Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/b1Jc1yB4wEFo92gKMdpFls_Gj_c.roa
File: b1Jc1yB4wEFo92gKMdpFls_Gj_c.roa (raw, json)
Hash identifier: wz0ErkNO8HcTYAY3F/+QapVCABppNvKB2UOFF2F973c=
Subject key identifier: 6F:52:5C:D7:20:78:C0:41:68:F7:68:0A:31:DA:45:96:CF:C6:8F:F7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01863CBD0F0B167DEF849BDB0F53D8FE03EF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/b1Jc1yB4wEFo92gKMdpFls_Gj_c.roa
Signing time: Fri 10 Feb 2023 19:11:08 +0000
ROA not before: Fri 10 Feb 2023 19:11:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:3c:bd:0f:0b:16:7d:ef:84:9b:db:0f:53:d8:fe:03:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 10 19:11:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6f525cd72078c04168f7680a31da4596cfc68ff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:31:81:72:16:54:90:91:27:5c:98:94:ce:6e:
27:6b:8d:8a:dc:2d:2f:a6:b6:8b:ac:9e:89:b6:2c:
43:ca:ae:5d:b9:5e:47:08:dd:9f:18:f3:ab:e3:47:
1b:fe:2e:d6:e4:5a:08:3b:35:c6:18:49:f6:ca:21:
b0:d5:7a:ad:1a:f7:77:f2:44:68:2d:6c:93:77:f4:
df:3f:37:be:b8:08:6e:b9:c8:aa:4a:42:e2:5c:60:
bc:88:ab:63:74:a2:e6:f8:cf:fa:d4:49:bf:bd:4a:
f6:5b:3e:fe:84:f8:bc:dc:22:22:18:54:65:ec:fc:
f4:d8:99:df:0d:db:79:24:f0:ff:0f:7a:53:60:37:
bb:a6:d7:fc:00:77:79:04:90:70:b5:ea:a4:0d:4d:
31:f4:17:08:f4:08:15:e5:d5:fe:a9:4a:e5:1b:15:
8a:eb:94:84:d1:ae:35:c1:7e:f9:e4:92:bf:ee:da:
d7:6a:73:44:98:42:79:25:81:b1:14:40:35:7e:18:
6e:8f:e8:e4:dd:1b:dd:08:7e:2c:3e:e3:0f:7f:95:
76:4b:3a:9d:4c:59:09:1e:60:93:50:c5:84:b9:cf:
8c:5b:54:d8:36:d4:f8:cd:bf:1c:d7:bd:16:a0:fd:
c1:78:5a:1b:f8:64:72:b7:6b:8d:98:d9:a2:5b:24:
90:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:52:5C:D7:20:78:C0:41:68:F7:68:0A:31:DA:45:96:CF:C6:8F:F7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/b1Jc1yB4wEFo92gKMdpFls_Gj_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
58:cc:fe:86:04:a3:fd:14:d8:a2:73:19:ee:88:d6:6b:99:cc:
dd:ea:ff:6d:2e:2f:7d:e9:13:06:2a:13:ff:7f:fb:a6:b9:13:
4e:23:7d:35:3d:63:65:10:5e:05:62:3f:20:63:7e:21:07:17:
f1:32:dd:68:af:cf:a7:23:45:d3:44:e4:01:e8:65:25:f9:ee:
60:95:69:d4:4f:1a:b2:fa:c5:1d:c3:d3:5b:c2:0e:0e:03:ad:
77:ec:ed:d4:6d:4d:99:e4:c1:7a:8f:71:9d:14:03:c2:f0:7a:
29:60:6d:a3:9f:65:d9:21:b4:f0:0f:12:d6:24:7c:27:be:b1:
52:ba:28:7e:5a:a7:3e:42:c7:31:33:0c:3d:ca:aa:63:55:01:
c6:97:b1:d3:6d:2a:7b:98:16:22:2c:fd:6c:5f:a4:48:2f:44:
e8:ac:47:da:d8:7b:3a:d9:41:cf:4b:34:65:a9:ef:1f:b6:c8:
4e:3c:3d:e2:58:38:1d:fe:e0:7b:33:bd:2e:fc:5f:b2:f5:77:
54:67:a5:f9:fe:6f:63:49:97:71:cb:f9:26:0b:e1:69:74:3a:
c7:aa:5e:0f:0a:c7:d8:4a:17:69:14:ba:8a:32:1d:4a:f8:8e:
7d:e5:85:4b:45:c5:4c:83:43:18:b0:5f:16:0d:ff:48:61:58:
1a:ec:4c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 07:24:23 2025 by rpki-client