Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fMmBRineymbEla4-IVRGnSAajac.roa
File: fMmBRineymbEla4-IVRGnSAajac.roa (raw, json)
Hash identifier: K7h5g7Yi8LCkk+PBn3QQL5p5sPloiuJOzotJfbsbX9c=
Subject key identifier: 7C:C9:81:46:29:DE:CA:66:C4:95:AE:3E:21:54:46:9D:20:1A:8D:A7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01855458C69049BA1AF1C21FB954E426A613
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fMmBRineymbEla4-IVRGnSAajac.roa
Signing time: Tue 27 Dec 2022 16:09:41 +0000
ROA not before: Tue 27 Dec 2022 16:09:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:54:58:c6:90:49:ba:1a:f1:c2:1f:b9:54:e4:26:a6:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 27 16:09:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7cc9814629deca66c495ae3e2154469d201a8da7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:bd:f0:17:50:d7:93:89:a6:6e:5d:f9:c8:08:
b3:d0:85:ae:08:2a:59:13:b7:6f:bf:08:40:ff:91:
15:8b:be:cf:b7:f4:23:a0:42:12:ed:65:2f:4f:ce:
ed:56:b3:bb:2f:78:05:35:85:9c:7e:f1:1b:a4:95:
06:60:13:81:97:48:8c:ee:99:97:23:06:f0:20:19:
53:23:90:1f:19:71:1a:78:65:45:99:49:97:ac:e5:
44:d9:96:cf:b8:ed:2e:58:c4:17:44:90:37:0d:31:
0f:f8:f7:73:6e:88:2c:f9:39:4e:ce:38:0c:52:5f:
a9:bc:c0:0e:54:d1:9e:91:94:ab:68:74:0b:25:d7:
65:81:dd:32:db:bc:fb:21:19:e0:77:ba:a3:05:b0:
e4:62:29:2c:0a:e5:55:d3:73:99:45:08:c7:7c:87:
f5:c4:18:8b:f3:e7:fb:60:3e:96:7f:1b:61:3a:7f:
01:3a:a5:11:e4:2f:49:fe:26:6b:94:55:2d:0b:eb:
6c:cb:81:52:9c:c1:9a:72:74:e9:50:b8:87:4e:cf:
2f:bd:41:57:a1:36:13:0d:d7:42:29:eb:b8:0f:41:
1c:96:f1:76:f0:88:07:67:56:39:c2:dc:b5:53:3a:
ec:0a:30:d5:c0:f2:c6:e7:46:db:63:3d:72:69:33:
e7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:C9:81:46:29:DE:CA:66:C4:95:AE:3E:21:54:46:9D:20:1A:8D:A7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fMmBRineymbEla4-IVRGnSAajac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a6:21:dd:83:31:5b:4e:2c:d0:ca:2b:cf:6f:d5:35:17:36:ae:
c7:b6:4c:18:60:21:43:7e:c9:c4:1f:4a:c9:7f:6e:cd:0a:08:
22:b3:a1:3b:d8:c9:b0:6b:5e:52:ed:9f:bf:c1:77:87:9c:f0:
5b:c3:c1:fa:ee:c0:a5:05:c3:07:11:97:85:d1:7d:07:21:7a:
2d:53:15:47:32:9e:e3:47:61:95:75:83:fc:f3:d1:3e:30:5c:
9f:12:55:fc:68:a2:ca:a7:af:af:0f:ed:ff:7a:07:68:36:19:
ec:ad:0d:52:85:9d:d6:02:7d:98:2f:8c:92:31:db:31:70:57:
07:5a:76:dc:bb:a1:2d:66:e6:50:5b:f3:99:b5:c6:73:03:8a:
b0:4c:6e:cb:9d:4f:0d:09:e6:da:4b:8c:a6:aa:76:bb:a1:6c:
8b:41:ea:3e:16:c7:53:25:b4:74:b6:50:39:97:7d:2b:64:85:
23:7e:05:df:3d:9a:1a:3f:d9:e3:40:d9:0e:44:2c:0a:93:2f:
ae:9e:4c:41:34:b7:7d:0a:42:ad:16:bf:e3:c6:a4:90:74:4b:
28:e1:db:fa:1b:22:7c:f5:d4:21:37:f1:87:80:8a:19:c8:4d:
e7:40:f6:e3:65:02:9d:10:74:bc:40:01:10:4b:18:af:71:bd:
f7:23:2e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 21:57:27 2025 by rpki-client