Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ooaibnRE8GXwJiRVqbRaoNEGwI4.roa
File: ooaibnRE8GXwJiRVqbRaoNEGwI4.roa (raw, json)
Hash identifier: M3eU6ZUvSPL/PaiGERn22aFsXTiN5Ctkp8keMIbrggM=
Subject key identifier: A2:86:A2:6E:74:44:F0:65:F0:26:24:55:A9:B4:5A:A0:D1:06:C0:8E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 688CF807
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ooaibnRE8GXwJiRVqbRaoNEGwI4.roa
Signing time: Sun 06 Feb 2022 23:10:23 +0000
ROA not before: Sun 06 Feb 2022 23:10:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1754068999 (0x688cf807)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 6 23:10:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a286a26e7444f065f0262455a9b45aa0d106c08e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d2:69:b3:33:27:58:80:78:c8:4f:16:82:cf:
e5:5a:32:94:7c:c5:44:1e:9d:3a:37:f7:e6:0e:01:
1e:d5:ca:6c:0d:aa:5a:45:37:c3:fb:00:3f:92:2b:
7f:0a:71:26:04:d3:4d:c6:aa:dd:fd:aa:a8:31:32:
09:bf:f4:a8:aa:09:ff:02:fd:0b:01:ae:54:35:bd:
9f:8c:97:3e:e5:62:00:47:bb:f8:9d:6c:ea:95:2e:
47:ab:fb:5f:26:14:f9:2e:f4:23:9d:4c:a6:ce:fb:
cd:7c:51:52:58:93:6a:74:d4:68:61:8d:47:12:ed:
a1:81:3e:67:66:86:90:c2:db:a6:c2:2f:21:6d:16:
68:87:48:7d:51:93:28:d8:ee:9f:bb:c3:e4:a8:17:
ac:2b:e0:00:c8:b0:68:97:73:9c:62:d7:39:e6:8b:
c7:75:06:d1:2a:ad:96:17:7e:6d:94:c8:61:df:26:
c0:f0:3f:57:c2:9c:c9:92:28:d8:2e:da:0f:95:c2:
2f:85:c6:c7:90:29:3b:58:8a:2c:7a:ec:69:a0:fd:
24:3f:61:88:bb:df:d5:6f:c7:7d:63:34:c0:dc:82:
7c:e5:ab:c4:9b:c0:06:b1:7a:c4:09:21:f1:aa:65:
36:5c:0a:38:f0:f8:6d:53:31:77:f9:e6:2c:b8:2e:
e7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:86:A2:6E:74:44:F0:65:F0:26:24:55:A9:B4:5A:A0:D1:06:C0:8E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ooaibnRE8GXwJiRVqbRaoNEGwI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
83:8e:a3:e5:d5:4d:00:c3:47:35:af:79:d6:02:e7:ee:32:0a:
69:d3:a5:f1:01:8c:fc:f8:c3:f1:1b:21:14:91:1d:28:27:03:
42:74:a2:5e:d4:c8:a1:6e:0c:69:d4:f0:75:79:1c:99:f0:78:
47:79:b5:bd:fb:d6:bb:f0:4f:1b:7d:c7:d4:bd:81:52:76:2b:
6b:78:61:e3:60:7e:2c:4c:ac:1b:f5:71:38:3d:22:fe:d1:f3:
da:ab:6d:b4:ce:16:db:fb:58:b6:c4:d1:a2:0d:67:30:95:75:
f2:49:47:43:8b:ab:c8:1d:dc:2c:f9:86:6c:8a:b5:d9:8f:b9:
33:8e:df:92:45:de:01:c7:80:12:d3:be:90:59:c4:25:82:d3:
dc:8f:67:97:8e:9d:f0:ea:e0:07:4d:17:5e:90:53:d8:65:7b:
9c:9a:ec:72:82:90:b8:7b:f7:a0:10:00:ed:ce:2e:b4:c7:53:
ed:e6:74:f1:2e:34:f5:72:0b:92:5b:b8:1e:b2:36:d8:a3:28:
51:d8:6c:ff:c9:89:09:83:a0:b7:5d:65:f2:ea:56:6e:15:c1:
93:1d:99:a5:df:5b:5c:39:ef:65:92:21:e9:7e:4b:6d:c8:9d:
47:d3:44:cf:d9:9a:05:05:c2:61:be:2b:95:17:e7:0d:93:2e:
c3:ea:d4:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:52:30 2025 by rpki-client