Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/d8VgNbpH7V2Tgep2ljDrJfCS4_k.roa
File: d8VgNbpH7V2Tgep2ljDrJfCS4_k.roa (raw, json)
Hash identifier: pcicwnyBar5Y39Jet4tuao6nTK21C4SVhqd0PLOx7dw=
Subject key identifier: 77:C5:60:35:BA:47:ED:5D:93:81:EA:76:96:30:EB:25:F0:92:E3:F9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018603DEF1BD8DAE349595CCBF082E5FEC9F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/d8VgNbpH7V2Tgep2ljDrJfCS4_k.roa
Signing time: Mon 30 Jan 2023 18:09:47 +0000
ROA not before: Mon 30 Jan 2023 18:09:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:03:de:f1:bd:8d:ae:34:95:95:cc:bf:08:2e:5f:ec:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 30 18:09:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=77c56035ba47ed5d9381ea769630eb25f092e3f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e4:9a:4e:27:b0:67:17:c5:68:7a:33:14:06:
7e:99:2a:69:07:11:50:ac:89:89:44:4b:63:01:1f:
f2:43:69:72:15:40:a4:b9:ee:d3:36:3e:4a:21:36:
03:1b:e1:05:45:f2:54:1b:e1:c2:4f:a6:01:dc:57:
27:97:00:a9:d8:73:ec:ec:46:41:e3:e8:84:52:ba:
fe:98:0b:65:6d:3a:ab:fe:b7:2b:e4:ac:fd:b0:8e:
95:64:af:c8:25:4f:7f:f9:37:24:61:63:38:d6:2d:
c4:b0:28:fa:a0:b9:52:03:ff:73:be:6b:22:67:1b:
8c:3b:5f:b9:70:16:40:33:16:9a:d9:e5:1c:eb:8e:
e1:97:b2:da:90:04:cd:dc:95:f7:aa:78:2b:24:cf:
40:4f:e9:2a:0a:93:7e:af:06:3e:17:bb:ef:11:ef:
bf:d4:16:f7:52:d7:20:56:d7:12:a4:81:95:05:c4:
3e:8e:84:5b:8e:87:b5:84:35:92:fd:6d:a0:98:1a:
4a:55:35:e7:e2:a0:04:38:60:ab:e4:d2:a0:84:70:
b4:2f:e3:17:4e:0a:6d:73:3a:5a:13:a3:79:0c:1c:
8d:c6:7a:c8:8f:be:4e:7e:80:d2:3c:03:b2:3e:d4:
c0:8c:14:87:ae:18:83:93:26:11:ff:ad:cd:1e:52:
b5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:C5:60:35:BA:47:ED:5D:93:81:EA:76:96:30:EB:25:F0:92:E3:F9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/d8VgNbpH7V2Tgep2ljDrJfCS4_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8b:8b:9d:03:94:57:df:c7:85:5a:36:0b:cf:71:08:cf:ae:f1:
25:82:67:ca:76:43:53:c5:12:4b:fb:15:00:7e:28:a2:35:a0:
36:85:df:eb:13:26:db:9e:30:4b:73:f3:72:ad:27:cb:d8:88:
e6:04:d1:4b:de:92:11:d7:16:30:79:cd:85:f2:6a:a3:69:8b:
77:22:65:bf:46:8e:95:2e:ff:e7:0d:0e:0a:ae:ee:8a:7a:4d:
c8:e1:54:d7:b0:9a:ed:9d:c1:19:8d:cd:94:1b:0b:b6:b1:ee:
13:f9:15:a6:56:40:9e:19:91:de:13:be:f7:df:a0:a6:0e:db:
80:aa:b5:82:04:ca:c4:d1:bb:cb:1d:80:96:55:9f:e2:4e:ba:
f3:86:e3:59:2e:91:9f:bc:c4:35:d6:b4:9d:ef:30:e6:86:41:
d1:bd:00:40:28:2e:59:f3:91:94:85:4a:ca:1a:fb:11:83:68:
73:9f:16:5b:b6:6e:b7:70:26:74:1d:f6:41:ce:71:5a:76:da:
a0:ce:12:89:aa:1b:75:f0:a5:26:90:df:a7:4f:d0:0e:fb:a8:
c9:2f:ce:1e:05:47:df:a7:88:fd:5d:6e:f0:b9:67:0e:76:1f:
dd:18:6d:38:4b:30:70:6f:8a:fe:01:84:d7:9b:27:07:8d:ee:
1d:ee:8b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 04:54:29 2025 by rpki-client