Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lIsvB5pJ3ZpmT9XZeDFcVcXwBLY.roa
File: lIsvB5pJ3ZpmT9XZeDFcVcXwBLY.roa (raw, json)
Hash identifier: gQtsC42xD+aYptHSl26WnCA1i89iVD9pmVGX9S6+Ff4=
Subject key identifier: 94:8B:2F:07:9A:49:DD:9A:66:4F:D5:D9:78:31:5C:55:C5:F0:04:B6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182C61D766A48658317BB70A1CEDE80C2CF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lIsvB5pJ3ZpmT9XZeDFcVcXwBLY.roa
Signing time: Mon 22 Aug 2022 15:13:15 +0000
ROA not before: Mon 22 Aug 2022 15:13:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c6:1d:76:6a:48:65:83:17:bb:70:a1:ce:de:80:c2:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 22 15:13:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=948b2f079a49dd9a664fd5d978315c55c5f004b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:bd:7f:95:0a:bf:c8:5d:b5:15:9c:a9:9e:cf:
22:38:c5:57:da:91:a6:10:9e:fb:e5:67:f8:1c:02:
e0:6c:4c:86:7b:fe:14:91:53:a8:ee:3d:1d:cc:07:
07:87:d9:e3:a7:8a:d1:fd:ee:73:c6:15:bd:6b:79:
ca:08:51:c6:57:3d:0c:9f:ad:ab:16:ea:c1:18:c2:
1c:ce:95:94:3e:c0:d0:bd:3c:f2:0f:cb:b2:68:2a:
96:c5:95:ed:10:b0:41:ae:09:bf:ba:96:d1:eb:ec:
0c:a5:87:7f:71:5b:46:13:99:7d:37:87:99:f6:9a:
48:c9:91:96:aa:5f:8e:64:0a:b9:6a:01:66:fd:95:
62:0d:d8:74:8b:7c:6c:88:09:39:f6:0a:fa:af:8e:
8c:d5:67:5b:89:68:22:ee:8e:21:7f:56:78:25:e4:
ca:cf:af:c1:3e:f7:0a:f4:0e:fc:bc:a0:f6:86:a8:
77:62:5e:20:2c:8f:73:9a:5f:64:b7:aa:95:55:4b:
15:39:db:7c:fd:fa:1c:57:76:da:5c:ff:8b:3f:c8:
cc:b0:da:17:83:b4:58:ef:f7:37:94:8d:e7:03:05:
ae:c9:7a:c8:d1:4d:04:a4:8a:03:cf:1c:0b:05:e0:
72:88:1b:15:2d:7d:49:2a:11:b9:ce:37:f8:f1:b4:
7a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:8B:2F:07:9A:49:DD:9A:66:4F:D5:D9:78:31:5C:55:C5:F0:04:B6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lIsvB5pJ3ZpmT9XZeDFcVcXwBLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1b:4b:43:32:81:8e:0d:61:8a:bb:f2:9a:cd:29:9e:a0:1d:aa:
f9:f6:4f:d5:bc:dc:7c:9d:84:fb:3b:c6:3b:dc:52:7e:50:d5:
a3:f6:ef:75:f9:4c:31:72:d1:95:2b:81:8d:f1:f1:b2:d2:b4:
d8:fe:7d:d4:e0:cf:2a:3b:aa:22:e7:af:36:13:b8:f8:9c:79:
ca:a2:68:5e:b5:fa:a1:38:7f:cf:dc:f3:61:7b:a1:b4:57:13:
f9:56:df:4f:7d:7b:4b:be:2a:1c:73:9e:ed:e1:0c:3d:72:19:
db:b2:f7:05:08:f0:3e:44:8d:c8:e6:d1:7b:1e:a2:ef:37:8c:
62:45:f7:51:73:8e:b3:27:2b:e1:94:b7:4b:ba:d5:8d:14:92:
db:49:c2:8d:f7:02:0e:5c:87:c3:85:f2:d5:e1:ee:56:c5:43:
67:f0:e8:f4:6e:72:cc:f0:f0:35:98:c9:f1:a0:26:7e:e4:92:
88:27:64:b1:69:4d:30:4a:81:38:36:cd:f9:0d:00:73:89:cf:
13:a2:ca:0b:0e:59:23:2a:0a:01:d5:c6:91:2b:96:d1:a8:2b:
ef:53:12:ba:de:a4:a0:89:c3:f9:6c:98:4b:d0:1f:d6:57:b6:
79:1a:c1:5b:cc:eb:ec:23:46:4f:ae:55:b5:81:aa:70:7a:fb:
1f:9f:a3:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:26:50 2025 by rpki-client