Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iZQSxecwNGtiXJrdv221XpuVgro.roa
File: iZQSxecwNGtiXJrdv221XpuVgro.roa (raw, json)
Hash identifier: EYcBuu6IwKNu5pGwQXje1XP1M0EK+vaqsRUJTVOjrH4=
Subject key identifier: 89:94:12:C5:E7:30:34:6B:62:5C:9A:DD:BF:6D:B5:5E:9B:95:82:BA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6AA47CF8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iZQSxecwNGtiXJrdv221XpuVgro.roa
Signing time: Mon 14 Feb 2022 23:08:53 +0000
ROA not before: Mon 14 Feb 2022 23:08:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1789164792 (0x6aa47cf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 14 23:08:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=899412c5e730346b625c9addbf6db55e9b9582ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:18:a8:a2:14:16:e4:a1:48:73:ae:77:9a:9e:
b6:be:01:ac:7d:e1:aa:cc:78:0b:3b:5f:a8:74:3d:
c0:a6:39:31:a7:88:2e:d4:66:07:fd:1d:5f:61:0e:
43:09:dd:05:3c:98:37:ab:07:62:e9:d5:b4:d9:c9:
d2:77:92:5d:4e:67:8e:9f:36:8a:67:ac:2f:8d:88:
3e:18:7f:b5:9d:42:ac:e3:bf:d4:c3:a3:c1:00:2e:
f4:42:45:c0:a5:c7:82:7c:ff:39:46:ee:06:1b:ed:
28:4a:08:b9:f6:5a:88:c9:60:b0:8f:a4:66:68:9f:
4f:28:40:ec:9a:da:ac:55:24:d7:8a:fc:df:d2:50:
f4:cd:3d:78:50:ce:1a:36:94:38:27:5f:a9:19:fe:
2e:e6:23:2c:3e:1e:f5:5e:83:94:1d:e9:08:be:93:
07:4e:11:2f:01:87:1c:9b:1c:48:91:80:2d:92:44:
c0:9e:df:01:fe:8b:93:c6:76:12:1a:99:51:a5:7e:
a4:08:de:a2:12:e8:23:98:11:c0:4c:9c:8a:a5:6d:
21:da:52:12:22:3e:95:9f:ca:8b:0c:ee:59:fb:60:
b4:12:a1:eb:97:10:6c:e7:f1:0f:85:7a:da:80:68:
af:5a:87:46:38:91:63:51:e6:8b:9b:b1:ec:72:2e:
83:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:94:12:C5:E7:30:34:6B:62:5C:9A:DD:BF:6D:B5:5E:9B:95:82:BA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iZQSxecwNGtiXJrdv221XpuVgro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
36:8d:ce:19:ff:df:b1:20:7c:55:03:62:12:e7:ac:ae:0b:48:
84:ab:7a:ce:ee:85:7f:13:24:11:32:82:4a:d3:86:5b:e5:b8:
7d:df:9d:3c:77:1e:8a:41:f2:95:c2:f9:e1:16:5f:a5:fb:bf:
7a:aa:b0:e2:b2:75:e7:94:2a:ee:39:dd:de:38:e7:f9:d8:9b:
53:e2:91:62:4f:da:eb:08:53:5d:ba:79:eb:2a:12:70:70:78:
f2:0f:25:40:3f:c6:4c:81:52:fc:ea:ed:1c:1d:4f:0a:d3:f0:
6a:17:ef:42:83:66:a3:55:ac:1e:c8:6c:74:4d:00:b7:26:3f:
4e:75:67:05:e4:d0:82:d5:a6:ff:70:fe:fa:67:cc:c5:f2:16:
8a:9a:ef:65:9a:34:ae:cc:cf:34:db:f2:5e:34:ff:cb:8a:d6:
7d:b1:b9:9b:5f:e8:b8:4a:c3:4f:b6:ec:66:da:3e:e8:c9:20:
22:58:9e:31:74:12:8c:67:a9:83:da:2b:54:d3:6b:d3:2e:ff:
12:93:55:e4:59:68:47:e5:aa:14:6c:f1:e1:48:73:1c:89:fc:
b3:95:c1:fd:72:45:46:72:72:de:dd:6e:c4:7c:b5:de:7c:c5:
6f:7c:75:bc:6a:11:b2:af:d3:8d:98:7d:f6:43:81:3c:01:c5:
a8:24:62:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 03:45:33 2025 by rpki-client