Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/csQVyyniwaWvHpPyZhrio8uBFXc.roa
File: csQVyyniwaWvHpPyZhrio8uBFXc.roa (raw, json)
Hash identifier: Q8leaZD5VyQU2+U/tiYai6BgATwjoBpktVuFsw4VI3w=
Subject key identifier: 72:C4:15:CB:29:E2:C1:A5:AF:1E:93:F2:66:1A:E2:A3:CB:81:15:77
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184B7B7F9F1297A8D4C695A9047290D5BEE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/csQVyyniwaWvHpPyZhrio8uBFXc.roa
Signing time: Sun 27 Nov 2022 06:13:18 +0000
ROA not before: Sun 27 Nov 2022 06:13:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:ae77:4719/128 maxlen: 128
2001:67c:64:ffff:0:184:9f03:9814/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:b7:b7:f9:f1:29:7a:8d:4c:69:5a:90:47:29:0d:5b:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 27 06:13:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=72c415cb29e2c1a5af1e93f2661ae2a3cb811577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a5:01:55:90:00:a1:37:d1:62:ca:39:e3:e8:
49:6c:c1:b2:85:c9:fb:cd:1f:0c:cc:92:1c:d6:42:
4e:f9:55:f2:f5:0b:95:be:cf:a2:cc:9d:94:ce:7c:
6e:21:d7:e7:b4:f1:6c:49:d1:af:54:00:dc:70:98:
1f:39:cf:12:fd:8b:27:28:60:02:69:fe:43:d0:a3:
03:eb:e9:59:90:ca:d2:fc:0a:8b:51:48:25:b9:c7:
16:80:3f:93:43:7e:ce:30:c7:e9:16:43:16:fe:24:
f3:02:22:a7:43:72:02:09:59:d0:bb:d4:c8:18:4b:
98:91:bd:67:ea:69:d6:4a:d0:0d:a3:db:51:8e:5a:
c7:c1:f3:67:ca:a6:78:8b:06:7e:19:2c:10:4f:42:
59:85:40:46:1e:6d:93:af:3a:6d:0b:be:48:3f:e9:
6c:5b:09:56:d7:ca:cd:41:64:3a:d9:49:ef:3c:38:
10:f2:dd:03:b0:96:d4:a2:d0:e8:3d:23:af:e6:35:
76:7f:de:2e:55:66:be:61:75:a4:98:15:74:8e:81:
0c:fe:e2:3d:7b:47:7b:c3:be:23:2b:cc:4e:4b:bb:
5b:af:65:f0:bf:72:d5:5f:51:e3:fd:b2:b8:58:4a:
5f:34:99:b3:ee:0e:0a:cc:cc:ae:3f:06:b3:90:1a:
d4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:C4:15:CB:29:E2:C1:A5:AF:1E:93:F2:66:1A:E2:A3:CB:81:15:77
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/csQVyyniwaWvHpPyZhrio8uBFXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4c:06:01:a0:e0:b2:d9:f0:10:c3:9b:a0:a4:67:ad:ef:f0:81:
cc:1e:4d:32:26:0f:d1:ba:65:29:38:38:98:cc:11:4d:8d:cd:
64:0e:a5:02:00:a5:ba:ff:90:b7:d3:52:b9:b7:a8:10:0d:c2:
ca:88:a5:49:a4:db:a4:e6:92:10:01:09:fc:24:f8:27:af:87:
8b:2a:ab:ab:a9:4b:35:0a:56:11:57:aa:56:07:d5:0c:1d:ed:
8a:0e:d7:dc:01:aa:b8:31:7b:78:0b:94:44:c1:7c:09:5b:ed:
25:72:71:cf:72:95:09:a0:88:9d:06:cc:20:47:9d:df:ad:b7:
05:34:b3:cb:19:a4:49:85:73:b3:54:e0:24:d6:3d:9a:56:e8:
ec:60:40:0e:3b:9b:ea:b6:fd:c9:dd:ad:09:8a:f3:3c:50:05:
fd:61:39:43:51:97:f3:c4:e0:94:a0:ed:27:e9:cc:7a:42:f8:
50:3c:a6:ce:f4:81:35:4b:da:e9:16:66:54:17:db:50:af:42:
3c:be:98:26:96:fa:39:e9:6e:7f:d9:ba:fe:25:d2:a4:af:c7:
34:0b:8d:ed:d8:c9:9b:c1:83:d3:e2:52:33:72:68:eb:7a:0c:
ed:24:db:43:4f:41:68:a5:6a:8c:82:3f:16:9b:c2:ed:15:65:
58:bf:3d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:02:05 2025 by rpki-client