Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aUnbCRw0Vj8-aTAfImjLDfxsbXQ.roa
File: aUnbCRw0Vj8-aTAfImjLDfxsbXQ.roa (raw, json)
Hash identifier: ZDGnqlW0Cv3LBrFwHGESP/i85C8ehGuXu/JGBmrL/08=
Subject key identifier: 69:49:DB:09:1C:34:56:3F:3E:69:30:1F:22:68:CB:0D:FC:6C:6D:74
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 80B70ECB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aUnbCRw0Vj8-aTAfImjLDfxsbXQ.roa
Signing time: Tue 03 May 2022 10:04:58 +0000
ROA not before: Tue 03 May 2022 10:04:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2159480523 (0x80b70ecb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 3 10:04:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6949db091c34563f3e69301f2268cb0dfc6c6d74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c1:f8:6d:4a:cf:23:dd:1b:d7:4f:2a:18:23:
15:99:40:e6:81:e8:4f:3c:e3:3c:51:fe:d7:a7:e4:
11:b3:25:bb:9a:e3:2b:fe:c5:58:1e:c2:81:d3:5b:
3d:5e:e9:14:8b:3e:9b:b9:87:de:5b:ec:01:90:97:
b9:68:3b:c5:33:19:6f:85:c5:6d:1a:aa:cd:8d:97:
ba:9e:27:e8:6f:e1:2b:2d:5c:52:00:47:b4:2b:7c:
a5:90:ef:a8:79:4b:eb:8b:c7:f2:54:ff:54:29:a7:
b4:d1:0a:05:fa:3f:24:1a:31:d7:c4:5d:6d:1f:0e:
22:23:0f:80:63:5f:3c:af:0e:f6:bf:dc:47:66:d2:
71:c8:a6:66:71:9f:42:32:bd:0d:74:18:8d:e7:14:
f0:1e:96:80:2c:b6:b9:76:05:e5:4e:29:df:45:0f:
2d:5a:ba:d8:28:09:af:20:9d:5e:fb:97:62:66:ef:
87:ec:50:9c:df:9f:3a:39:02:9c:7f:77:8c:f2:72:
8b:1e:0f:65:9a:44:6a:75:d1:e0:59:50:0b:f2:7c:
c4:33:dd:53:f2:ed:ee:7d:2d:c5:02:bb:fc:f1:d1:
cd:37:15:fe:27:0d:9e:57:74:ba:a2:71:2d:b8:15:
f1:42:bb:8a:b8:b0:c0:a3:6a:26:ee:4d:e9:1e:11:
b8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:49:DB:09:1C:34:56:3F:3E:69:30:1F:22:68:CB:0D:FC:6C:6D:74
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aUnbCRw0Vj8-aTAfImjLDfxsbXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
03:0a:02:49:d9:d3:eb:31:fc:9f:83:9c:6d:73:e9:7c:1b:bd:
45:54:ed:04:5c:28:5f:6d:69:1c:ba:e1:a3:ce:88:50:df:c7:
6c:df:54:45:53:38:82:b7:ee:62:b5:59:dc:60:6c:46:70:2a:
c8:52:e8:ac:a2:bb:4b:5e:bc:fe:e2:41:80:fd:3d:12:41:88:
11:ac:69:d3:1e:61:a9:5a:c8:22:75:dd:b6:4b:75:f1:ce:99:
73:f0:82:86:8c:68:50:f6:eb:cb:29:e5:99:aa:bd:10:62:fb:
ee:da:88:21:0d:48:6b:d0:47:3d:d4:29:ae:ec:f7:9c:55:04:
a4:c3:b9:54:7f:66:8f:d4:f6:71:4c:09:6e:74:a9:c9:67:24:
45:2b:5a:a6:21:a3:c5:eb:6d:d9:c8:f7:5a:48:9c:7d:57:c9:
02:9c:35:0f:2e:08:03:93:05:d0:33:31:2d:9f:d4:92:06:95:
21:03:00:1a:56:1e:3e:8e:8e:40:ad:1e:31:80:b1:68:de:d8:
9f:35:9d:9f:2e:f2:b7:81:89:9b:b4:58:05:ca:01:a7:45:62:
22:4f:c6:6b:a1:6e:90:78:86:2a:b2:b8:7a:11:fe:1d:ba:a0:
6b:db:a0:f3:7c:55:41:69:a1:35:37:44:a0:d1:a1:a4:15:57:
83:26:c9:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:27:54 2025 by rpki-client