Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/c-2dmjcDtrAXfNiNFRQjZAqEif4.roa
File: c-2dmjcDtrAXfNiNFRQjZAqEif4.roa (raw, json)
Hash identifier: A949stm59DgUdk5sWVhLTESxvLHtP8F12tMoyWXjhhE=
Subject key identifier: 73:ED:9D:9A:37:03:B6:B0:17:7C:D8:8D:15:14:23:64:0A:84:89:FE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018668B76EE4265F8BD0AFE1479DF7ABE853
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/c-2dmjcDtrAXfNiNFRQjZAqEif4.roa
Signing time: Sun 19 Feb 2023 08:08:17 +0000
ROA not before: Sun 19 Feb 2023 08:08:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:68:b7:6e:e4:26:5f:8b:d0:af:e1:47:9d:f7:ab:e8:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 19 08:08:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=73ed9d9a3703b6b0177cd88d151423640a8489fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9f:30:46:00:2f:6b:8c:41:ec:d7:42:e4:6c:
49:e2:f2:2f:9e:ef:8e:09:a9:a4:df:5f:dd:3b:71:
ab:9f:db:47:f4:59:e1:c2:d7:66:c0:0d:0b:4d:a3:
c1:97:bb:33:18:4a:7a:44:ad:66:33:3b:3d:44:55:
2e:71:71:b6:8b:01:56:9f:23:d5:db:ca:4c:b9:d5:
f9:59:2e:c6:f8:5f:7e:4c:df:bd:a4:ae:63:9b:35:
62:04:86:36:e7:a2:14:9b:a7:e6:18:40:d9:8e:36:
87:2f:8f:7f:f0:54:f9:98:eb:f3:84:2f:f0:dd:dc:
f1:c9:27:fc:02:77:22:74:d7:8e:71:d1:0a:ee:07:
78:3d:2f:13:45:8f:85:46:c7:7e:53:c0:4a:6d:fa:
07:96:41:14:e4:43:cf:10:2e:34:ad:15:67:ac:ec:
5b:41:3f:c5:71:d0:38:ca:b5:e5:72:14:c2:db:d6:
5c:17:1e:9c:91:d7:e5:ae:46:84:88:57:a0:79:7e:
38:97:e0:dc:5a:f2:34:8f:d8:58:7d:d6:b6:11:c5:
8c:34:c7:0d:1e:ec:97:13:8e:c7:16:b7:1a:6f:03:
89:27:2a:a3:aa:c3:8b:d8:34:55:78:f1:b9:52:c0:
81:c5:75:b9:3d:e0:f4:b0:3b:e0:72:f0:3e:03:f1:
18:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:ED:9D:9A:37:03:B6:B0:17:7C:D8:8D:15:14:23:64:0A:84:89:FE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/c-2dmjcDtrAXfNiNFRQjZAqEif4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
61:57:0e:b0:ba:e3:82:ca:8f:62:d0:b5:35:d2:01:98:49:6a:
b2:e0:86:e9:10:95:56:c9:d8:c6:c6:a4:10:88:fd:34:ad:e2:
00:cf:c2:8b:8a:f7:e3:ec:aa:01:3a:65:02:d0:ad:cb:d9:23:
8b:36:30:b3:9f:50:cf:fd:ea:6c:24:b2:ee:3d:14:74:e2:17:
59:9d:c9:95:cd:27:6a:42:5c:ea:86:24:95:aa:9b:a4:06:30:
0c:56:97:01:22:6e:e6:4d:59:6c:f0:46:c5:09:f5:61:0a:dc:
17:aa:2e:e8:c5:93:b2:d7:20:cd:50:71:ce:2e:0c:bf:cd:b8:
d4:b0:75:bc:6b:3b:8e:a6:ad:fb:67:11:58:c9:4d:ac:89:8d:
c9:58:66:68:00:a1:6b:56:67:61:1d:9f:51:0d:87:c3:11:dd:
76:6e:ee:4c:a8:b9:ee:ab:ae:4c:a9:60:eb:91:ba:b0:d9:1b:
6f:e8:7e:e6:a2:52:86:86:e8:5a:75:59:2f:7e:1b:c7:2c:7d:
e3:a2:19:2f:35:35:7c:47:70:1c:7f:ba:aa:32:bf:35:c2:32:
64:71:9a:22:ea:22:51:7e:b8:3b:69:0a:bc:5b:84:0e:70:cb:
64:77:8e:9a:2b:5a:2b:21:c3:c1:7f:b5:0b:b6:01:8d:14:2f:
3d:96:3a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:13:18 2025 by rpki-client