Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lXvFJY0FcFMrl7KOSK0_PmD3suo.roa
File: lXvFJY0FcFMrl7KOSK0_PmD3suo.roa (raw, json)
Hash identifier: aEcXM2jGE0s5gdDIxZnZ2FBtBduDI49E8a3w6BdA31Y=
Subject key identifier: 95:7B:C5:25:8D:05:70:53:2B:97:B2:8E:48:AD:3F:3E:60:F7:B2:EA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6EFE3DFD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lXvFJY0FcFMrl7KOSK0_PmD3suo.roa
Signing time: Wed 02 Mar 2022 08:08:30 +0000
ROA not before: Wed 02 Mar 2022 08:08:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1862155773 (0x6efe3dfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 2 08:08:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=957bc5258d0570532b97b28e48ad3f3e60f7b2ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:57:21:07:40:61:86:99:a1:db:32:0e:b0:6c:
c7:f2:18:05:32:6f:a5:36:7b:d5:ae:02:f7:e7:44:
d6:8a:cb:e8:18:9a:66:14:21:34:d5:08:2c:f7:7b:
e1:ef:a4:ce:a7:3d:f2:3f:1b:70:7a:e1:0f:b2:29:
2c:e8:93:79:c8:07:2d:bf:94:d3:f3:1b:25:1a:24:
d3:06:79:ec:eb:17:d2:48:a2:ad:a5:ef:f6:d6:a5:
a7:58:03:e8:ed:fc:6a:f3:29:0c:73:c7:f2:55:fb:
7c:d8:5f:c7:0a:73:e9:6f:24:ce:15:4c:c9:08:e4:
ac:09:68:0d:31:69:66:2c:43:da:53:b0:0e:37:aa:
e6:7c:12:9f:8e:a7:79:59:c1:72:75:fd:fc:11:32:
66:fe:b6:1c:95:35:7b:aa:93:47:36:5a:50:7d:a9:
16:44:f6:86:59:5e:b1:ff:b6:00:15:f7:2f:ef:76:
2c:ef:54:76:ff:bb:87:42:72:59:58:ab:e4:a3:89:
6c:73:ef:6e:f0:55:56:2b:e3:6f:bb:95:ef:10:f6:
88:01:eb:1d:8b:4c:ce:05:6a:22:2f:b6:c9:2b:d7:
0c:56:83:b0:1d:40:ae:02:8e:4a:46:ab:f3:f5:59:
ff:54:46:f6:47:07:7f:81:a0:01:61:a0:8c:ee:8c:
f5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:7B:C5:25:8D:05:70:53:2B:97:B2:8E:48:AD:3F:3E:60:F7:B2:EA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lXvFJY0FcFMrl7KOSK0_PmD3suo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
14:72:9b:67:68:05:7d:3a:bf:9a:be:00:f5:2b:de:ec:12:d5:
ec:5a:a1:23:75:e2:66:d6:d2:2e:83:7e:a2:75:2b:45:07:a1:
4a:60:5a:16:f9:a2:65:8d:8d:71:43:8f:f4:2a:be:d7:1b:57:
cc:5a:3d:47:63:09:83:95:b2:22:f3:fe:e0:17:8d:f0:2b:7b:
b8:00:52:26:e4:96:a3:89:56:ed:1d:f7:6b:f9:91:a2:8b:ab:
b4:97:ac:3d:c1:f2:50:24:29:6b:be:08:96:11:44:14:0a:d9:
a0:56:9e:e0:02:84:2a:e3:7a:70:87:47:17:96:7b:87:29:8c:
09:bf:6a:d8:af:33:cb:a6:b0:c6:a8:f1:a9:76:bb:81:69:9a:
ab:d8:51:a8:50:dd:09:20:7e:61:dc:88:bc:02:34:d7:81:66:
99:3c:d5:27:49:9b:7b:1a:10:39:e5:76:ec:e2:59:7b:53:cb:
07:2c:55:94:53:e6:3e:a3:74:32:01:91:66:00:57:65:41:0d:
fd:27:cd:a0:5e:c9:9a:6d:6a:5f:ad:97:7a:c7:48:99:d0:39:
28:aa:e8:f6:e0:81:3f:1a:31:e2:ba:4f:5f:43:b2:c2:a2:a5:
3b:6c:a6:a7:5a:d2:cb:be:b9:d3:77:38:04:bb:18:21:36:47:
c5:33:dd:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:23:12 2025 by rpki-client