Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rWg8CorbJeC87dT39hAHt_-8h3g.roa
File: rWg8CorbJeC87dT39hAHt_-8h3g.roa (raw, json)
Hash identifier: dVabWiohd8zAZDz1yVXDdo+0owjDuNODM5/4iklxzFA=
Subject key identifier: AD:68:3C:0A:8A:DB:25:E0:BC:ED:D4:F7:F6:10:07:B7:FF:BC:87:78
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8DF30606
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rWg8CorbJeC87dT39hAHt_-8h3g.roa
Signing time: Sun 19 Jun 2022 01:09:44 +0000
ROA not before: Sun 19 Jun 2022 01:09:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:56ba:5b78/128 maxlen: 128
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:181:477e:58d8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2381514246 (0x8df30606)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 19 01:09:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ad683c0a8adb25e0bcedd4f7f61007b7ffbc8778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:3f:cc:58:2b:98:57:88:23:7f:de:5d:67:c7:
d4:c8:5e:16:90:47:91:d2:7e:66:22:4e:dc:c9:3b:
2a:41:4b:db:fb:89:1f:17:1b:99:70:7a:16:ac:12:
3e:aa:23:c9:36:18:35:4e:83:a9:f1:a6:e4:9d:ea:
51:b4:be:09:4a:0d:d6:51:20:1a:d8:86:33:76:3f:
57:ac:50:c4:70:4b:27:39:fa:ae:42:76:ea:4d:d1:
be:f8:45:ff:38:64:ec:84:2d:02:3a:02:7a:b3:ff:
81:6e:b4:be:e9:76:1e:0b:2c:f1:b5:ca:4d:16:6e:
4f:33:63:d8:40:12:d4:5f:54:e1:86:86:95:ef:21:
3a:7d:85:ce:47:5c:6c:6c:ad:54:a6:09:dd:d5:c0:
61:95:17:ae:06:39:f9:94:18:6a:07:48:a3:09:21:
de:cc:3b:da:48:92:c9:ed:b7:6f:7a:3e:45:7f:b7:
2c:7c:f9:0d:63:75:3d:9c:53:16:3d:32:e0:74:f7:
54:d0:99:d1:af:a7:2d:7a:5c:e1:5d:07:a1:10:4c:
6b:00:5e:83:0f:56:73:b0:42:cb:c7:a3:00:ec:96:
62:dc:b3:0a:ea:b2:6c:46:c9:14:3e:44:3f:16:8e:
c0:85:9a:7a:f8:44:4c:1c:5f:d0:c7:41:df:b6:eb:
23:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:68:3C:0A:8A:DB:25:E0:BC:ED:D4:F7:F6:10:07:B7:FF:BC:87:78
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rWg8CorbJeC87dT39hAHt_-8h3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
54:f1:1a:22:b8:02:3a:91:85:b9:ce:67:77:c3:97:6c:f3:84:
c9:09:92:80:05:29:9a:87:b1:4b:dd:f0:7b:38:bd:b5:23:26:
1d:8b:fd:2c:60:54:6a:ae:4c:59:b1:03:0c:0d:f9:d4:0c:4c:
5c:5d:8f:a3:5d:ea:f0:f0:1b:67:5c:74:0a:73:52:7f:9c:47:
34:be:8e:7b:b4:56:8e:5f:3d:df:a8:84:82:9d:6c:b5:92:c3:
04:71:18:02:f7:30:a5:ee:00:9a:f5:e8:c4:1f:4d:35:e2:28:
e8:ee:7d:e0:24:49:75:3e:97:cc:ad:1d:39:db:77:26:ec:5a:
99:e6:a2:d5:c7:1e:47:09:f7:5b:3c:b5:ff:7c:5f:08:9c:2b:
80:ed:2e:78:96:e1:5e:c2:cf:aa:90:80:09:c4:08:fc:fc:99:
9e:77:59:da:0d:77:c6:dd:7c:3c:78:68:86:0a:8e:c4:e7:eb:
02:97:ed:86:ca:62:43:0d:26:d4:a9:a5:22:4f:61:b0:fc:69:
ae:fd:b9:48:48:79:ba:8b:11:49:49:29:d3:58:d8:b0:ca:b2:
55:71:44:d7:23:c4:b2:d1:58:0b:6d:f5:98:7f:9b:04:ee:64:
f7:36:8e:cd:2e:cf:7d:98:f4:19:fb:19:d5:af:20:28:22:ad:
e8:74:f1:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 12:46:24 2025 by rpki-client