Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/e9YKVlGZ6iSKZhxVMFHjB0kloLo.roa
File: e9YKVlGZ6iSKZhxVMFHjB0kloLo.roa (raw, json)
Hash identifier: r7kur9SSnuKMUI3H8Z1xEHBFL3o7RLA7CpfLtOa5Ks4=
Subject key identifier: 7B:D6:0A:56:51:99:EA:24:8A:66:1C:55:30:51:E3:07:49:25:A0:BA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184D77A04E41C90E2D49AADA6A996317E9F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/e9YKVlGZ6iSKZhxVMFHjB0kloLo.roa
Signing time: Sat 03 Dec 2022 10:13:28 +0000
ROA not before: Sat 03 Dec 2022 10:13:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d7:7a:04:e4:1c:90:e2:d4:9a:ad:a6:a9:96:31:7e:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 3 10:13:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7bd60a565199ea248a661c553051e3074925a0ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a4:44:69:f7:d3:87:8d:76:23:97:c5:07:ab:
9a:a8:12:50:d3:04:fa:71:9a:1d:48:47:d9:b5:12:
a8:33:60:ea:1a:7d:43:cc:74:03:4e:41:00:6e:7d:
62:38:c3:9a:c4:4a:e5:a1:f0:40:3f:dc:e3:98:54:
95:7b:87:1c:46:2c:17:b5:b0:93:c3:ba:e9:67:35:
1a:bd:fb:60:8f:87:fc:ca:01:2b:38:e6:28:48:ba:
96:aa:14:3e:53:85:0d:a3:f8:d7:7b:e0:7c:ef:0e:
86:8f:66:22:4c:f5:24:4f:a0:c0:87:6c:6d:8f:bb:
ce:31:f3:19:fe:c0:af:19:2a:03:43:4b:4f:f3:f8:
f7:10:44:38:d9:2e:0a:2f:86:d5:57:64:3a:81:32:
a4:99:d4:f8:90:ef:9b:dd:7d:7d:a1:dd:ce:97:9d:
c0:79:02:cf:55:6e:d3:e0:1e:07:5c:35:1e:fb:fa:
76:43:46:df:0e:ac:2e:c3:c8:29:c3:ad:d7:6d:d0:
2b:d8:2f:87:0f:2d:d7:8b:58:74:4b:92:7e:8a:48:
bb:12:d0:41:99:00:f5:08:50:3e:5c:24:ff:91:84:
5e:f2:3d:89:b2:67:63:17:af:88:3b:8d:78:0c:0f:
26:dd:6a:15:da:4b:72:f5:cc:f2:f6:f8:9c:cd:53:
64:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:D6:0A:56:51:99:EA:24:8A:66:1C:55:30:51:E3:07:49:25:A0:BA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/e9YKVlGZ6iSKZhxVMFHjB0kloLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2d:9f:d2:70:19:b9:e2:f2:56:e3:1e:e7:1f:65:58:e7:05:14:
dc:ef:2d:2a:e0:26:04:24:7a:99:9e:8b:e7:b5:2f:1b:3d:cf:
8f:47:30:db:c2:7f:56:65:2d:3f:a5:9f:cd:66:e7:2d:ee:0a:
7b:41:34:c0:ca:df:a1:ba:a4:db:cb:da:7a:ad:8a:d0:96:61:
88:aa:4b:b4:78:71:88:d5:3d:78:77:21:ea:ae:b2:0a:9b:dd:
53:11:0e:2b:f8:b8:05:73:23:3b:c0:dc:ce:53:41:31:1c:2e:
ee:21:d2:b2:50:17:ce:88:89:74:fa:88:a9:00:f9:6a:fe:de:
8f:fc:6f:bd:db:b8:c4:70:1d:e2:21:86:b5:f9:57:07:a0:b8:
81:e4:81:c9:e6:5d:69:0e:5a:07:e5:3c:4f:ac:8c:e3:0b:c4:
bf:2d:f7:45:c3:58:71:eb:44:09:38:ec:fe:07:15:f3:81:82:
a5:bf:e0:3f:2a:ee:fb:b9:4e:2b:1e:bd:92:c4:49:7d:e6:f8:
9d:a3:f8:33:c0:fe:07:64:8d:1e:6b:12:9a:ad:ea:a5:35:a3:
06:4e:3d:d6:a6:f3:4b:89:d0:72:58:05:5f:12:53:56:a3:aa:
fc:15:74:e5:16:e2:7a:16:cf:10:16:7d:b1:4a:d6:a5:37:cd:
8d:75:79:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:51:50 2025 by rpki-client