Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aIfw0caUK1UoW7y8qU2Cq9V2dfo.roa
File: aIfw0caUK1UoW7y8qU2Cq9V2dfo.roa (raw, json)
Hash identifier: QPROJ8LVAoKpeU+RYqIbIX4WispRix3z1giNvNy6npI=
Subject key identifier: 68:87:F0:D1:C6:94:2B:55:28:5B:BC:BC:A9:4D:82:AB:D5:76:75:FA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 912B03B5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aIfw0caUK1UoW7y8qU2Cq9V2dfo.roa
Signing time: Thu 30 Jun 2022 12:11:03 +0000
ROA not before: Thu 30 Jun 2022 12:11:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2435515317 (0x912b03b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 30 12:11:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6887f0d1c6942b55285bbcbca94d82abd57675fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:2c:e0:f6:ae:6d:d5:96:fd:af:b6:ef:3d:f8:
28:f0:d9:34:1a:e8:58:52:1e:13:54:3b:34:5f:21:
17:b4:a1:a5:af:8d:a4:9c:5a:32:43:ff:bf:78:ae:
d1:26:f9:94:97:d5:0e:13:52:82:7a:03:f0:89:b2:
8b:d5:a3:0c:c7:94:25:00:2f:d3:7f:e9:ed:11:2f:
55:eb:42:d2:36:b0:10:33:72:63:ba:5c:c1:b9:9d:
39:13:b2:62:c8:e7:b5:05:88:a9:b3:73:eb:e3:85:
84:b7:5f:81:ba:44:00:c5:9d:4d:f6:00:13:97:c6:
a0:80:bf:a0:e0:f7:00:8c:6d:5e:ab:a0:9b:1c:89:
be:5b:7e:7d:a1:e8:48:a0:8d:56:89:9d:5d:c9:3e:
24:94:d5:5e:2f:5e:43:ce:34:09:02:3a:24:1c:c8:
61:96:67:f7:a9:2d:1e:a0:e6:c9:3f:f1:94:14:af:
c7:ad:30:2a:b8:ea:5a:e6:f1:49:ec:ff:c0:ab:9b:
49:73:a1:7f:fb:d9:44:b5:1b:d6:90:10:a0:5b:bc:
dd:e7:57:60:0f:86:e9:74:8d:e0:0a:45:ff:c8:8e:
cd:ab:ee:61:e4:b6:fc:0d:3e:15:40:f3:c4:f0:62:
44:a8:f0:a7:59:5c:c0:6b:d9:e2:21:ee:df:cf:e0:
65:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:87:F0:D1:C6:94:2B:55:28:5B:BC:BC:A9:4D:82:AB:D5:76:75:FA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aIfw0caUK1UoW7y8qU2Cq9V2dfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a9:ad:4d:8f:da:5a:3f:80:55:41:5f:ee:ab:5a:cd:e3:bc:ab:
58:0e:1d:b3:ca:6e:7b:05:d1:0d:c5:e6:19:4f:6c:c1:46:ed:
58:fa:82:bb:e8:ab:3f:1f:23:c3:1e:99:c7:66:c4:77:75:78:
5c:7a:d4:71:fe:53:fd:9b:ae:89:92:83:4a:3e:1f:34:7c:8d:
d1:2e:71:55:da:a8:3c:bf:b1:a8:55:3b:34:06:15:40:48:3b:
84:59:a2:c7:26:6f:1f:6e:d0:18:58:3d:52:59:19:4d:85:60:
57:5d:c7:d5:31:37:87:f8:a9:95:9a:a1:c9:26:15:0e:ba:43:
d8:bd:bc:51:a9:7e:3f:e9:1d:96:e5:42:7d:bc:8a:74:ea:6f:
56:df:c1:9c:63:45:2c:15:87:3b:c7:6d:f2:1b:63:34:fa:ee:
c1:4c:e3:29:a3:0c:e9:d9:13:60:2f:5a:7c:5f:c3:57:cd:31:
95:b2:9b:13:4d:e4:a1:44:5d:3c:11:bd:d5:cc:0a:91:80:07:
6b:f8:1c:7a:13:9b:56:95:6e:08:b0:a9:b2:2e:a1:a1:59:ae:
e8:63:3b:81:b0:4d:a9:4b:91:ec:96:5b:4b:c8:92:54:08:e6:
b6:4b:c5:34:bd:90:a9:c0:1b:b2:eb:ac:88:90:98:bd:98:ba:
66:8b:aa:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 04:53:01 2025 by rpki-client