Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fKHRQ8qEztdp1hDz3GbpnUf4_Jk.roa
File: fKHRQ8qEztdp1hDz3GbpnUf4_Jk.roa (raw, json)
Hash identifier: bnz1QMAoADx2Q/XDkROmO60UICYKzH9lP3fvxWoQLR0=
Subject key identifier: 7C:A1:D1:43:CA:84:CE:D7:69:D6:10:F3:DC:66:E9:9D:47:F8:FC:99
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183CFFF92D1E776D09B04CD52C844163A8F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fKHRQ8qEztdp1hDz3GbpnUf4_Jk.roa
Signing time: Thu 13 Oct 2022 06:19:36 +0000
ROA not before: Thu 13 Oct 2022 06:19:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:cf:ff:92:d1:e7:76:d0:9b:04:cd:52:c8:44:16:3a:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 13 06:19:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7ca1d143ca84ced769d610f3dc66e99d47f8fc99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e1:16:bc:80:03:a1:84:60:24:0d:27:24:99:
93:4b:66:c8:cc:99:e5:68:e9:38:cd:94:ed:2a:4d:
e5:9f:d3:b5:a4:ec:b5:86:14:13:f8:40:95:be:ef:
56:75:50:bd:ea:43:53:31:c8:94:b8:6c:ce:87:a8:
e0:70:22:80:f5:11:d0:cd:c2:fc:79:7a:ea:78:3a:
15:b1:5b:0c:06:bc:da:2e:fb:c1:6d:67:33:39:72:
88:6a:1a:96:47:a7:55:6c:58:8e:3c:f9:d9:47:02:
e9:2e:cf:c2:c8:06:1c:89:9d:34:16:48:07:5b:c5:
c8:43:03:0c:65:d2:c8:3d:d8:e8:74:da:8a:f6:18:
04:25:0e:8f:a1:38:8a:0c:93:ce:fa:be:67:43:07:
1c:ac:72:2f:b7:34:a0:cf:a2:e7:0e:27:83:32:29:
df:56:2c:db:02:88:b7:8e:5b:f5:65:a4:c2:5c:ce:
57:28:3e:1e:b0:b7:c8:71:da:9e:24:40:c2:8a:6b:
5e:7a:a9:24:03:0d:54:cd:01:d7:92:60:5b:be:44:
69:4c:9c:3a:be:97:fc:c6:b9:ba:f2:c0:3c:2e:06:
09:4e:68:9f:e4:3f:16:14:7c:f6:51:3f:bb:18:c3:
a0:07:c7:ef:d1:6d:a3:5e:54:49:c9:8f:a9:65:ff:
f7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:A1:D1:43:CA:84:CE:D7:69:D6:10:F3:DC:66:E9:9D:47:F8:FC:99
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fKHRQ8qEztdp1hDz3GbpnUf4_Jk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
92:ab:3a:87:ec:97:ed:60:60:50:4f:e3:c3:b1:0d:09:0d:ef:
a1:0a:04:87:16:3c:a1:ac:29:55:80:27:97:2a:c4:c6:a7:85:
f8:8d:c8:08:45:3c:af:0d:9b:5e:69:e6:07:12:fe:87:03:bd:
fc:e9:ed:0e:f4:31:12:2e:18:cb:9a:27:2c:7f:3b:f0:4d:99:
06:a9:01:51:f0:55:12:21:97:60:06:89:5e:a6:42:aa:da:3f:
a2:3d:25:73:e1:6c:0e:06:82:c8:80:6d:f6:a6:85:38:2d:f2:
5b:43:41:56:ed:f5:f6:20:e2:26:97:96:30:8f:7b:48:f8:f1:
d2:43:6b:94:b0:93:3b:a1:48:70:9d:b5:d2:74:3c:74:6a:79:
de:ed:99:c3:a7:fa:aa:0e:81:32:51:6e:56:91:8d:12:7f:6b:
ce:0f:13:79:3c:8b:39:47:66:60:b4:6f:88:cd:b2:5e:ac:7e:
e2:76:4a:cd:25:49:67:8d:2e:54:2b:7f:0f:82:75:3f:41:48:
59:41:c8:86:7e:0e:da:f4:47:e2:3d:35:94:04:f3:42:f3:d6:
ee:62:bf:1b:45:ad:42:6b:12:d6:3c:a0:3c:99:a2:80:cc:97:
b4:32:9f:fb:47:06:81:01:2c:b0:62:ea:88:62:bb:b8:6e:83:
41:21:25:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 14:40:42 2025 by rpki-client