Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iagwPYPFoor-fkphqNPO2T3BxJU.roa
File: iagwPYPFoor-fkphqNPO2T3BxJU.roa (raw, json)
Hash identifier: kfCgbLVnogg3U0tb93WPeMELlheGWKHtEVxxwf6FUoA=
Subject key identifier: 89:A8:30:3D:83:C5:A2:8A:FE:7E:4A:61:A8:D3:CE:D9:3D:C1:C4:95
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184F214323D08A893A80A27A8EC1DE7E184
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iagwPYPFoor-fkphqNPO2T3BxJU.roa
Signing time: Thu 08 Dec 2022 14:12:00 +0000
ROA not before: Thu 08 Dec 2022 14:12:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f2:14:32:3d:08:a8:93:a8:0a:27:a8:ec:1d:e7:e1:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 8 14:12:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=89a8303d83c5a28afe7e4a61a8d3ced93dc1c495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a6:3d:2d:a8:b5:45:35:9c:5c:34:bd:e6:5c:
b9:c7:fb:62:08:2d:9c:12:27:52:df:c7:cc:a1:13:
11:c2:82:c8:d0:a8:12:e9:85:77:30:aa:86:b8:88:
93:87:8e:dc:77:4e:b0:1f:d9:d4:bb:8b:de:83:05:
a5:46:41:f0:fd:3e:9d:66:af:84:4d:d9:7c:63:e8:
09:03:30:22:cf:30:2d:e7:ee:f9:55:de:28:9c:3b:
14:98:6f:95:50:ef:5e:f7:6c:9b:46:5a:58:2b:89:
e4:ae:da:9c:ff:29:cd:7b:57:18:b5:26:c8:eb:45:
51:38:4f:10:93:65:05:5c:db:4e:67:94:92:09:c1:
7b:16:98:cb:8f:44:d9:1b:51:fe:ee:b9:0e:bf:bb:
2d:b0:db:18:c4:8e:ce:9b:da:4c:a9:18:26:85:69:
58:70:40:0e:a6:5d:ea:18:10:c4:74:28:da:24:51:
db:ed:9c:d2:77:c8:91:c8:96:0b:f0:e4:1a:d1:94:
18:3d:82:f7:a8:b0:10:4e:dd:81:7f:63:03:f8:53:
1f:66:ca:58:1a:a9:b5:58:5b:74:16:22:4e:70:cf:
92:9a:4a:72:4c:bd:5d:c4:f2:72:7b:83:81:60:85:
01:fd:c3:87:eb:3b:1f:7d:fd:6e:ab:bb:81:25:d7:
55:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A8:30:3D:83:C5:A2:8A:FE:7E:4A:61:A8:D3:CE:D9:3D:C1:C4:95
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iagwPYPFoor-fkphqNPO2T3BxJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ab:28:1e:fb:01:ce:33:49:ac:1a:f4:09:cd:a8:45:35:1d:5e:
cc:d1:4a:1e:0c:66:ea:96:68:5b:35:67:d0:34:67:61:7e:c4:
ff:b6:d5:e9:f2:de:25:1d:cc:eb:1e:7a:52:1e:31:76:ec:61:
6a:21:c6:50:0d:08:75:9f:84:73:bb:ac:26:55:5b:51:ee:24:
f3:63:56:4a:e8:a5:5d:7c:32:54:6c:4c:16:c6:9c:28:ff:74:
f8:98:83:10:84:2b:02:0f:46:95:33:af:14:cd:63:22:90:f3:
a0:b2:4c:60:d2:6f:5f:df:8c:67:fb:92:d6:ff:7b:02:10:b3:
60:20:57:9f:08:12:c1:d3:75:c0:9d:43:86:14:48:96:e7:e8:
33:b7:60:ea:db:2b:49:d9:25:bd:49:c5:a8:97:29:b2:6a:62:
83:2e:03:b6:a3:5f:97:71:8d:88:18:05:ed:cc:b5:e9:93:ee:
cc:93:53:55:3c:7e:af:49:4b:5c:08:7f:d1:37:73:77:dc:ea:
20:16:79:47:b4:53:1e:f2:aa:84:fc:5c:d3:a9:f4:f3:e2:ae:
33:74:4d:28:4a:68:db:2d:d2:bf:7e:df:7f:4c:99:b1:bc:97:
11:60:b2:0c:75:27:c1:24:93:bd:63:11:fd:b9:c5:a5:d1:2f:
79:56:0d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 17:55:26 2025 by rpki-client