Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aAc-wTlDGc9zROQX1UwxUc8DqpI.roa
File: aAc-wTlDGc9zROQX1UwxUc8DqpI.roa (raw, json)
Hash identifier: n9Pl1Ddi4N3NX7IqjBlvsNBGRDBzbAfVmhZXW26zgWc=
Subject key identifier: 68:07:3E:C1:39:43:19:CF:73:44:E4:17:D5:4C:31:51:CF:03:AA:92
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183C49C88D9D38974FF6B517ED46EA69609
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aAc-wTlDGc9zROQX1UwxUc8DqpI.roa
Signing time: Tue 11 Oct 2022 01:15:36 +0000
ROA not before: Tue 11 Oct 2022 01:15:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c4:9c:88:d9:d3:89:74:ff:6b:51:7e:d4:6e:a6:96:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 11 01:15:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=68073ec1394319cf7344e417d54c3151cf03aa92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:85:fe:3c:3a:fc:7a:50:ca:76:6a:83:e4:9f:
ac:2a:1d:b6:f7:7b:02:0f:cc:4f:b9:29:b0:90:50:
1d:fc:65:a8:8e:3d:ca:f7:f8:a0:9c:8d:d6:bf:92:
25:57:13:af:76:85:56:fc:22:f0:93:fd:67:09:c8:
fc:6e:ee:6e:1c:2e:b7:88:fa:20:ea:d5:13:3e:2d:
4c:aa:05:a9:a9:19:73:b1:a8:c1:b3:a0:61:c0:3a:
99:0a:d8:41:a7:84:3e:4d:a2:c5:15:bc:d5:bc:23:
6c:3d:d5:c4:14:61:49:39:a5:b5:8c:de:6c:99:03:
f3:1a:49:0d:52:c6:1a:75:2d:e5:c6:44:55:81:af:
ed:65:bf:d3:ca:bd:ea:ff:d9:47:91:dc:d0:03:a3:
b3:f6:55:b2:85:df:4d:38:1b:61:70:36:38:5d:82:
7b:ba:4d:72:85:31:b0:f4:70:50:b0:b3:19:f5:ce:
02:08:10:15:87:95:ed:c8:dc:a4:a8:38:ae:0e:cd:
5e:c2:c5:3f:3b:47:a4:9e:cc:18:65:16:08:7d:50:
9b:3f:2c:dc:6a:3b:14:ae:b6:5e:fb:ba:af:18:d1:
19:bd:21:68:b4:11:f0:fa:e5:55:45:c7:28:da:49:
4a:c3:3d:a6:4c:18:61:3b:e4:c2:c7:b8:ac:7a:46:
c9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:07:3E:C1:39:43:19:CF:73:44:E4:17:D5:4C:31:51:CF:03:AA:92
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aAc-wTlDGc9zROQX1UwxUc8DqpI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
56:9b:bf:15:ce:2d:0c:c6:e0:b6:a4:f0:c5:4a:b1:2f:22:be:
d0:9d:f6:d9:9f:48:70:92:d5:d4:98:b9:59:65:04:3b:47:49:
f3:e8:85:43:70:ee:e7:49:c8:3d:a1:4c:52:78:30:33:b3:a4:
07:da:1f:d1:43:c7:88:bd:50:49:4e:e7:8c:1f:49:d5:25:b1:
49:5f:2b:88:92:c6:ee:ca:32:48:55:a9:6f:aa:a2:a5:0d:3e:
9b:d6:b2:ce:3a:f2:3c:1e:50:72:88:fd:43:db:b5:15:c3:9f:
d8:23:23:d2:8f:6a:83:bb:0c:8d:3e:b0:97:94:6f:96:9d:58:
4c:28:5d:f6:10:a6:96:82:b0:fb:11:39:5b:26:40:5a:58:c3:
d4:c3:8b:9f:d6:75:34:a5:33:fa:de:ed:ed:b3:36:e9:8d:27:
6e:ae:a7:ca:e6:e5:5a:27:16:ab:0f:cd:cf:f8:e1:35:26:ab:
6a:32:72:c4:a0:28:2f:ec:ae:1a:87:47:ba:92:11:1f:a8:dd:
2d:51:13:4f:43:99:2f:b2:98:6d:62:ba:3f:d4:6f:89:61:ca:
0a:11:c3:15:37:a2:4a:44:fa:a0:1d:27:fb:08:95:0c:90:68:
98:95:df:9c:a7:1b:c3:a9:12:83:43:f1:96:13:33:e5:39:8a:
72:05:d0:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 18:43:33 2025 by rpki-client