Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/j1WiYFRB5Utht5vyBKoHhT-ZYew.roa
File: j1WiYFRB5Utht5vyBKoHhT-ZYew.roa (raw, json)
Hash identifier: dSUXphfArMIx0GJh5ENa7mhcGgXWcHzNMQubXdDdyzc=
Subject key identifier: 8F:55:A2:60:54:41:E5:4B:61:B7:9B:F2:04:AA:07:85:3F:99:61:EC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01832E318F831EA8B8D04CC2712B3EEAB682
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/j1WiYFRB5Utht5vyBKoHhT-ZYew.roa
Signing time: Sun 11 Sep 2022 20:15:43 +0000
ROA not before: Sun 11 Sep 2022 20:15:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:2e:31:8f:83:1e:a8:b8:d0:4c:c2:71:2b:3e:ea:b6:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 11 20:15:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8f55a2605441e54b61b79bf204aa07853f9961ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:eb:50:22:15:9c:89:7c:e4:b7:d4:69:ae:f4:
3d:40:4a:c0:84:91:44:92:d2:d9:5e:17:5f:45:c2:
78:53:5e:73:99:3c:95:67:18:eb:90:07:b0:64:42:
4f:43:29:26:9d:2e:f1:ec:e1:28:29:b4:94:0a:02:
e5:99:75:01:59:c2:a1:4b:d8:41:69:65:6f:80:c3:
f5:aa:99:d1:e7:40:ce:cb:6b:7c:4a:29:5c:4b:c6:
ac:b1:5d:b0:aa:55:37:85:1f:a1:bf:64:70:f8:12:
dc:f4:3d:7d:7b:49:13:4f:66:06:1c:58:7d:e0:6a:
c1:c1:e2:1c:c0:81:ce:33:0a:55:6f:03:93:48:4e:
45:76:05:63:14:cb:e9:3d:45:6e:a7:74:46:61:17:
76:84:97:19:51:65:9b:61:7c:f6:cb:64:8f:82:af:
a7:e2:c7:98:f0:f9:3d:97:cb:23:c2:2e:59:d1:b8:
09:2f:f8:2a:9e:7e:dc:17:ef:41:be:7c:2f:f0:5f:
70:e6:f5:d5:c0:0f:a8:2f:e3:ef:45:41:0d:ce:66:
9f:17:6e:f2:46:9b:81:65:96:21:27:a0:56:ea:b3:
76:e1:2d:83:cc:67:fc:07:fd:47:75:e0:43:5d:fe:
43:be:ca:db:1e:5a:f9:3f:83:f8:34:99:10:d2:a7:
69:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:55:A2:60:54:41:E5:4B:61:B7:9B:F2:04:AA:07:85:3F:99:61:EC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/j1WiYFRB5Utht5vyBKoHhT-ZYew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9d:cb:d0:f2:b4:eb:44:c2:41:e1:6e:ca:eb:4b:05:ad:e7:04:
51:c7:92:ad:f5:1e:63:c2:65:6e:7c:7a:49:3d:16:69:7e:18:
02:eb:b4:9b:c5:73:2d:5b:09:96:21:70:9e:0a:93:b2:49:92:
e0:12:cf:c6:2d:7f:0c:93:3e:be:55:8f:4b:c5:a6:df:09:b7:
16:d8:19:3a:08:ff:7f:26:6b:24:64:58:02:a0:3b:50:33:e6:
09:59:ec:2c:bc:54:7a:bf:5c:c1:7f:04:13:75:ed:f3:f3:c4:
d2:74:49:b7:7f:71:d0:d1:48:e8:a6:ee:ff:18:fe:c8:a7:3d:
0a:bc:bc:3c:a2:79:9e:9b:4c:b7:12:78:3c:4a:4f:6c:29:e0:
ef:e3:11:0c:76:31:0c:db:93:f1:14:d2:b8:42:9e:9b:e4:f2:
6d:0e:cf:85:a6:87:e3:da:8a:80:60:9b:97:77:b1:2c:0a:c1:
32:e6:df:72:f3:8c:c1:0d:71:1c:5f:70:37:7a:d6:bb:06:34:
6a:8e:e1:9c:d8:a1:db:c5:d0:99:66:4f:f0:1d:89:fc:20:b7:
d7:08:05:51:30:02:80:f2:f1:64:48:89:a4:bb:f4:a5:12:74:
dd:6b:40:28:5b:26:db:b7:41:2a:35:fb:52:b6:81:79:9b:3b:
0d:32:a1:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:02:19 2025 by rpki-client