Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/f0Nc9BAmIvLjwFGYWRl7VfPdeTg.roa
File: f0Nc9BAmIvLjwFGYWRl7VfPdeTg.roa (raw, json)
Hash identifier: LreVmpq2YQNggRMfvjRwDglbpl5DBrwRNxTywyqzwWc=
Subject key identifier: 7F:43:5C:F4:10:26:22:F2:E3:C0:51:98:59:19:7B:55:F3:DD:79:38
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A34FFE1F930FB6BBBB3CC9064DC93AE7C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/f0Nc9BAmIvLjwFGYWRl7VfPdeTg.roa
Signing time: Sun 27 Aug 2023 03:18:19 +0000
ROA not before: Sun 27 Aug 2023 03:18:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:34:ff:e1:f9:30:fb:6b:bb:b3:cc:90:64:dc:93:ae:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 27 03:18:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f435cf4102622f2e3c0519859197b55f3dd7938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:83:60:92:ca:bd:01:88:46:bc:11:26:89:23:
7f:db:65:81:49:82:aa:b6:0c:d5:ea:43:b1:39:15:
ce:cf:eb:51:e1:80:84:95:c8:79:67:bc:2a:1e:14:
d5:96:51:a8:5b:59:9d:50:81:f7:f3:d9:9a:6f:19:
0a:d5:c8:ce:92:c9:65:18:44:b3:21:2a:b3:a7:36:
87:7b:47:c9:73:8b:69:9f:e4:47:e3:f2:3c:27:54:
ba:b1:13:0a:e8:4b:9a:45:d4:c0:ee:67:d4:13:92:
80:c7:0e:ac:00:68:6b:8d:a3:ee:e6:4b:71:f3:48:
88:82:f6:40:2f:ec:6d:b5:77:98:1b:13:a0:dd:f6:
74:c3:18:5e:be:a8:32:8a:f7:8a:78:cd:ed:e9:85:
2b:2b:7f:a9:e2:15:11:e2:13:0f:63:a7:61:27:85:
0c:1e:5c:3a:81:d6:e2:70:f0:96:54:13:67:1d:51:
09:e2:51:b1:a0:ef:d4:5e:87:dc:3c:3f:5e:08:ba:
15:f4:5b:4a:d2:80:2f:65:7d:2a:3e:62:aa:0b:7b:
8d:51:24:e6:5a:c2:4e:be:64:20:b3:c4:5e:6a:b0:
fc:9a:67:3a:c8:38:b5:db:19:3a:35:98:0b:25:2c:
b0:77:ae:d5:fb:80:08:0d:97:85:ab:f4:01:f6:6d:
98:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:43:5C:F4:10:26:22:F2:E3:C0:51:98:59:19:7B:55:F3:DD:79:38
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/f0Nc9BAmIvLjwFGYWRl7VfPdeTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
45:7e:c7:1b:2e:7e:a9:87:3b:37:ec:1c:08:c7:ee:3a:c2:b3:
2a:c1:d9:3a:f5:10:e5:fa:24:12:1e:54:d4:02:47:47:c8:6c:
f7:ce:b2:f3:8f:fa:b1:9d:ff:81:f9:8b:7f:9d:26:d4:b5:2c:
b7:55:6a:e5:94:8b:1b:5b:c9:68:c9:03:d2:f0:6c:24:03:53:
98:77:5a:0a:5e:f1:8e:4d:58:07:23:1f:58:35:d8:63:42:ee:
72:f2:31:3c:ff:48:e3:1c:27:e1:01:9e:12:d1:44:36:da:40:
87:d0:85:48:df:9d:b0:1a:e1:71:e1:b9:41:b4:e1:76:7a:c6:
3d:e0:c2:82:11:e5:a3:ec:0c:58:23:47:38:df:8a:d9:53:fe:
21:62:99:d5:fb:ad:fe:21:ca:f0:0e:8b:e7:80:18:66:03:0f:
34:22:53:54:75:f0:80:9a:67:27:c8:b8:95:6a:14:66:46:66:
5d:dc:53:be:ca:f6:6a:5d:bd:4c:25:4a:fb:69:9a:56:db:d9:
61:0a:c9:1a:d0:8f:10:b8:83:c1:61:b0:38:6f:cb:69:97:4a:
ae:e8:41:b8:99:b6:8f:94:a3:2c:81:60:0a:07:39:40:a4:7d:
14:22:48:ed:3c:51:9b:ee:a4:fa:ed:62:98:1e:e2:0d:6a:09:
82:70:cb:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:05:15 2025 by rpki-client