Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/o_t9DK57YpTpjgWO66l4OSdJGG8.roa
File: o_t9DK57YpTpjgWO66l4OSdJGG8.roa (raw, json)
Hash identifier: 9yLCm8RhOg5UQjROLooZP1+qZuJC/EUl7kDJ0za/Wvk=
Subject key identifier: A3:FB:7D:0C:AE:7B:62:94:E9:8E:05:8E:EB:A9:78:39:27:49:18:6F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01851687C7211A5E13057A96E2B6DDCC4632
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/o_t9DK57YpTpjgWO66l4OSdJGG8.roa
Signing time: Thu 15 Dec 2022 16:04:35 +0000
ROA not before: Thu 15 Dec 2022 16:04:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:1687:639b/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:16:87:c7:21:1a:5e:13:05:7a:96:e2:b6:dd:cc:46:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 15 16:04:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a3fb7d0cae7b6294e98e058eeba978392749186f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0d:a4:67:ec:3a:91:17:34:b0:89:17:6a:2e:
f3:2c:38:95:a9:f7:99:15:4d:47:bb:3a:fd:a0:6f:
84:7c:22:75:d5:83:9e:b1:44:2a:6d:7d:6c:f5:cc:
9d:0c:28:07:aa:15:34:50:9d:6f:57:82:9a:b3:0e:
30:24:5f:a1:81:7b:16:4c:21:4f:81:b8:a0:76:b0:
8f:bc:62:18:7c:30:ab:d8:53:f7:1a:7b:47:1f:d8:
ec:97:d7:a7:64:e2:bd:32:f2:f8:62:af:aa:0f:e6:
d7:a6:1d:95:0c:dd:7f:89:9a:7b:e6:82:c9:04:cc:
e0:d4:33:37:4b:e4:8a:18:09:9a:fd:3e:91:5d:d2:
c7:10:64:6e:aa:37:7e:6e:10:b4:35:87:9f:7d:36:
72:14:3f:29:aa:a8:bf:bc:d2:55:00:87:a5:b5:33:
20:61:ef:fd:15:9a:f6:3b:60:45:16:f3:21:d4:50:
ec:b3:a3:8a:01:73:88:c9:c3:32:80:75:b5:3b:3e:
83:e5:9e:c4:a3:c7:e3:a9:ad:68:e8:ac:0b:78:11:
b1:aa:80:af:b9:20:7b:af:c1:de:d0:20:03:81:c8:
b8:86:9a:15:c2:44:18:f9:19:37:f8:29:8c:95:6a:
0c:bc:e8:8a:92:03:91:92:a7:19:60:12:b1:5f:d2:
21:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:FB:7D:0C:AE:7B:62:94:E9:8E:05:8E:EB:A9:78:39:27:49:18:6F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/o_t9DK57YpTpjgWO66l4OSdJGG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8a:2f:35:ca:0b:51:91:eb:ee:f2:6b:41:70:94:a7:c7:7f:b1:
28:b7:e2:02:79:4e:ac:0e:5a:a2:5a:42:da:99:59:fb:55:1b:
12:69:52:26:47:b4:d7:a6:50:4d:89:17:da:27:ad:5f:0d:aa:
a2:69:2d:2b:ec:11:ae:60:6b:85:34:be:f9:bd:1e:f8:a2:99:
27:d6:76:3a:bf:db:2c:f1:6a:0a:6c:54:c0:34:0a:96:1f:02:
66:3b:af:d7:1f:ae:e7:1e:3b:cd:d0:aa:26:83:d3:62:24:4c:
36:b7:fd:bd:ee:bf:61:f7:96:a7:b2:57:3a:cf:86:57:15:03:
1f:83:ce:5d:1a:5b:12:4c:1b:8b:0c:d6:3d:a1:87:7b:99:5d:
08:45:33:d0:ba:73:13:ba:7d:e7:bc:5c:98:90:7c:0a:27:d8:
dd:f3:e8:e4:d9:51:e6:a8:df:1a:0d:b1:03:d5:a3:21:c3:eb:
71:6c:ae:fe:13:22:b3:13:f6:5e:7e:0d:9e:2e:54:1e:8a:ca:
6c:d0:ec:00:61:79:20:99:25:ae:5c:78:66:64:b9:65:01:11:
3b:96:8e:e2:18:85:79:25:4d:48:7e:a3:de:e1:92:6f:30:c2:
f5:94:c6:2d:7f:b5:40:d2:cf:ca:91:a5:2d:40:f1:cb:77:ac:
7c:95:e8:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 13:39:21 2025 by rpki-client