Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/d2zKnXYmbpiGs1M7-hB6ZGB44cg.roa
File: d2zKnXYmbpiGs1M7-hB6ZGB44cg.roa (raw, json)
Hash identifier: TQFVTTJ0SCxHHPBmcNR6+FWapDUybYWKAvc6iHUuYwY=
Subject key identifier: 77:6C:CA:9D:76:26:6E:98:86:B3:53:3B:FA:10:7A:64:60:78:E1:C8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184466AB9588CE99A115C040596BA86D372
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/d2zKnXYmbpiGs1M7-hB6ZGB44cg.roa
Signing time: Sat 05 Nov 2022 06:11:50 +0000
ROA not before: Sat 05 Nov 2022 06:11:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:46:6a:b9:58:8c:e9:9a:11:5c:04:05:96:ba:86:d3:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 5 06:11:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=776cca9d76266e9886b3533bfa107a646078e1c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:50:92:54:d7:98:59:9c:73:99:4b:90:3f:d3:
26:9a:af:df:f8:ab:67:40:85:5e:85:4a:a4:61:a8:
70:ae:97:5f:85:74:e8:d0:ec:47:20:9e:62:9f:f2:
81:79:9b:10:88:c7:6e:9e:f9:df:36:4e:d8:86:c6:
7e:43:b8:64:6a:d4:26:0c:e3:80:68:99:6c:66:35:
f2:19:b3:02:47:f8:1a:42:30:9d:c0:b1:1e:bc:d3:
7c:ef:bc:e6:63:00:cf:2a:fc:7a:ab:d6:76:00:08:
e0:9e:72:a5:96:d8:b5:c0:d9:87:c2:96:14:aa:3d:
eb:cf:5e:0d:d2:f2:3a:9f:b3:17:dc:25:28:90:59:
9d:79:89:9c:89:77:32:d4:36:53:ab:c7:9c:fa:17:
9d:e7:ce:3f:53:61:0c:0b:27:f0:d1:8e:c4:53:ca:
90:99:16:a0:4f:ed:3d:b3:1b:13:22:66:04:2d:bc:
cb:62:22:5f:9e:d0:89:51:ce:97:cf:ee:69:f5:3f:
29:c0:f7:93:d1:26:69:68:9c:01:1b:6c:2f:e0:60:
d6:34:70:0b:59:0b:c2:50:b3:70:5e:49:91:f0:d7:
06:bb:8e:fd:68:c9:00:c8:aa:81:90:63:f3:8b:55:
58:9c:2f:aa:5f:69:54:08:b8:90:bb:14:f1:3e:3b:
c4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:6C:CA:9D:76:26:6E:98:86:B3:53:3B:FA:10:7A:64:60:78:E1:C8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/d2zKnXYmbpiGs1M7-hB6ZGB44cg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a3:bb:11:89:23:d2:83:d7:33:d6:8b:01:f7:75:68:27:f7:11:
59:9f:bd:fc:28:d4:db:65:83:c8:f4:fa:d5:aa:8c:e3:fd:62:
9e:45:ca:98:66:36:8a:e2:33:ed:77:01:24:d7:f4:20:0b:ea:
13:86:37:c8:24:6e:b1:36:72:cb:71:9d:2d:61:d9:e3:83:25:
ff:cc:e2:ad:73:8a:e6:75:ab:89:3a:33:10:24:55:e0:b7:63:
eb:8f:b5:38:54:64:97:a5:7f:e8:06:fd:dc:54:cc:96:1c:a2:
cc:cb:fa:b2:2a:6c:d3:a6:ea:7c:b6:1f:c8:46:0f:cb:c7:ad:
c3:ea:78:0e:d0:db:60:1a:8f:e8:4e:55:ca:ce:41:62:9c:99:
3c:b3:76:22:a6:f9:1e:56:59:ee:25:9c:51:11:20:b4:bb:dd:
b7:33:86:31:12:11:24:44:8e:3d:73:6a:1b:db:91:f3:8b:95:
94:5a:2d:8e:84:70:0c:3d:7f:90:dc:37:86:9a:a7:73:74:67:
a6:33:d9:94:3e:e2:ff:15:bc:81:6d:27:23:d7:b8:5c:14:a3:
bf:71:5a:16:97:5d:05:a0:d2:62:45:7d:b2:3c:05:d7:b6:b2:
ac:a6:64:53:71:dd:c7:71:55:41:f7:d9:79:2e:dd:c6:37:8b:
51:99:95:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:31:32 2025 by rpki-client