Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pVb7R3GG7fF4jHNqMUZv-XR8_0M.roa
File: pVb7R3GG7fF4jHNqMUZv-XR8_0M.roa (raw, json)
Hash identifier: BahAM1m4G40UW4z2H923a99O104UrAsC5/agTiAivH0=
Subject key identifier: A5:56:FB:47:71:86:ED:F1:78:8C:73:6A:31:46:6F:F9:74:7C:FF:43
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018563596871E27FB94146A05D7CCCFCC629
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pVb7R3GG7fF4jHNqMUZv-XR8_0M.roa
Signing time: Fri 30 Dec 2022 14:04:41 +0000
ROA not before: Fri 30 Dec 2022 14:04:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:185:6359:3b0f/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:63:59:68:71:e2:7f:b9:41:46:a0:5d:7c:cc:fc:c6:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 30 14:04:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a556fb477186edf1788c736a31466ff9747cff43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:71:dd:cd:33:96:2a:e7:d0:73:51:f7:b1:a2:
e0:67:da:22:df:ff:fd:23:a4:22:07:23:8b:66:2e:
c5:7b:8b:b2:72:dd:c5:7a:26:15:c2:2a:0b:30:84:
f9:0b:54:55:9a:a2:c2:e9:59:b7:86:9c:81:28:1a:
ff:69:38:e9:8a:db:02:76:f8:4b:51:f2:45:e2:c8:
0c:37:6c:c5:36:bf:34:17:ba:14:ed:01:a5:de:ed:
db:0c:2d:f9:f7:1b:64:3d:b7:4e:95:a8:85:bb:d7:
5c:56:84:93:28:88:f7:54:33:9f:a6:db:e5:7e:92:
5f:f1:d1:2a:17:3c:4e:fb:99:41:0d:4c:ff:44:7d:
37:fd:d2:f6:c7:57:14:13:4c:77:5d:a6:63:1b:16:
c7:87:75:05:e6:e7:7a:c1:9b:43:23:e5:b2:ca:19:
54:c6:5c:a1:e7:8a:fa:9d:81:34:f2:cf:ba:14:75:
67:6c:ee:33:b1:b4:38:2e:df:0b:4e:35:7f:c6:30:
f3:16:8d:ce:82:51:14:a1:fc:6b:68:cb:12:7d:2e:
ae:d5:f1:3b:31:77:70:4b:56:92:b8:81:3b:b0:44:
42:82:2a:4e:0f:1e:de:03:ab:27:92:92:05:b6:bc:
bf:a5:c2:b3:03:b8:a2:7c:c8:9e:a4:d7:e1:a4:1c:
6e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:56:FB:47:71:86:ED:F1:78:8C:73:6A:31:46:6F:F9:74:7C:FF:43
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pVb7R3GG7fF4jHNqMUZv-XR8_0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
61:3b:2f:ca:8a:7b:5b:a7:06:0b:b0:55:f1:cb:89:a0:69:29:
ce:ed:3c:38:46:4b:3c:3a:50:a0:65:b6:b4:1d:31:57:53:48:
29:b6:c5:54:ca:f7:5f:d0:f5:a3:c8:08:a0:42:c2:e2:d5:ed:
50:88:e3:27:e6:ad:60:63:21:a4:83:8f:f9:03:8b:8e:be:81:
1c:4e:84:fd:4d:47:ce:21:94:59:22:fe:e9:b2:b9:8a:da:64:
99:bd:ee:42:4f:3b:03:8c:a7:c4:bd:af:ab:68:79:60:32:3d:
76:18:70:b7:6b:0d:ba:eb:48:9f:f1:1d:b2:50:90:33:30:c8:
1b:14:8c:c6:4e:a0:77:70:fc:18:74:68:9a:8a:e2:90:b9:cf:
38:16:47:c8:97:fb:8b:64:52:d5:9d:b5:8c:bd:8b:c9:6e:04:
c9:cd:74:5d:2b:ab:a7:dc:70:df:1e:7d:84:43:32:0c:85:44:
73:d8:7c:9a:6b:75:e9:46:66:79:cb:0f:4c:11:d4:61:89:a3:
62:f1:c8:61:6e:6e:03:41:b7:6d:63:e3:06:fe:e2:9b:c1:c0:
e2:ff:44:8d:7c:31:5c:26:aa:b6:c9:4f:3d:aa:20:96:af:c0:
b2:5f:3c:42:e8:33:22:d3:d4:d7:8e:21:d2:c5:f2:dc:64:30:
94:59:b9:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:24:43 2025 by rpki-client