Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/e2ism4vkpTDuyx4k2OZk1FMfO8E.roa
File: e2ism4vkpTDuyx4k2OZk1FMfO8E.roa (raw, json)
Hash identifier: NPeLmVpuLh5Yd0bdYFllIdIFMkFSLTVJUi0nU9t3QS0=
Subject key identifier: 7B:68:AC:9B:8B:E4:A5:30:EE:CB:1E:24:D8:E6:64:D4:53:1F:3B:C1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 88972133
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/e2ism4vkpTDuyx4k2OZk1FMfO8E.roa
Signing time: Tue 31 May 2022 01:09:13 +0000
ROA not before: Tue 31 May 2022 01:09:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:180:ff9c:1e7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2291605811 (0x88972133)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 31 01:09:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7b68ac9b8be4a530eecb1e24d8e664d4531f3bc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e4:99:4b:80:c8:a5:df:93:ba:17:61:a7:0f:
2a:e1:6c:69:de:55:bc:79:c3:d3:3b:5b:1b:d1:43:
20:d7:48:66:03:da:6f:49:7b:9d:64:2d:80:6c:b1:
a0:2f:61:aa:74:d7:22:6e:d4:25:df:0b:11:2b:9d:
80:f7:37:93:f1:fd:e9:8e:92:5e:75:ba:b2:5b:60:
e3:cc:fe:9f:ae:f0:8d:37:55:9c:43:e7:1c:49:67:
d2:da:f0:8b:cf:ea:7e:1b:be:2b:95:a3:46:f9:ef:
85:5b:2f:a6:a2:c1:d8:ed:3c:ce:60:ce:d5:6a:17:
bc:46:7c:5a:f7:a0:39:a4:84:b0:cc:0b:d7:02:6b:
90:4a:36:78:be:77:4e:87:c8:96:1b:28:a0:f2:6d:
97:ac:55:c9:d6:d8:cf:10:2d:21:c2:4a:8d:5e:33:
5e:8c:ea:81:9d:9a:d0:e1:2e:81:bb:28:48:a5:3b:
fe:ab:c5:71:40:3b:aa:ca:f0:f2:4c:62:26:5d:94:
fc:60:67:10:23:ca:e9:6f:88:2b:97:0d:01:5a:53:
8e:b2:ed:b3:e6:9f:1c:2e:1a:ff:40:65:04:67:a7:
ca:e0:59:ae:ea:a0:08:d1:cc:4c:34:02:0c:b0:12:
d6:52:74:1c:1c:92:e0:0d:3c:33:17:43:4f:e6:ad:
db:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:68:AC:9B:8B:E4:A5:30:EE:CB:1E:24:D8:E6:64:D4:53:1F:3B:C1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/e2ism4vkpTDuyx4k2OZk1FMfO8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
01:50:a0:10:7d:58:b6:c5:de:e1:75:1e:ec:07:ca:85:2c:f1:
82:d2:fc:bd:a9:82:34:22:1d:e8:09:99:01:e4:4f:19:77:df:
18:35:55:be:f1:1d:32:39:29:f5:f8:b2:13:ef:b5:66:fc:ad:
3d:25:a8:3a:e4:8d:46:a1:d0:63:20:98:78:be:90:7d:a8:82:
70:08:18:78:f5:40:76:fe:48:e5:b4:b0:33:39:1d:7b:cc:c2:
9a:92:35:1c:96:dd:8d:4f:86:49:bd:86:b4:cd:54:e4:67:fa:
e6:b7:32:e5:ea:54:15:c3:fe:e8:5c:cb:33:a0:c8:e2:eb:19:
40:e1:a8:4c:59:5d:79:b2:32:c9:bf:1e:0c:d2:57:34:20:a3:
8e:d9:32:73:07:14:28:0c:a0:25:4b:0a:75:7c:e2:5a:8e:33:
9b:f3:20:15:64:ba:92:17:71:fe:f5:29:f6:ff:48:68:1d:66:
b1:85:4f:10:79:17:e7:cd:f2:25:cb:86:13:03:5b:18:67:c9:
68:77:7d:15:e9:b7:ce:c8:04:12:f2:47:03:f7:ca:a3:41:45:
6c:dd:59:63:f9:ff:35:52:29:8f:24:3b:3e:c7:b1:49:fc:db:
a9:d9:43:91:c2:ef:e1:0a:e1:a6:f6:15:92:5d:3b:c4:a0:a7:
ca:02:be:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 04:34:10 2025 by rpki-client