Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dXF-JMEZ0u8Uju6lGiBjX74ywXo.roa
File: dXF-JMEZ0u8Uju6lGiBjX74ywXo.roa (raw, json)
Hash identifier: lI4kHqebdwnpx5z/vMJUNcQLC6vijMT/GCUlogOhSME=
Subject key identifier: 75:71:7E:24:C1:19:D2:EF:14:8E:EE:A5:1A:20:63:5F:BE:32:C1:7A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01832A51272771C3E15394BA26FF9D008747
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dXF-JMEZ0u8Uju6lGiBjX74ywXo.roa
Signing time: Sun 11 Sep 2022 02:11:44 +0000
ROA not before: Sun 11 Sep 2022 02:11:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:2a:51:27:27:71:c3:e1:53:94:ba:26:ff:9d:00:87:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 11 02:11:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=75717e24c119d2ef148eeea51a20635fbe32c17a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:04:de:3d:30:84:7a:b9:70:82:6f:b1:4f:be:
f9:62:fc:50:df:f5:86:f8:36:78:25:fb:3e:9a:fe:
ee:55:77:d5:9c:1a:1b:dd:7a:34:f1:19:80:c9:fc:
52:27:27:d5:96:52:93:de:e0:55:5f:28:ff:56:25:
e4:9c:f9:d3:c4:63:30:67:02:eb:89:61:80:03:5a:
e0:95:e6:0a:76:70:ac:bb:1b:eb:ac:d1:fa:bf:6a:
28:b2:bb:ca:cc:41:43:34:c5:0b:54:7d:50:fe:75:
de:75:dd:ac:fc:b6:e6:63:40:b3:99:41:31:db:18:
d8:10:58:83:d0:b7:4a:6d:d6:c1:d3:c5:74:b9:42:
47:99:75:b7:54:e0:62:8d:66:6c:46:8c:0d:61:2f:
07:aa:cf:a5:19:e3:78:29:93:b4:60:2c:3e:45:03:
dd:85:63:02:1b:f0:e8:6a:df:69:a7:41:3d:9b:c2:
5e:90:1d:cc:e0:cd:bf:76:94:c5:f4:60:fc:d6:7d:
a7:1a:9e:33:c1:46:81:72:45:c4:43:51:23:dc:6f:
de:83:03:ae:5a:7c:b7:c6:d0:9d:23:ea:bd:7c:b8:
fc:81:5f:15:ca:db:54:de:f1:91:92:37:0c:de:c7:
61:b5:da:16:83:e4:59:61:5a:11:71:a3:4d:3f:ca:
db:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:71:7E:24:C1:19:D2:EF:14:8E:EE:A5:1A:20:63:5F:BE:32:C1:7A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dXF-JMEZ0u8Uju6lGiBjX74ywXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b2:88:a8:07:43:d7:d9:bf:71:7d:03:4c:9d:6f:14:77:0e:39:
a0:5a:15:34:8f:bc:0f:19:8c:f4:a9:44:2c:42:5e:1e:34:82:
12:7c:99:6c:cc:37:1c:ca:3e:e5:ae:15:02:8e:26:13:6c:e5:
25:a7:7b:c7:e6:73:2f:35:7e:1e:92:66:1b:f5:91:62:16:73:
d1:70:ca:77:a2:10:2b:b6:ed:c7:d3:61:72:e0:8c:96:66:3c:
4c:5f:a4:52:b2:16:af:37:6e:3a:c3:d2:07:6b:15:e4:3f:2f:
f1:93:0a:f9:0e:df:93:a2:17:ed:fc:96:15:6e:c0:df:8f:9e:
27:66:09:47:51:18:51:e5:bf:7e:93:72:b6:85:bd:ea:b3:1e:
26:7d:53:e8:eb:ca:f2:e8:1e:95:00:29:cc:4d:d3:65:6a:57:
dc:78:30:58:48:78:49:75:9e:89:57:e5:92:ad:3b:a5:4b:b8:
04:56:dd:e3:86:7a:2c:5a:53:93:4a:72:86:3b:4f:56:a5:4a:
6e:18:b8:4c:13:47:0f:aa:c6:ff:f7:7a:1b:c0:34:2b:c9:72:
6d:8e:ab:5c:b2:e3:81:2a:e0:d3:02:45:7a:37:e7:8a:0c:09:
f9:c4:15:a3:97:50:38:ce:0b:6e:68:30:ba:b9:65:64:af:aa:
e6:4d:cf:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 07:25:56 2025 by rpki-client