:ac:f3:ff:9e:b7:9d:65:dd:59:10:80:f7:
8e:44:74:ed:09:36:29:d3:d7:09:2b:b5:62:3d:c7:
1a:0f:d2:07:c4:c1:63:76:6d:9e:1f:c3:a0:78:29:
ec:52:f0:af:60:e5:dd:01:e4:b3:85:18:f0:35:2f:
b1:d0:a0:ce:16:d4:ec:af:ae:03:84:d5:26:90:5c:
e3:94:0e:30:4a:ed:ca:2e:4c:25:ca:c5:d3:27:c5:
39:86:fe:c2:d6:5c:8a:fb:fc:a7:ad:62:d0:62:e4:
34:ef:d3:89:3f:37:0e:70:ac:5a:e4:21:c7:05:f4:
b6:ff:03:7a:46:c9:f3:d9:4d:2d:29:b9:84:9a:46:
b8:63:46:79:7c:89:58:c4:56:f9:21:d8:d5:80:0a:
b5:d0:05:db:df:72:44:74:8b:a0:fe:99:57:35:8f:
da:aa:19:e3:08:56:b4:a2:d1:34:cb:24:30:2b:9d:
0b:3c:5c:f1:80:d4:a6:90:b9:ae:2b:50:64:e6:6c:
5d:e7:2e:18:fb:49:53:fb:8b:f0:46:35:a6:a7:fb:
4f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:B1:26:8B:6A:C0:9B:5A:47:C2:4D:25:F3:05:E2:C4:10:E4:42:1E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_LEmi2rAm1pHwk0l8wXixBDkQh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7f:fe:9c:28:96:12:be:d4:d5:a6:fc:55:7b:a0:30:ef:70:b0:
66:9e:f6:05:2f:80:1c:f6:7d:4c:c8:39:69:34:5b:0e:71:88:
03:23:07:29:46:87:96:3a:0f:09:0d:e5:88:1d:c3:8c:ba:29:
01:dc:7b:5c:89:50:18:1f:75:97:75:19:b8:eb:73:94:d2:56:
bc:c1:ed:0b:d4:10:e9:3e:95:5a:89:64:c2:7b:3a:59:8d:0f:
f3:4f:56:03:f4:5f:5c:7a:62:b0:4c:03:8d:98:49:10:73:01:
0d:fe:ee:77:1a:83:13:47:19:de:e1:70:21:84:51:fa:c8:d6:
c2:ff:18:02:b5:1f:f9:2e:57:d4:73:44:9f:fe:27:70:f3:71:
be:e8:d5:7f:db:2a:34:66:04:5b:7b:d4:f8:d7:5d:4d:75:9c:
a4:09:a2:75:27:18:f6:38:5e:38:8f:96:f2:b8:d5:30:f3:52:
e2:a7:5a:bd:d9:30:f2:2d:bc:9d:51:b2:97:e7:62:c3:a2:9f:
0f:7f:4d:cf:48:29:b9:9f:e6:74:ee:e3:ae:d8:42:10:41:18:
da:70:03:fc:04:e7:d3:cd:45:76:2e:d5:c9:5f:5c:57:b8:9b:
6e:bb:85:0e:6a:38:71:e9:ed:6f:cb:dc:91:fb:1d:89:39:71:
e3:21:d4:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 15:24:46 2025 by rpki-client