Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rCwJjxHvMtnq7U8C1eguR4-QkxQ.roa
File: rCwJjxHvMtnq7U8C1eguR4-QkxQ.roa (raw, json)
Hash identifier: 0ubsYjE3B7zH6+5FkfRuCG1Wdi4bf1zoVL9G5HDnJ84=
Subject key identifier: AC:2C:09:8F:11:EF:32:D9:EA:ED:4F:02:D5:E8:2E:47:8F:90:93:14
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01842604109AB33782B516BCD4D6716F3A3F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rCwJjxHvMtnq7U8C1eguR4-QkxQ.roa
Signing time: Sat 29 Oct 2022 23:11:51 +0000
ROA not before: Sat 29 Oct 2022 23:11:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:26:04:10:9a:b3:37:82:b5:16:bc:d4:d6:71:6f:3a:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 29 23:11:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ac2c098f11ef32d9eaed4f02d5e82e478f909314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:84:20:a9:71:58:d9:66:6e:15:cf:f5:0e:09:
d4:00:d1:82:d3:1e:e8:6b:74:5d:8a:a6:6a:fc:72:
23:64:dd:ef:76:0a:c3:5f:15:aa:b7:13:a5:4d:cc:
dc:65:7c:b7:f4:d8:dc:b8:08:62:c1:03:fe:aa:d3:
04:06:6d:cf:0c:34:6a:51:5f:9b:60:0c:62:28:45:
20:76:af:86:b4:25:49:a1:cb:92:ed:0e:09:e0:c9:
08:dc:19:8a:d0:cd:01:41:7b:da:c0:79:a1:aa:2a:
d7:89:43:96:dd:0d:9f:fc:eb:d0:62:d2:3f:01:ef:
fe:b7:66:07:39:cb:80:0f:8e:cc:7c:cd:3b:24:ab:
af:f3:a0:99:1b:34:7d:f2:18:c6:56:12:fd:a8:64:
09:e7:f2:bc:da:ea:a1:ad:1a:fe:3d:55:0b:08:d0:
7b:e7:40:f7:38:3f:ec:4f:b7:30:8d:c9:17:52:18:
2a:3a:f0:9e:26:07:c9:34:c6:41:b9:c8:48:78:1a:
dc:48:b2:ee:64:0e:33:c8:47:5f:0e:98:97:95:f3:
7d:a2:e1:ee:b9:af:1b:74:05:ff:b2:f2:a0:e2:99:
81:18:f9:f8:4d:9d:af:04:77:e4:f2:ef:7b:e3:3a:
cc:45:69:61:27:df:eb:04:94:6c:c9:f2:94:d9:9a:
24:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:2C:09:8F:11:EF:32:D9:EA:ED:4F:02:D5:E8:2E:47:8F:90:93:14
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rCwJjxHvMtnq7U8C1eguR4-QkxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
84:93:43:96:a4:e3:b8:36:9b:ad:a1:1d:31:c6:1d:c8:e8:29:
e5:98:bb:e9:56:d8:eb:d1:9b:32:38:d1:fe:e1:60:5f:4c:f7:
b1:24:6d:2b:c0:8f:95:a0:1e:20:38:f6:7a:12:f2:bc:e6:b7:
41:fd:24:32:01:80:a6:1c:34:4d:dc:40:6f:26:db:71:72:1b:
d7:39:be:12:7d:c0:d6:f9:59:e2:09:8b:6e:42:22:e9:12:56:
80:06:4e:71:32:93:c9:43:28:ce:7e:c4:bd:12:e6:71:79:80:
35:0a:3c:d0:66:39:2a:6b:e2:49:bd:93:2a:65:5f:7e:7b:7f:
e8:fe:12:43:e5:61:32:e7:b0:44:61:5f:56:c5:bd:b5:dc:a5:
ed:5d:4f:2b:b5:0c:41:5d:ef:94:5a:fc:ba:02:36:63:9b:2a:
89:8d:74:34:0e:87:49:62:47:61:0c:38:81:12:bd:e1:fa:3e:
8a:1a:d4:ef:8f:18:7d:7f:ef:d5:7b:06:bf:5b:6c:8d:a0:cd:
ad:a2:07:19:b8:5d:ca:ae:f6:5e:5b:ed:8e:ea:f5:7b:c2:ce:
22:94:0e:cb:66:fc:28:ba:8d:ad:7d:df:07:ae:f0:33:73:d7:
90:07:06:10:cf:20:80:c6:24:72:fb:5e:32:73:d1:f0:6e:1e:
9f:90:91:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 15:45:21 2025 by rpki-client