Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fRmP_gQhjYq7CaWn_LHCA6qmcqE.roa
File: fRmP_gQhjYq7CaWn_LHCA6qmcqE.roa (raw, json)
Hash identifier: H8f4GC7y1jsIjMRmP07ZTQEvNafWNnta4LZAMzGIraw=
Subject key identifier: 7D:19:8F:FE:04:21:8D:8A:BB:09:A5:A7:FC:B1:C2:03:AA:A6:72:A1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 793F2772
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fRmP_gQhjYq7CaWn_LHCA6qmcqE.roa
Signing time: Thu 07 Apr 2022 13:09:33 +0000
ROA not before: Thu 07 Apr 2022 13:09:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2034182002 (0x793f2772)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 7 13:09:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7d198ffe04218d8abb09a5a7fcb1c203aaa672a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:46:2c:30:16:7a:8f:63:4a:89:5b:d1:80:95:
a3:56:c8:3c:43:6a:65:09:1f:5e:0c:29:be:67:08:
0d:fb:28:67:6f:da:5d:bb:99:6c:7e:5d:26:9e:d9:
23:b7:d6:b2:b2:31:99:ee:67:82:a3:77:9c:7b:b5:
84:ef:2c:c7:16:ba:48:d7:92:50:a4:ac:59:1e:97:
7b:08:04:fb:91:d5:31:81:8d:b1:c8:fa:27:b9:06:
9d:3c:bc:c6:c9:9f:a6:08:62:67:02:60:d2:e3:ce:
18:0e:f5:2d:19:c4:b2:6e:be:92:04:a9:75:ae:d7:
a4:4b:21:fe:7d:04:eb:b4:d2:d6:74:8c:25:f8:63:
2e:ee:9e:e2:28:5d:59:49:bc:ee:93:0a:a7:de:8c:
de:11:05:62:d2:dd:56:20:19:59:70:fc:3a:0e:00:
ba:9b:b4:20:09:7d:a8:70:83:29:1b:e4:ec:6d:2c:
71:ee:c2:11:a1:77:98:1f:a4:8f:bd:20:ee:d0:ce:
99:86:37:7f:d0:ef:c2:34:74:29:3a:9b:c1:63:77:
c2:bd:f9:d1:65:6c:db:b3:c1:af:fe:93:ec:c4:e7:
7b:e5:6b:62:a5:8c:81:57:9d:c2:cd:50:58:cd:55:
a2:5c:09:73:df:1d:08:2a:7e:15:46:78:49:f0:64:
b4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:19:8F:FE:04:21:8D:8A:BB:09:A5:A7:FC:B1:C2:03:AA:A6:72:A1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fRmP_gQhjYq7CaWn_LHCA6qmcqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
75:c5:5c:af:c8:a5:d3:bc:28:73:d2:e3:70:d1:60:a4:89:5d:
85:c8:73:a1:f6:bb:e9:06:b0:d4:db:4e:94:22:c3:e6:a3:15:
36:b8:f0:d2:1e:88:0d:f5:7e:1c:b6:6f:f5:0f:4f:65:fa:03:
26:54:6f:4f:e9:bb:6b:ec:46:64:47:33:e6:48:ce:ba:48:65:
96:4f:2a:2b:dd:70:65:0d:91:bc:08:e5:7a:2b:14:6c:e9:3b:
11:df:17:c4:96:e3:0a:d4:31:ab:d5:d6:8d:63:32:e4:52:b8:
14:40:5e:eb:c7:50:a4:87:97:98:f1:7f:35:33:4f:0c:14:82:
9c:e6:c7:a8:3d:e0:29:bb:47:68:6c:90:05:77:4c:08:65:31:
0a:09:eb:90:f7:3c:73:c8:2f:87:07:22:99:df:bd:7d:44:78:
4a:ea:86:54:9e:7e:8e:f2:d8:ee:56:1b:a8:b2:e2:42:b7:19:
f9:e6:58:e3:aa:bd:7d:87:7c:a3:15:8b:36:ad:b9:68:b6:be:
97:a7:66:c7:e6:5d:da:88:58:5a:0c:51:19:16:50:2e:4a:b6:
78:de:6c:bb:a7:dc:ff:02:d0:79:61:fa:d2:8c:5e:9f:ff:5b:
bf:5a:70:4f:19:d1:4c:3a:d1:9e:6b:81:77:3b:8b:4f:e5:5c:
82:b8:bd:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 15:11:37 2025 by rpki-client