Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/awJKdbW9i-qNpqs0B2bBQMH8dXc.roa
File: awJKdbW9i-qNpqs0B2bBQMH8dXc.roa (raw, json)
Hash identifier: NX9cefU9rrzQqLFK9uZx3uVF9FtadOUcbKovJVTXIC4=
Subject key identifier: 6B:02:4A:75:B5:BD:8B:EA:8D:A6:AB:34:07:66:C1:40:C1:FC:75:77
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184F24C0B17048DCFCFB452993DB0A348B4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/awJKdbW9i-qNpqs0B2bBQMH8dXc.roa
Signing time: Thu 08 Dec 2022 15:13:00 +0000
ROA not before: Thu 08 Dec 2022 15:13:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f2:4c:0b:17:04:8d:cf:cf:b4:52:99:3d:b0:a3:48:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 8 15:13:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6b024a75b5bd8bea8da6ab340766c140c1fc7577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d6:e8:5d:ff:1d:18:cc:a8:09:8d:d3:8f:02:
4c:04:aa:c0:f3:a6:18:5a:b8:ba:ac:50:b7:ae:04:
4b:5a:89:ca:dc:1d:26:03:e3:42:2c:e3:99:d4:dd:
ae:54:2e:ce:53:55:fa:b1:4f:d2:15:5a:d0:c0:e3:
c3:ab:e5:e0:20:53:c7:22:f2:50:2c:ad:27:79:45:
e7:a1:bd:c0:cb:a9:f2:9d:96:94:81:21:fb:e1:f4:
7f:d3:1f:0d:ef:ac:87:37:9a:c3:3c:f9:b8:d2:14:
41:ab:c5:e9:fb:f1:59:5f:de:30:eb:01:c3:b1:16:
58:36:67:ec:07:c9:f6:76:0c:72:98:c1:7e:65:fb:
af:83:6f:c4:90:62:27:99:79:3e:72:07:4b:b1:0b:
6b:75:6d:f3:a9:66:c0:55:f7:a4:64:7b:3b:c9:44:
0f:a3:db:6e:6c:6b:c1:3c:7e:36:11:30:50:b6:0c:
d3:6f:13:ed:af:53:15:e6:33:1b:2c:64:fd:4b:0a:
e9:f3:f0:c3:ff:49:85:5e:97:67:96:fc:37:47:67:
28:be:cc:5a:41:79:b8:fb:dd:30:96:55:25:a7:64:
17:dd:3e:19:24:a9:03:dd:c0:95:6d:f3:d2:89:12:
72:1c:07:7c:65:ac:96:b8:ca:c5:a8:0d:2e:c6:b8:
85:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:02:4A:75:B5:BD:8B:EA:8D:A6:AB:34:07:66:C1:40:C1:FC:75:77
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/awJKdbW9i-qNpqs0B2bBQMH8dXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8a:42:d5:e7:9f:9d:49:d3:05:44:22:69:50:69:2b:86:06:7a:
db:3f:46:7f:d0:a8:44:c6:ce:11:38:89:ed:5e:66:ae:62:f7:
4f:0d:54:bd:12:ba:f2:9c:dc:a7:d2:16:ab:dd:4b:06:af:d7:
19:c7:59:75:dc:7f:c6:33:cd:b4:07:a1:dd:f8:59:4a:fa:b8:
f0:93:79:38:b4:db:e0:f4:e6:de:80:05:8b:ec:05:d1:5e:82:
2b:e7:58:16:26:65:f5:96:de:d0:c9:b2:17:11:90:78:70:73:
d9:85:98:99:88:1d:b6:a2:e3:bc:aa:c4:18:d2:a3:15:01:7f:
cf:6b:fc:3b:8e:38:ac:94:9f:ec:6c:ae:95:60:3b:07:6f:1c:
f0:8a:ff:d8:62:02:e3:c3:00:24:2c:76:43:5d:22:52:5d:65:
68:8e:a6:b4:d6:b6:26:34:0d:c2:d2:db:68:a5:b6:e6:89:c0:
23:e3:04:b9:e7:b2:6d:6f:23:69:86:22:31:3b:e2:a3:0c:42:
56:50:bd:3d:36:09:a5:06:28:74:be:67:aa:67:8c:a9:26:d9:
d1:9b:12:54:51:01:e1:55:42:81:ae:3f:b6:72:cf:9a:7d:81:
46:6f:d1:67:2e:39:01:06:c1:e7:c3:e4:f4:43:b6:9e:d6:5f:
da:00:1f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:14:23 2025 by rpki-client