Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pI6E8-eDv1J18l-AgRH7OI6fTa0.roa
File: pI6E8-eDv1J18l-AgRH7OI6fTa0.roa (raw, json)
Hash identifier: kwBJamRU9sC7iWJt7Hipf6256RRXPQWDV9CpVKMltV0=
Subject key identifier: A4:8E:84:F3:E7:83:BF:52:75:F2:5F:80:81:11:FB:38:8E:9F:4D:AD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8C9292DB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pI6E8-eDv1J18l-AgRH7OI6fTa0.roa
Signing time: Tue 14 Jun 2022 05:09:44 +0000
ROA not before: Tue 14 Jun 2022 05:09:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:56ba:5b78/128 maxlen: 128
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:181:477e:58d8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2358416091 (0x8c9292db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 14 05:09:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a48e84f3e783bf5275f25f808111fb388e9f4dad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8d:59:3b:38:af:0f:74:13:49:fb:60:a2:04:
af:a6:39:c3:b8:a2:3f:74:85:59:cf:fd:42:59:d2:
9a:7f:7d:47:40:a7:6c:9c:14:3a:45:0f:fd:d5:90:
30:06:fe:9e:51:11:3d:1e:ec:1b:6b:13:be:df:69:
31:6a:a9:14:3e:33:1a:ac:fb:ab:7b:dd:d1:56:b8:
04:b9:54:89:b8:db:d7:1a:d2:b4:2b:95:19:e2:37:
a6:88:62:d9:ff:79:da:c6:a4:b9:f2:6c:a5:a4:c5:
9b:08:8f:7c:a3:7d:21:82:84:3d:89:13:de:be:f2:
a3:79:be:ed:ca:2c:d2:08:89:57:4e:6d:04:0a:46:
93:7e:99:80:a9:76:69:47:dc:57:c5:58:aa:ce:a1:
e8:71:d0:0e:6a:35:37:46:c3:a1:3a:fd:ca:b1:57:
49:e0:c9:bd:81:8e:28:4c:ec:ce:c8:8f:c9:4d:85:
cf:e2:e4:88:96:70:38:37:a5:9d:82:66:c4:b5:fc:
78:f3:45:26:ae:64:c6:47:19:98:91:5f:fb:46:6a:
f3:2b:4b:fe:08:fe:a4:18:ff:60:50:ed:b0:83:fd:
b0:ad:3e:c2:4b:5c:2b:85:d4:89:b8:1b:2f:d8:85:
e4:c2:fb:d8:a7:a6:31:cc:ad:c7:da:94:d0:56:fb:
52:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:8E:84:F3:E7:83:BF:52:75:F2:5F:80:81:11:FB:38:8E:9F:4D:AD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pI6E8-eDv1J18l-AgRH7OI6fTa0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
70:5e:2e:be:0b:eb:83:d8:55:f8:9d:76:b2:4a:bb:c1:41:75:
25:7a:fe:a4:a6:39:0c:ac:68:bc:51:04:11:2b:f6:10:5d:86:
bf:06:79:80:90:dc:18:e5:7d:ea:62:80:92:00:64:15:13:7c:
21:54:45:23:3a:5e:24:ce:24:0c:44:fe:fe:02:0e:68:b8:2a:
3b:8d:82:98:e3:9e:fb:77:53:7b:64:fe:3b:b2:ab:05:d3:72:
d6:1f:dc:15:18:12:e9:c6:67:9c:9b:d0:1c:8b:e0:88:9d:5e:
eb:11:87:74:92:b9:29:f7:d5:85:83:d6:78:11:ce:ab:3a:ba:
2c:16:ef:50:8b:af:dc:d4:77:05:04:f9:bf:6c:3d:c3:b5:03:
cb:d2:9c:a5:d4:a7:04:04:31:d4:64:52:85:c6:77:c9:61:6d:
4a:94:02:fb:af:fd:4e:c5:5d:ba:a5:4d:78:bf:ba:0a:55:c0:
3a:b3:62:71:61:d9:98:5a:3b:9f:0d:05:93:3d:a0:a2:b5:93:
7a:db:7d:d9:bc:86:e7:f9:ea:3f:97:6a:12:3a:4b:5c:a4:f2:
85:db:05:49:4b:e3:6f:35:72:cb:6b:25:31:3d:1d:f4:cf:10:
b4:08:d2:59:a2:d5:79:63:0f:1c:0c:af:65:95:ae:3c:60:3a:
22:56:da:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 01:42:05 2025 by rpki-client