Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ky9s46lmxDTj-CCNsoOjzCvzB_A.roa
File: ky9s46lmxDTj-CCNsoOjzCvzB_A.roa (raw, json)
Hash identifier: gQve1wyA5sMcvrwy4mWvuxNpl2j8mWg9tAWSaws+hDI=
Subject key identifier: 93:2F:6C:E3:A9:66:C4:34:E3:F8:20:8D:B2:83:A3:CC:2B:F3:07:F0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6C142876
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ky9s46lmxDTj-CCNsoOjzCvzB_A.roa
Signing time: Sat 19 Feb 2022 22:09:41 +0000
ROA not before: Sat 19 Feb 2022 22:09:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1813260406 (0x6c142876)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 19 22:09:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=932f6ce3a966c434e3f8208db283a3cc2bf307f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c7:9f:07:e8:98:aa:1c:e1:36:30:42:47:34:
cb:52:d2:58:9e:f4:55:60:5e:3b:2d:36:b7:81:68:
e0:b7:67:22:e2:0f:2c:40:0a:64:a5:6b:62:bc:d6:
c6:ae:db:71:2c:34:d5:f1:95:7e:f9:06:a8:94:1b:
a7:43:24:e6:7d:39:92:02:86:d2:5b:df:22:29:5f:
67:15:6d:f2:51:90:11:49:ee:38:66:07:8c:c6:59:
12:fa:d8:0c:42:12:bf:e9:28:c3:a1:9b:8c:66:fc:
c0:11:bc:cc:64:72:65:3a:df:ba:e7:69:bd:56:af:
e9:ce:87:ec:28:37:c7:4b:f6:e3:9b:12:16:5d:a1:
fd:b0:0b:e5:ee:1e:6a:20:6e:f7:f7:75:b0:fd:e0:
2b:68:8f:28:69:af:2b:5e:65:2d:5a:10:5d:48:15:
84:90:2d:39:b5:ba:72:3d:e5:67:42:b2:1d:25:31:
b8:07:dd:23:ac:df:75:26:35:ce:bb:07:1d:d2:2e:
74:94:a1:c8:68:52:e4:ac:e8:2b:1c:b4:47:31:b3:
84:80:66:a7:da:84:8d:f7:4d:0d:ef:0b:fd:0e:7a:
f2:07:83:f3:44:9a:cb:1c:da:82:db:35:17:33:59:
47:99:56:8b:8f:79:18:28:7b:5c:a6:3e:c9:16:fc:
e2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:2F:6C:E3:A9:66:C4:34:E3:F8:20:8D:B2:83:A3:CC:2B:F3:07:F0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ky9s46lmxDTj-CCNsoOjzCvzB_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
73:38:50:c5:36:80:88:14:fb:d7:81:32:31:87:13:6b:09:80:
ee:b1:3b:b5:e8:2e:b9:39:58:90:03:0b:ca:66:e3:7f:a4:e6:
cf:9f:1e:95:23:b2:0c:69:db:74:11:c2:52:64:f8:65:82:f7:
a7:3c:6e:48:0c:a1:0e:ab:51:59:cc:71:94:e3:1d:57:da:39:
57:b3:33:47:3c:77:9d:f0:9e:ab:be:c4:ab:1e:c3:e0:22:ae:
be:54:69:72:b4:b6:4c:b0:60:33:79:bf:39:2d:cd:bb:92:70:
d0:15:e7:03:02:7f:c3:35:4e:97:30:48:f1:2a:82:5d:28:70:
da:76:09:13:57:0e:34:23:ec:ad:7c:e7:97:4a:ec:f9:aa:a4:
27:e5:bd:9d:29:7c:32:78:7e:13:5d:44:8a:dc:1e:e0:30:d5:
9b:07:98:74:98:be:d1:58:30:85:9c:e8:63:6d:c5:66:c9:92:
6e:2c:36:9a:7e:63:73:6f:1c:58:6f:eb:4e:97:65:c1:ce:c4:
ac:8a:ba:46:b9:1e:e4:a4:18:60:1d:bf:02:bb:8b:de:4b:33:
f7:f2:61:3c:65:59:68:a8:0c:b8:47:44:59:50:31:7b:ba:f3:
d5:9a:e5:3f:7d:99:70:c1:d9:99:72:8e:b4:1e:31:8c:52:7c:
73:69:6e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:14:02 2025 by rpki-client