Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eTX2wtp2VrUbiS2fPozKmcIkcyE.roa
File: eTX2wtp2VrUbiS2fPozKmcIkcyE.roa (raw, json)
Hash identifier: FN4U9vycf5gRpMxltv+l4Bdkce6B7459oQv7LlyBLO0=
Subject key identifier: 79:35:F6:C2:DA:76:56:B5:1B:89:2D:9F:3E:8C:CA:99:C2:24:73:21
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184E534BA35D9C55DB73CAA8D1AE1C8CA88
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eTX2wtp2VrUbiS2fPozKmcIkcyE.roa
Signing time: Tue 06 Dec 2022 02:12:28 +0000
ROA not before: Tue 06 Dec 2022 02:12:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e5:34:ba:35:d9:c5:5d:b7:3c:aa:8d:1a:e1:c8:ca:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 6 02:12:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7935f6c2da7656b51b892d9f3e8cca99c2247321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9a:22:d6:46:f7:05:b8:57:5b:6c:c8:5c:68:
f5:a5:2a:74:c5:46:62:0b:55:5c:83:d1:f6:19:1c:
27:83:29:4c:80:ce:c3:f8:91:99:ea:80:20:1e:f7:
f5:51:d0:fb:b2:f4:39:b9:46:d9:2c:1b:bf:31:62:
a3:27:18:db:9e:7f:44:12:e8:9f:80:d8:3a:e9:a9:
7f:e6:3d:88:c4:46:72:13:54:45:4d:bc:71:f0:f7:
2c:0e:8f:40:2a:9a:38:e2:13:55:ae:d5:2f:eb:36:
0f:9b:fa:46:9d:75:5e:0e:0f:54:35:a0:e9:a7:27:
f3:9a:25:9e:4f:47:f1:97:8e:00:d1:df:b7:5f:c1:
9d:59:21:90:c8:ba:87:00:ca:58:32:3c:69:08:ec:
cf:43:96:e6:9d:dc:8e:6a:48:87:f0:6b:30:66:a4:
2b:66:19:0d:b7:53:ef:0a:b7:c2:81:a9:84:aa:9b:
54:ed:ce:46:b9:3e:49:05:f6:3f:d0:05:c8:32:24:
19:ea:39:39:5d:3a:4d:26:d5:ca:3b:8f:3d:bb:3d:
a6:57:4f:cb:d9:b6:8a:91:7f:1e:92:5c:70:31:55:
5d:17:4d:8c:34:88:ec:61:ab:f4:06:53:70:bf:bb:
77:c5:3a:56:6a:c4:42:c7:b4:60:4a:cc:25:90:92:
82:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:35:F6:C2:DA:76:56:B5:1B:89:2D:9F:3E:8C:CA:99:C2:24:73:21
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eTX2wtp2VrUbiS2fPozKmcIkcyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
72:fc:77:8b:ca:13:ca:02:1e:30:54:0e:e3:64:39:53:e3:92:
c4:34:02:f8:2a:c9:53:83:c3:33:04:1f:de:18:7d:78:17:85:
9a:61:07:e3:4c:5b:1f:2e:03:af:90:6c:cf:d4:22:b5:11:7a:
b1:e0:8c:d2:1a:5e:6d:84:2f:d2:57:19:96:97:d4:0e:18:b2:
ef:4f:05:97:cc:b0:2c:4e:fa:5c:6e:ca:7b:04:55:69:60:d1:
c8:60:ce:ef:33:c9:81:42:7b:88:53:b1:ed:48:4b:c6:5d:fb:
c8:e8:fa:86:60:70:2f:0e:0a:6a:47:67:64:a8:e0:99:ac:72:
d5:6e:fc:35:10:e6:9b:26:71:aa:d3:2c:72:9d:9c:05:a8:7f:
f4:96:a4:5e:59:23:07:57:94:c8:4d:98:62:2c:93:3f:40:06:
e1:40:c2:15:fc:64:0f:a2:27:77:30:69:d4:ad:0f:90:97:15:
3e:41:a9:b9:59:a5:4c:df:25:28:22:86:7f:ce:0a:d2:81:8f:
28:33:50:a2:59:7e:3d:d8:92:6e:7b:17:d2:30:33:64:ba:7d:
ee:db:b0:6b:ad:25:ae:25:4d:ce:87:45:b0:a0:d3:03:0f:39:
11:e7:23:b5:3f:38:d1:b7:c5:33:32:4b:5c:98:86:9f:43:bd:
95:9f:81:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 13:31:26 2025 by rpki-client