Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/m1B7fUYmjF9xN00fHCYlycsZUes.roa
File: m1B7fUYmjF9xN00fHCYlycsZUes.roa (raw, json)
Hash identifier: OLRoxkt1uABF4y6TouuBMchlDqxeb7sGczPbjO15er0=
Subject key identifier: 9B:50:7B:7D:46:26:8C:5F:71:37:4D:1F:1C:26:25:C9:CB:19:51:EB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8AACEB34
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/m1B7fUYmjF9xN00fHCYlycsZUes.roa
Signing time: Tue 07 Jun 2022 10:14:02 +0000
ROA not before: Tue 07 Jun 2022 10:14:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2326588212 (0x8aaceb34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 7 10:14:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9b507b7d46268c5f71374d1f1c2625c9cb1951eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:73:93:a6:36:91:e6:3d:9f:e3:e2:73:a7:db:
19:ae:1e:10:4a:c5:a0:01:b0:ae:65:bb:af:c3:f6:
90:7f:e8:0e:44:ba:7a:6f:34:36:96:92:d6:8f:7e:
6d:d4:17:a2:1b:e5:a9:53:63:13:6d:75:eb:dc:94:
b6:f0:54:c5:c2:61:0a:e4:91:a5:91:fd:9b:79:74:
fa:6d:f9:1f:cd:2a:db:fd:40:08:97:9e:52:f0:86:
00:b3:52:3e:22:70:ce:77:06:03:30:58:10:dd:c8:
49:00:c2:a5:95:c7:20:7e:66:c8:e4:ab:93:5f:db:
a7:91:2f:83:c5:a5:fb:d7:ca:20:fb:02:b3:b5:08:
89:57:ae:43:25:a9:bc:ac:0c:cc:0a:c2:de:8c:db:
dc:cf:92:03:e5:ab:27:9c:ec:51:98:62:56:c5:c7:
11:6e:7a:77:f5:65:16:3b:59:25:a4:f7:98:a9:13:
3a:86:26:b8:16:03:c2:c1:e4:81:b2:c6:0d:0a:7c:
18:9e:88:8f:fc:51:6d:ee:5d:73:3a:b6:2e:fa:0f:
a1:af:6e:ab:5b:98:95:c6:b2:3d:ef:58:d2:fe:8e:
7b:51:ef:c7:78:b8:63:5e:cd:46:b7:1b:c0:c7:c9:
35:f8:f4:d6:15:b1:48:52:6d:c5:ed:0e:f4:bf:bf:
38:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:50:7B:7D:46:26:8C:5F:71:37:4D:1F:1C:26:25:C9:CB:19:51:EB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/m1B7fUYmjF9xN00fHCYlycsZUes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2d:08:ef:12:78:70:f0:4d:c1:3e:d8:fe:fb:bb:de:f6:05:4a:
f4:df:49:2a:f0:3c:0f:85:2d:65:3c:dd:89:2f:e6:22:08:78:
d0:80:90:27:17:02:19:4e:66:b4:58:1d:50:09:fe:72:82:7f:
e5:4d:cb:6b:fa:a6:2c:8c:e5:d9:f2:7e:f1:c9:e8:36:d0:27:
9f:12:dc:d5:74:eb:c5:09:8f:50:b2:ea:c7:f5:dd:59:31:65:
da:84:c3:ca:15:7e:02:21:e1:91:c4:fe:37:90:74:d6:52:35:
83:e9:60:d0:72:9d:00:35:56:ab:98:20:59:da:46:2d:86:1e:
23:ed:64:36:79:a4:08:37:87:19:e2:45:80:dd:88:f4:2b:05:
30:76:41:3d:aa:cb:93:1d:1c:46:72:b8:9f:ea:bb:3d:d4:ad:
7b:2e:e4:2f:f4:56:10:6a:a5:65:99:4b:7d:4d:63:11:84:71:
9b:7a:f7:77:f5:09:8f:5f:3f:fa:02:88:bd:f0:6e:a2:9b:05:
a4:5c:88:2b:ac:76:61:01:7c:a2:fc:87:a7:00:e2:b3:29:f4:
1f:76:3e:39:24:bf:e7:15:7a:95:66:b0:b0:e1:e5:82:97:85:
3b:ea:ca:f7:d6:bf:ce:46:b5:a8:56:7c:22:e1:fd:96:e0:68:
40:1d:4e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:24:26 2025 by rpki-client