Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/k4YUvUaqFDGcw0pR8f5zKSn_Npc.roa
File: k4YUvUaqFDGcw0pR8f5zKSn_Npc.roa (raw, json)
Hash identifier: b3Bq3Kdon19Y13sC/QiWFZVgl24yeyFDpgYHTpoaDF8=
Subject key identifier: 93:86:14:BD:46:AA:14:31:9C:C3:4A:51:F1:FE:73:29:29:FF:36:97
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7D043626
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/k4YUvUaqFDGcw0pR8f5zKSn_Npc.roa
Signing time: Wed 20 Apr 2022 18:12:42 +0000
ROA not before: Wed 20 Apr 2022 18:12:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2097428006 (0x7d043626)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 20 18:12:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=938614bd46aa14319cc34a51f1fe732929ff3697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e5:ec:52:b1:40:34:e4:de:ae:7b:b7:63:43:
08:a9:10:54:8a:cd:19:10:7c:dd:70:23:d5:03:39:
57:2b:6c:8a:19:4f:4f:a8:fb:93:c8:a9:5f:c8:19:
c3:d4:7e:2c:65:5b:18:c3:00:dd:c5:2a:94:95:66:
48:4c:43:19:17:70:37:ed:99:b7:1c:ff:12:04:09:
a7:1a:23:52:0a:3c:c4:3e:f6:4f:69:db:df:33:6e:
16:fd:5a:45:ca:06:a0:c6:e2:48:6e:22:ef:bd:d1:
11:a3:8e:95:5e:03:c1:fa:27:12:ec:09:78:63:64:
4f:b3:6c:bd:31:2e:17:be:cc:83:06:f6:37:a5:ed:
11:ac:74:be:f1:2b:79:d3:1a:d6:35:53:81:de:e7:
34:29:ef:1f:16:9b:bb:90:42:77:4a:bd:bc:58:13:
fd:a6:cd:3c:00:df:64:84:05:26:7d:d0:98:4c:0c:
1e:be:d6:61:f4:70:5e:d8:91:de:79:bb:80:58:ac:
7a:33:39:ef:b8:42:0d:4a:92:b0:b9:b1:7e:93:7b:
dc:4f:2b:8e:8b:94:44:95:38:c8:fd:dd:06:c8:64:
a9:25:1d:ab:ab:84:64:8d:50:50:1e:30:57:09:a5:
6f:a4:5e:1a:f5:20:4c:6d:ea:e9:97:e2:75:b7:7d:
fe:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:86:14:BD:46:AA:14:31:9C:C3:4A:51:F1:FE:73:29:29:FF:36:97
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/k4YUvUaqFDGcw0pR8f5zKSn_Npc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ae:33:fb:44:5c:6d:3f:ce:ad:2a:5f:1b:94:30:a9:3c:30:c3:
41:a4:a9:59:d0:63:a6:b1:81:82:4a:83:9d:88:4a:c9:43:69:
93:14:00:5f:3b:2b:3e:01:d3:6b:46:34:4a:44:4e:e8:99:a8:
ac:3f:10:6a:99:88:a7:7a:e8:8e:f8:49:d1:f5:f2:08:16:51:
1a:34:2b:94:27:aa:4e:02:5d:34:13:e8:dc:44:ff:55:58:03:
d9:72:60:8c:bd:ed:1c:e9:87:77:70:25:a4:34:5d:ed:e0:cc:
0b:44:f2:c4:fb:e7:3d:cc:46:22:44:81:47:fb:1d:b4:94:7d:
d7:9e:7e:8e:c9:7d:87:ae:b2:0d:26:86:6b:62:3d:10:49:8a:
eb:db:2b:06:78:c4:7c:50:e4:36:9a:13:bb:4b:bb:73:b7:7a:
f6:dc:1c:03:34:2d:b8:8f:8e:a5:c7:96:18:df:c8:f2:48:37:
40:5c:a8:a9:67:85:f1:50:d3:8d:1c:1c:bf:71:72:0f:ac:f7:
33:a3:46:93:22:e3:83:d2:40:4e:f5:31:f8:b3:93:e3:9f:14:
69:e2:9d:37:b0:23:cd:29:e2:f5:18:34:c9:ba:c3:8c:3d:94:
1f:48:4c:88:99:9f:69:28:40:54:cc:a5:82:a5:f7:7a:a7:ed:
d1:74:a8:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 14:53:12 2025 by rpki-client