Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aOB541a8Ya8_pDmNb61cXTk9tHQ.roa
File: aOB541a8Ya8_pDmNb61cXTk9tHQ.roa (raw, json)
Hash identifier: x4P+MwicRfPM73MdkCgmHxrM5GClxKroq1CFWM3+CfI=
Subject key identifier: 68:E0:79:E3:56:BC:61:AF:3F:A4:39:8D:6F:AD:5C:5D:39:3D:B4:74
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6DED4CBF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aOB541a8Ya8_pDmNb61cXTk9tHQ.roa
Signing time: Sat 26 Feb 2022 18:09:35 +0000
ROA not before: Sat 26 Feb 2022 18:09:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1844268223 (0x6ded4cbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 26 18:09:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=68e079e356bc61af3fa4398d6fad5c5d393db474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f9:a2:0b:de:57:ba:2e:06:bb:c1:e6:af:a3:
bc:ef:17:e3:49:0a:76:c0:65:d4:b9:96:1a:cd:82:
01:e7:53:fd:27:a5:99:9b:a8:4d:22:2a:82:c5:9a:
62:1e:52:70:1c:75:6c:ec:c7:f4:f8:d4:7a:03:63:
2b:da:08:f2:d4:b8:c9:df:f7:90:05:37:06:6f:89:
d9:73:2d:64:6c:49:da:19:9d:d0:95:1a:7e:31:aa:
26:24:c6:38:7f:3f:19:ab:96:37:59:99:f4:d3:00:
af:d6:cf:be:da:9c:b4:41:5a:14:f2:0b:84:ec:af:
ce:2b:9e:01:59:3d:6d:ac:84:45:ce:2b:32:16:4f:
42:ab:3f:02:d0:5f:ac:73:73:c0:8a:86:b0:32:5a:
d4:53:65:51:a4:f4:8f:7b:7e:7a:69:19:c6:54:98:
3b:97:4f:fe:7e:c5:23:07:22:fb:09:7a:a6:d0:7d:
95:29:58:c7:26:00:00:fe:be:36:ab:11:79:23:89:
44:19:1d:3b:c0:86:ba:37:05:8a:62:0e:31:53:d0:
32:ee:61:1c:44:03:70:07:0f:92:cf:df:ba:f2:fa:
73:ba:ca:1f:39:a0:15:42:34:fb:a3:9d:b5:72:5d:
0a:b6:dc:f1:fd:0f:9d:cf:22:73:19:c8:b5:54:c6:
fe:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:E0:79:E3:56:BC:61:AF:3F:A4:39:8D:6F:AD:5C:5D:39:3D:B4:74
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aOB541a8Ya8_pDmNb61cXTk9tHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
87:d0:55:e5:74:9e:ce:fc:77:fb:e1:03:16:40:81:4a:e3:48:
72:fd:7a:5f:b3:6e:7f:71:05:c1:71:f2:11:e4:05:82:bb:84:
9b:1b:bb:21:56:e9:05:96:ea:3e:99:71:78:6d:a1:8c:24:9e:
bd:bd:8e:07:02:98:aa:b0:9c:27:60:6c:71:49:c9:a0:ea:1b:
42:db:82:fa:f5:31:73:a1:1c:c5:36:cf:44:08:0c:ae:39:43:
fa:66:0a:9f:24:9c:22:88:a2:b4:ef:e8:69:21:77:16:b6:3d:
ff:5f:0f:ce:28:20:ab:cc:b1:ee:f0:19:3e:ef:38:2b:10:8e:
ff:57:f4:0d:e6:65:42:73:bd:4c:e9:ab:94:65:70:7f:96:c8:
ef:b5:c5:81:74:b1:7a:67:03:40:b4:e2:3a:96:bc:5d:3c:18:
6e:5a:a6:c3:40:e2:fe:22:f7:57:73:17:98:90:25:54:8f:aa:
cf:1d:e2:a6:d3:57:60:b1:e0:33:77:15:11:7f:fe:93:a9:c7:
c2:73:b2:ef:52:85:a8:27:ca:fa:4e:8e:3e:4d:fc:ca:de:bd:
a3:c8:cc:76:8e:49:f4:57:5f:76:0b:f5:9a:ef:50:f5:5b:9c:
bb:8f:6d:ff:c9:11:af:bc:fe:41:f5:ff:9e:74:2c:cb:d5:7b:
1c:7d:d2:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:12:37 2025 by rpki-client