Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jAU1wpYSzfMYTeU1hxpA-PuIxFE.roa
File: jAU1wpYSzfMYTeU1hxpA-PuIxFE.roa (raw, json)
Hash identifier: KOF83Jm+OSn00PJXLqmfXoJtOIDkYIN7Y2YU4VbPMTg=
Subject key identifier: 8C:05:35:C2:96:12:CD:F3:18:4D:E5:35:87:1A:40:F8:FB:88:C4:51
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01852E5D050E3F275CC47320AF29326C5E10
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jAU1wpYSzfMYTeU1hxpA-PuIxFE.roa
Signing time: Tue 20 Dec 2022 07:08:46 +0000
ROA not before: Tue 20 Dec 2022 07:08:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2e:5d:05:0e:3f:27:5c:c4:73:20:af:29:32:6c:5e:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 20 07:08:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8c0535c29612cdf3184de535871a40f8fb88c451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:5b:d5:b2:67:f9:ee:3d:d2:cd:40:35:bf:64:
0f:11:d1:a3:f9:e9:6a:a3:ed:68:52:3a:61:e4:a4:
1a:3f:43:f7:af:72:44:73:1f:75:0e:3e:b1:73:58:
6e:d6:ae:d5:83:10:f3:b5:42:a9:03:cf:d0:06:e4:
90:6a:75:00:8e:e5:80:ee:cf:97:eb:51:65:5e:20:
97:65:d9:f3:05:2b:a9:e5:1a:eb:cd:97:e7:cc:03:
8a:1f:4d:65:28:d0:aa:e2:87:ef:5b:54:f3:d7:c4:
4a:00:5f:cc:a6:ca:70:eb:e5:03:30:d0:d1:0a:c7:
ad:4e:db:d4:7e:3e:91:60:de:0e:d1:c6:80:d7:18:
a8:0f:6d:be:ac:f9:39:c3:e7:77:b4:c3:7c:2c:55:
25:ea:68:45:ae:db:6b:8e:b6:6a:7a:0c:40:a6:f9:
5d:96:12:2d:da:f9:44:75:03:fe:ef:9b:0c:33:90:
d1:5c:c5:58:21:78:e2:ff:c6:b0:f6:34:73:12:fd:
48:19:d1:ab:4a:a8:28:9d:a4:d1:8f:79:67:cf:9c:
db:d1:d0:3d:68:f4:2f:6d:68:05:c6:42:a8:f2:5d:
17:14:24:00:7f:0e:e8:4e:1b:ff:5a:3c:0d:e9:60:
4c:8f:8a:a3:3d:e7:53:31:c0:af:56:09:6f:4b:d6:
15:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:05:35:C2:96:12:CD:F3:18:4D:E5:35:87:1A:40:F8:FB:88:C4:51
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jAU1wpYSzfMYTeU1hxpA-PuIxFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
11:d4:01:04:4a:c3:ea:2d:12:18:12:81:d4:f8:d2:13:1c:02:
c6:22:ea:06:a9:9d:c3:06:62:a0:9a:5b:eb:2e:29:fd:e1:53:
56:27:5d:d6:65:b0:a0:23:a6:5d:07:24:59:b8:f8:5f:70:31:
7a:31:2f:2a:30:1c:00:32:56:61:fe:bb:0d:f7:d1:77:c1:24:
3f:ec:46:58:93:91:dd:e5:9f:90:90:28:92:ef:02:69:7d:29:
93:61:0e:66:16:b1:e9:89:b3:d1:56:2e:e9:08:02:e5:bb:57:
e9:5d:ee:9f:77:e7:58:9d:06:7a:c6:b5:f1:24:dc:dc:0a:16:
06:19:6b:35:20:3c:45:bd:06:cd:1a:04:db:41:6f:6c:bd:f4:
1a:c4:46:ad:7b:f5:cd:e4:95:4b:9d:b8:cf:63:57:0b:43:66:
3a:a4:c1:b7:85:f4:58:2b:dd:c8:71:99:dc:23:be:b6:39:97:
77:ef:28:2d:84:e2:61:bc:18:46:3c:79:d8:ff:33:ec:6f:96:
60:bb:37:57:2d:4f:50:21:52:5c:1e:59:15:2b:85:8f:cc:0c:
b0:38:b5:d0:46:2b:af:4b:6c:de:7a:e7:9e:a9:ec:96:63:47:
9c:5d:e0:2a:34:39:87:18:5f:f7:ff:f5:74:99:21:a4:e8:6a:
fd:49:63:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:51:27 2025 by rpki-client