Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pkgN6Rc8bUb_Oj519__txgNL7AU.roa
File: pkgN6Rc8bUb_Oj519__txgNL7AU.roa (raw, json)
Hash identifier: 2iAQZpKCpodJXV5UnPleso8/QhHPi8BfDmu/6eToPdk=
Subject key identifier: A6:48:0D:E9:17:3C:6D:46:FF:3A:3E:75:F7:FF:ED:C6:03:4B:EC:05
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185E343EBF63DE4BEBF577194E7914ADC85
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pkgN6Rc8bUb_Oj519__txgNL7AU.roa
Signing time: Tue 24 Jan 2023 10:12:37 +0000
ROA not before: Tue 24 Jan 2023 10:12:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e3:43:eb:f6:3d:e4:be:bf:57:71:94:e7:91:4a:dc:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 24 10:12:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a6480de9173c6d46ff3a3e75f7ffedc6034bec05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:12:95:0a:ae:b0:65:31:b8:81:da:14:43:ff:
53:d0:35:fa:92:06:61:4f:37:8f:f9:a3:45:fb:1a:
f7:fa:1b:30:f4:40:33:91:b2:5b:1a:de:85:d3:95:
82:b2:7e:42:a7:b5:84:39:19:63:2b:0a:fd:d1:cd:
44:31:1c:f1:a9:5b:9f:ec:fe:d1:9e:a1:17:1a:09:
11:b0:a8:14:99:58:64:af:3d:a0:68:c6:52:0d:4f:
2e:20:f8:d0:1c:2a:33:69:11:a8:ca:29:96:ba:c3:
ae:ea:51:ab:0b:f0:66:a3:7b:fc:92:90:8e:4b:fc:
13:cf:e7:3b:68:a3:ca:b0:0c:96:78:59:dd:7f:5b:
5e:a9:5e:77:89:af:af:aa:3b:c2:40:34:ac:6b:42:
9c:fc:f1:09:24:49:73:a7:a5:25:da:28:8d:b9:ae:
08:3d:44:78:81:5f:66:ff:44:ba:16:4f:62:c6:00:
13:b8:54:e0:92:0c:a8:71:80:2a:e7:e9:11:e7:bb:
ee:80:69:e6:75:37:1b:b6:34:f8:f5:18:18:8f:53:
3c:6d:89:a0:25:62:ff:b1:a1:00:db:02:32:42:78:
8b:97:ab:9a:72:e3:f8:75:25:64:6a:87:ab:9e:30:
85:f3:f9:f6:83:00:12:e2:c5:e9:8f:e7:37:e8:d5:
e5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:48:0D:E9:17:3C:6D:46:FF:3A:3E:75:F7:FF:ED:C6:03:4B:EC:05
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pkgN6Rc8bUb_Oj519__txgNL7AU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a7:7c:e0:48:d6:d9:d4:4c:c5:fc:c0:5b:db:cd:13:0f:e0:c6:
3a:9d:d0:2e:97:0e:cf:99:93:f3:6d:f0:d0:ca:23:6e:3a:c4:
df:70:f7:f6:a8:9f:38:5a:42:07:95:ec:c4:6b:e3:94:3d:69:
0e:86:9c:87:c1:63:bc:12:53:99:aa:6f:6e:68:ed:ef:5e:01:
b3:72:e3:42:d6:07:9d:7e:1f:13:00:2a:c6:d9:e0:a8:69:ce:
65:d8:cf:3e:6d:1f:da:52:7a:5f:1c:81:b3:d8:72:71:0d:20:
16:cb:39:2b:ca:10:d5:82:af:f4:52:07:cc:48:d8:33:67:ec:
c1:dd:49:79:22:d3:3f:c5:01:37:fc:a1:a0:04:5e:c4:7a:8d:
89:34:0a:31:e6:29:7d:ae:b2:a5:8b:7b:d3:58:d4:d6:f3:5c:
e3:4d:20:46:15:b6:46:2e:11:df:78:cb:01:da:43:b9:60:cd:
9d:4c:12:bb:5d:77:cd:eb:90:a9:dd:58:3d:40:85:be:21:4b:
28:aa:6d:b9:33:34:c5:9a:0d:5d:de:ce:de:08:bc:68:a6:5f:
d2:19:cf:0a:1c:ab:5d:a6:00:8b:bc:af:73:a6:42:b3:2e:9e:
b4:c7:dc:8b:36:87:ba:03:2b:ea:9b:53:49:4a:6b:92:98:da:
c7:be:4d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:15:52 2025 by rpki-client