Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/j2B4yUQPIu34_d7SmOSgDIJGNfs.roa
File: j2B4yUQPIu34_d7SmOSgDIJGNfs.roa (raw, json)
Hash identifier: xvtjagFJOpFAVLasTjyRR4M6FEzSpzvMZ2wMiaVF1Dk=
Subject key identifier: 8F:60:78:C9:44:0F:22:ED:F8:FD:DE:D2:98:E4:A0:0C:82:46:35:FB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185ED1FF7CDD083F52FA5C9CACAA548A97E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/j2B4yUQPIu34_d7SmOSgDIJGNfs.roa
Signing time: Thu 26 Jan 2023 08:09:33 +0000
ROA not before: Thu 26 Jan 2023 08:09:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ed:1f:f7:cd:d0:83:f5:2f:a5:c9:ca:ca:a5:48:a9:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 26 08:09:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f6078c9440f22edf8fdded298e4a00c824635fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ae:9a:8f:28:cb:a4:c5:c7:c9:f9:6d:e0:42:
cc:41:94:e1:bc:28:6d:8e:eb:a3:94:40:79:df:cd:
f1:08:70:e9:4c:57:42:7e:97:9d:84:66:6a:ee:9b:
0e:aa:86:cc:74:02:2f:e9:02:8c:f5:1d:60:e0:02:
c8:f8:80:2e:cb:00:a4:43:38:2c:82:90:da:d5:1a:
e0:b9:aa:79:4a:21:37:e7:39:38:36:ff:47:19:63:
2f:d1:58:b2:e1:78:37:00:5d:b1:b4:d9:4a:d5:dd:
9b:e3:a0:ca:3b:b4:a1:8f:88:a7:24:d9:ca:08:b3:
c2:40:27:ff:5b:03:b7:fe:66:d9:9e:e7:6b:eb:8a:
17:90:23:20:87:43:e0:11:a9:91:f2:6a:9d:e3:f5:
30:c6:45:25:b7:c6:f2:17:09:11:9e:e4:9f:b5:54:
e0:a1:16:58:3e:64:4d:8a:dc:94:4c:50:1a:59:3f:
83:86:75:d6:52:2b:f5:55:d9:ce:1d:bc:ff:04:02:
3e:7e:04:88:42:ef:7d:52:79:a6:89:f5:b8:db:08:
b3:7f:de:e5:0f:70:25:7d:07:80:35:23:bc:82:3c:
59:66:0b:5c:38:a4:72:2f:a2:bc:bb:51:1e:0d:b8:
ed:0b:96:f3:36:b1:4c:3b:64:59:42:e7:91:37:03:
9a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:60:78:C9:44:0F:22:ED:F8:FD:DE:D2:98:E4:A0:0C:82:46:35:FB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/j2B4yUQPIu34_d7SmOSgDIJGNfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
50:5e:10:56:63:d2:6b:c8:aa:69:c9:7e:27:09:d2:3d:73:e9:
4b:16:65:1a:f4:6e:f3:80:e4:55:79:1c:8d:89:f8:2a:c2:58:
b0:98:48:ef:8b:c3:2c:c8:b7:e2:0d:97:08:38:70:d3:35:f5:
48:b7:83:7f:4c:11:05:80:e2:0c:32:19:b1:e5:f8:c2:5f:59:
00:14:13:4f:dc:d0:99:63:50:90:0a:ee:fb:91:07:2a:33:12:
8a:86:2b:ba:5b:8f:95:6c:39:57:52:b1:07:ce:c1:23:1b:fa:
46:55:37:7b:70:46:56:ec:c5:2e:e0:8e:5b:0e:40:d7:6b:18:
6f:f7:f6:af:6c:66:a5:52:30:c6:1d:9c:6c:31:bf:46:2e:40:
f8:cc:a9:9b:ff:16:7f:23:46:6e:85:0b:47:cf:97:e4:2e:bb:
ee:fc:fd:36:57:42:e4:51:49:9e:2d:18:04:40:fb:b6:c4:e3:
3a:1f:b6:35:1b:8b:67:bc:bd:96:8e:f2:27:c2:f6:0e:05:48:
cb:a2:22:04:3f:b6:0c:56:1c:cc:7f:c4:95:d1:17:43:85:4e:
ca:0f:2e:a3:5e:b1:e0:08:6d:e5:c8:9a:35:93:94:4e:3c:6d:
c8:58:e0:ff:de:0a:f3:2c:be:f1:20:2f:d9:fb:53:5f:b7:07:
66:70:2c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:22:58 2025 by rpki-client