Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aKk1wEeUN9AJXQ46tDgXMkWOa_E.roa
File: aKk1wEeUN9AJXQ46tDgXMkWOa_E.roa (raw, json)
Hash identifier: zVIwLepM9DDlQltHwWb1AOAV+tgpP3EXNYxQ9PwJEvg=
Subject key identifier: 68:A9:35:C0:47:94:37:D0:09:5D:0E:3A:B4:38:17:32:45:8E:6B:F1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183C84349953F613C0C68FF82AE23F9803E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aKk1wEeUN9AJXQ46tDgXMkWOa_E.roa
Signing time: Tue 11 Oct 2022 18:16:36 +0000
ROA not before: Tue 11 Oct 2022 18:16:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c8:43:49:95:3f:61:3c:0c:68:ff:82:ae:23:f9:80:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 11 18:16:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=68a935c0479437d0095d0e3ab4381732458e6bf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:13:09:30:70:49:95:10:35:94:ef:cc:53:d4:
57:ef:89:29:e3:26:67:83:d4:ec:db:8c:ea:76:c9:
1d:22:e7:7a:85:09:19:bf:fb:32:81:19:8e:e9:b1:
bf:c3:9a:63:bb:58:74:fb:eb:18:e7:6d:92:f2:09:
84:06:34:a9:70:14:89:ba:0a:91:62:82:ce:02:bd:
9f:40:e7:6a:ea:94:b5:bb:d3:7a:c8:07:d9:74:4b:
ee:5e:ca:6a:4d:f3:02:52:b4:48:9b:3f:79:e7:43:
d4:2a:c3:ba:ca:45:5c:0d:4b:58:4f:d6:98:a1:fe:
09:00:ef:11:b1:9a:9b:14:5c:a4:3c:f5:ee:f3:c3:
e9:2e:d6:67:57:3f:6b:77:44:c1:74:80:3b:d0:64:
e5:09:a0:f1:ee:8f:f6:d4:d2:2c:a0:c1:f5:d8:63:
ee:e9:ca:c2:42:de:f0:b4:66:e4:c7:55:e5:ae:bc:
1e:d9:b9:52:36:a1:4a:5b:18:0b:d5:58:b4:97:3e:
08:93:70:63:84:62:9c:42:d3:48:82:69:72:b2:71:
4e:84:53:2f:ce:76:66:f8:ef:20:46:cc:7f:3a:96:
a4:44:1a:22:58:05:cd:ba:80:39:79:dd:fb:0f:fa:
36:d9:8f:be:f5:f5:b0:55:a1:89:84:66:6a:cb:c9:
af:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A9:35:C0:47:94:37:D0:09:5D:0E:3A:B4:38:17:32:45:8E:6B:F1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aKk1wEeUN9AJXQ46tDgXMkWOa_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
50:f8:c5:94:86:1e:25:8c:8e:52:43:9e:77:c0:42:d5:ab:13:
2c:45:11:79:74:04:d2:6e:16:07:24:6e:98:de:57:64:c8:84:
9f:54:09:6f:36:ea:51:cb:fe:55:b8:98:53:4b:b8:34:12:1c:
14:46:9f:50:5e:a4:aa:ba:28:ea:db:4d:d1:1a:d6:c2:a7:23:
db:cf:33:c1:26:cf:b5:d3:48:48:e1:5d:a6:de:8c:e9:37:5c:
67:86:0c:e3:9a:1d:8a:ae:bd:8b:90:28:9e:80:99:2e:a5:b1:
d4:c5:16:9a:fa:cb:5c:34:09:05:d0:a1:b2:9b:13:be:df:c8:
50:2b:ac:e6:0b:07:4c:8e:fa:3f:e5:b6:fc:32:cf:a9:f6:46:
2a:ea:2f:7e:d2:94:37:9b:47:e9:4d:a4:81:04:d2:e2:b4:6f:
80:80:c7:f1:e2:da:c3:a7:e8:73:a6:4e:51:d0:f3:ac:22:1a:
39:e8:8e:07:53:47:3b:f4:44:32:91:1f:37:7d:75:36:15:c1:
f9:10:93:cd:b3:ef:b6:6c:aa:2a:79:27:d5:6a:92:18:3f:e3:
ac:89:a0:fd:fb:f6:13:ef:48:6d:67:3b:25:95:0b:99:df:92:
23:b3:cf:95:d3:02:ad:a8:bd:b6:12:51:08:08:e4:81:9c:21:
e5:ab:db:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:24:48 2025 by rpki-client