Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/maeg3FHX4xdkl2ue50xOw7kTtPQ.roa
File: maeg3FHX4xdkl2ue50xOw7kTtPQ.roa (raw, json)
Hash identifier: 0waipTqyHOro2dFJZfF2hyf59OLcyBrfkJ8J9rvhxt0=
Subject key identifier: 99:A7:A0:DC:51:D7:E3:17:64:97:6B:9E:E7:4C:4E:C3:B9:13:B4:F4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183C2712A64ED040785348D6EFD1D8E7A14
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/maeg3FHX4xdkl2ue50xOw7kTtPQ.roa
Signing time: Mon 10 Oct 2022 15:08:59 +0000
ROA not before: Mon 10 Oct 2022 15:08:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:183:c26e:2c7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c2:71:2a:64:ed:04:07:85:34:8d:6e:fd:1d:8e:7a:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 10 15:08:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=99a7a0dc51d7e31764976b9ee74c4ec3b913b4f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:81:52:57:5b:f1:3f:0a:a3:97:54:c8:ff:4b:
00:9b:e2:45:72:ec:d3:2b:83:10:fb:56:bf:15:da:
42:f4:73:bb:21:93:ad:97:de:a0:f0:c6:dd:65:ca:
59:0b:a7:f7:e1:89:62:f0:4c:9e:ca:63:79:1f:0a:
9b:08:d3:a3:1a:b5:3b:f4:7b:ce:81:61:8a:ab:47:
00:3f:f1:dc:d4:4c:06:bb:17:3d:0d:2c:04:15:56:
3b:65:d8:4f:4b:6d:ab:11:ab:91:84:87:0f:6d:8a:
74:33:5f:e3:1c:e5:cc:3f:72:d7:f3:34:e6:54:af:
31:ec:3b:ef:96:bc:50:e1:06:f6:3a:77:f6:ac:41:
dd:12:34:7a:dd:bc:5a:a3:5b:ff:61:27:c9:05:f8:
b1:8a:00:dd:c6:10:81:e0:13:26:cb:8d:38:ad:c7:
f8:c9:7d:b6:bb:42:48:65:bb:58:1c:97:c4:22:c8:
e0:a4:29:7a:dc:08:b4:d8:5b:25:cc:3d:96:1f:f5:
72:2e:44:7d:d1:e0:2c:df:35:43:67:71:fa:fa:af:
5a:89:b8:48:4a:ab:4d:5c:8c:7b:b6:e3:f1:cb:29:
14:e9:d4:98:25:67:52:37:21:e1:a5:5e:b0:8c:f4:
b7:b4:ab:c1:a3:de:c6:25:2b:db:24:f7:02:72:93:
d3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:A7:A0:DC:51:D7:E3:17:64:97:6B:9E:E7:4C:4E:C3:B9:13:B4:F4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/maeg3FHX4xdkl2ue50xOw7kTtPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3c:e6:38:78:70:32:39:e2:17:9b:de:83:14:34:34:76:72:bb:
92:34:39:c0:ae:fb:8d:83:eb:96:0c:f2:0c:14:5f:9d:3c:3a:
b2:fb:c4:fb:88:f4:0d:ee:8a:9c:6c:7b:2a:de:db:9e:8e:1d:
1b:b8:78:d8:92:62:b2:21:30:cf:3e:24:b5:8c:71:26:5a:29:
73:8d:98:c1:0a:27:c5:88:dc:cc:69:1c:8d:69:cd:0e:94:be:
30:b4:f1:61:c7:30:a2:f0:f9:0e:f1:63:77:f0:f6:da:89:d7:
b3:1b:40:0c:c7:51:28:73:94:14:58:e4:f7:96:cf:70:3c:d5:
b4:63:25:94:94:fc:76:ee:9d:01:8d:e7:76:a4:f2:fb:e6:20:
1c:e2:89:ed:e1:ae:68:23:2f:77:6d:fe:5a:55:da:31:f8:bd:
27:a1:05:d7:ab:27:a7:cd:83:f3:c1:f2:4e:7c:dc:54:c8:39:
40:23:de:e8:a7:d4:53:a8:13:cd:ec:f6:97:1d:e4:f4:dd:b7:
81:95:4f:dd:9d:2f:4e:c9:bb:77:3a:be:e7:8e:6d:db:2a:44:
17:65:a4:14:be:63:14:03:ce:3d:72:42:eb:a4:a7:00:34:82:
87:1f:91:b9:31:ca:c6:79:8b:a3:43:68:de:57:1e:08:2e:8c:
55:ca:e8:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 15:44:31 2025 by rpki-client