Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/egqYkcbq716bjcmi5xQ8nmHnOJw.roa
File: egqYkcbq716bjcmi5xQ8nmHnOJw.roa (raw, json)
Hash identifier: z3smmWnaCB+9jV8I+hXBHRyN7IFzKTPyKqx66j39JhA=
Subject key identifier: 7A:0A:98:91:C6:EA:EF:5E:9B:8D:C9:A2:E7:14:3C:9E:61:E7:38:9C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01861652CA374AB16C1C0AEEDDE44F68410B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/egqYkcbq716bjcmi5xQ8nmHnOJw.roa
Signing time: Fri 03 Feb 2023 08:09:29 +0000
ROA not before: Fri 03 Feb 2023 08:09:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:16:52:ca:37:4a:b1:6c:1c:0a:ee:dd:e4:4f:68:41:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 3 08:09:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7a0a9891c6eaef5e9b8dc9a2e7143c9e61e7389c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8d:70:8f:93:71:90:9f:e5:9a:7d:e2:2c:d1:
a1:44:62:1f:31:c8:3e:77:50:07:6f:a6:0c:98:02:
c8:4d:28:fb:85:a3:b2:36:74:43:03:22:69:8a:b4:
fd:a6:66:44:45:8f:2c:73:52:23:ac:14:e0:0f:15:
67:88:a5:ca:4a:f1:6d:b5:70:6d:bc:40:ac:d2:09:
d6:d1:ec:49:29:72:e6:62:53:76:3b:ac:f5:d9:6c:
2b:86:b8:43:b7:66:d4:f4:56:ed:8e:6e:a5:e4:a7:
02:da:ce:41:a7:55:78:bc:db:2a:b2:e4:9f:5f:3b:
b4:9a:ed:aa:9a:5e:54:9d:1c:4f:7d:89:64:2b:84:
73:fb:8e:6f:f2:03:53:dc:cf:31:1d:2f:cd:f2:74:
89:8e:d4:bc:85:28:77:f9:26:d9:c6:4a:46:2d:67:
31:6b:0b:fa:d2:32:f5:a3:b4:43:ee:a0:15:fa:6f:
f3:9c:e2:14:f2:8b:a0:6f:ef:57:70:c7:87:65:a3:
a9:85:cc:19:61:6f:97:53:55:41:2b:af:a2:64:96:
a7:cd:d6:42:c5:c0:16:0a:09:5f:da:38:3c:eb:45:
7d:4e:3c:fa:21:50:ec:d7:a1:ba:19:4f:95:2f:85:
05:2d:0c:f0:8b:5c:33:da:3f:e0:5c:37:4f:26:f2:
84:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:0A:98:91:C6:EA:EF:5E:9B:8D:C9:A2:E7:14:3C:9E:61:E7:38:9C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/egqYkcbq716bjcmi5xQ8nmHnOJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ab:83:fd:5d:d5:ec:46:6e:69:39:fe:de:3b:05:53:e3:ab:a9:
ab:1f:c1:9f:29:57:70:e2:9e:77:a5:66:a0:60:e2:9e:65:1c:
34:83:25:a2:01:64:7e:27:c0:d5:1b:7d:a4:b1:4b:1f:c8:2b:
cb:ad:9b:22:a5:d2:bb:00:18:95:43:eb:66:89:af:74:37:7a:
5d:ba:fd:be:76:8b:82:7d:02:cf:8d:e1:d6:d0:6a:5f:3f:27:
87:8d:16:43:d6:12:c9:b6:a5:dd:f8:aa:2c:92:6b:2a:8b:f0:
7a:49:6c:76:42:78:9e:25:d5:8b:fc:2c:f8:ff:ea:13:71:b2:
c1:b7:ae:96:2d:16:ce:6e:69:af:84:9e:da:88:6a:c1:7c:46:
18:7b:24:ca:8a:dd:59:e1:72:0f:d0:ff:35:69:d5:1c:eb:7e:
8b:db:0c:bf:20:b2:2d:3f:71:4d:52:82:bf:1e:17:d8:fe:47:
2b:d2:c5:9c:1a:63:0a:f5:dc:c9:56:12:08:aa:af:1a:b9:0a:
89:93:7c:9d:f1:2c:9b:05:ca:70:87:0e:4a:71:63:b7:94:db:
86:56:ad:06:ae:d9:6f:97:5f:5c:8a:95:2f:42:14:2d:73:e0:
62:97:b8:9d:d3:31:5b:5e:3d:64:0f:c4:b3:ac:55:57:75:d4:
7b:5b:9d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 04:52:17 2025 by rpki-client