Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cRKwQ3ObaBED-SQbFfx0a39o62g.roa
File: cRKwQ3ObaBED-SQbFfx0a39o62g.roa (raw, json)
Hash identifier: kuIW9Xw0AiHo4VM39s5AT8Bw0WqwF2kAIOQX7eQwcYw=
Subject key identifier: 71:12:B0:43:73:9B:68:11:03:F9:24:1B:15:FC:74:6B:7F:68:EB:68
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184A05728C810F554FC1F97D452C187C1DB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cRKwQ3ObaBED-SQbFfx0a39o62g.roa
Signing time: Tue 22 Nov 2022 17:16:17 +0000
ROA not before: Tue 22 Nov 2022 17:16:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:9f03:9814/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a0:57:28:c8:10:f5:54:fc:1f:97:d4:52:c1:87:c1:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 22 17:16:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7112b043739b681103f9241b15fc746b7f68eb68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4f:4b:21:49:86:d6:7e:9a:09:a6:76:4c:d7:
42:d4:8f:e9:40:fe:cb:7c:bd:1e:3a:9e:08:cd:25:
27:b9:af:8c:84:5a:91:c5:2b:33:ae:87:76:7e:52:
e4:ff:87:04:6d:db:81:fc:1c:e9:b9:d8:67:ee:94:
f3:0b:2f:15:cd:86:6c:fd:1b:c3:2e:da:04:b6:79:
ed:c5:0a:30:e3:aa:b7:a1:2b:fd:14:f8:32:9f:cc:
56:bf:e6:44:97:d6:f4:50:e3:41:e2:19:cf:59:16:
0f:a1:d5:54:7a:fa:97:f7:cc:14:6f:9e:b7:cc:23:
40:79:04:76:80:b4:f4:f5:fb:d3:a6:ef:16:0d:c1:
b0:ff:9c:88:43:89:3d:1c:21:c9:ba:ec:f2:24:a4:
d4:a3:6b:86:08:43:b8:55:fa:45:2d:40:1a:c9:f8:
7c:f5:8f:0b:d7:f4:6e:04:72:d2:0a:66:74:0c:47:
3e:10:f2:e8:99:3e:c1:8a:d8:38:3f:e8:42:fb:84:
e9:08:b6:e2:e3:c1:f9:91:7c:bc:34:6c:4c:6a:20:
a4:e4:87:bd:ea:2c:8f:dc:31:92:7c:cb:19:c6:91:
06:87:be:f4:ff:7e:51:4a:84:1f:14:32:fd:fd:37:
92:2b:cd:07:66:bc:dc:de:ea:9f:79:10:5b:05:76:
21:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:12:B0:43:73:9B:68:11:03:F9:24:1B:15:FC:74:6B:7F:68:EB:68
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cRKwQ3ObaBED-SQbFfx0a39o62g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9f:e7:26:65:d2:bd:53:88:4f:9d:48:0a:17:f6:ca:71:16:7f:
a2:8e:5f:47:ff:9c:0e:10:28:82:26:a6:59:d6:ae:8e:7e:5c:
72:38:e8:ae:85:1f:52:86:4a:bf:a1:95:e6:95:aa:b8:6e:a2:
bd:b2:ef:c5:8f:1d:3b:96:06:9c:87:b1:5f:80:fe:45:12:2f:
af:38:f0:04:da:30:06:a0:b5:10:42:5c:5c:26:69:79:e7:85:
ab:0b:27:c3:bd:d9:e3:89:eb:58:17:d8:46:fb:02:02:65:5c:
b5:88:28:71:b6:87:a4:86:13:fb:bb:d3:ea:6f:ab:80:3c:12:
fb:16:f1:ad:c4:d8:10:c3:38:4f:6c:17:e1:90:f8:6f:5d:81:
82:4a:da:09:ae:e7:29:02:60:e6:e7:66:67:b7:59:c6:c3:0e:
a0:6f:d1:b8:8f:2c:79:8b:fc:d5:49:dc:b8:d4:21:f0:ee:47:
32:63:bc:25:d0:c0:ff:6a:ed:91:0f:69:32:b5:e3:cf:40:a3:
6f:77:e4:62:af:6a:ce:b7:0e:6c:e5:b4:a0:94:3a:8e:27:7c:
83:ca:eb:c1:c9:70:47:a4:d5:a3:a4:9c:5d:33:c9:2c:a1:c6:
82:19:d9:99:3a:f4:b9:c0:67:e3:fb:be:b7:9d:e0:cc:33:25:
66:4e:87:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 09:31:02 2025 by rpki-client