Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rXUBy_kEV2Iaj4PrhWgXPIsAPeM.roa
File: rXUBy_kEV2Iaj4PrhWgXPIsAPeM.roa (raw, json)
Hash identifier: l7T/5CrWZgia/V2O2tmWdCGCj1sTsdNTWPzbuJg1Wiw=
Subject key identifier: AD:75:01:CB:F9:04:57:62:1A:8F:83:EB:85:68:17:3C:8B:00:3D:E3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8FC54C9C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rXUBy_kEV2Iaj4PrhWgXPIsAPeM.roa
Signing time: Sat 25 Jun 2022 17:11:46 +0000
ROA not before: Sat 25 Jun 2022 17:11:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2412072092 (0x8fc54c9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 25 17:11:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ad7501cbf90457621a8f83eb8568173c8b003de3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:25:1e:b0:2f:b3:a5:cb:33:c4:1c:8b:f9:03:
d5:eb:b0:cd:e4:5c:fa:63:ad:94:26:9b:06:16:1b:
a3:22:43:4d:58:9f:e9:dc:c9:4e:40:87:40:13:c0:
eb:36:c8:2c:fc:4f:23:bf:11:05:33:f4:e1:0d:72:
e9:b9:a4:25:92:8b:9f:80:8e:7c:47:ce:f9:78:52:
25:be:2e:dc:e6:8b:ad:42:21:31:0d:d6:f5:34:67:
f5:04:ef:11:37:2d:c6:e6:0b:dc:02:3c:d1:c5:c8:
be:cf:07:90:d5:6d:ca:22:e1:2a:a9:c1:a2:f1:3d:
54:6c:a3:d8:a3:a0:a4:ac:e4:bf:cf:4d:ab:12:68:
a4:d5:6f:e5:3d:5d:11:ba:fe:c0:bc:db:68:25:88:
0b:06:87:4b:57:68:37:ff:d1:c2:db:cd:c4:bb:49:
0a:f8:26:36:bc:a6:60:90:26:40:35:21:70:ec:7e:
b7:a4:28:c2:8a:5e:2e:39:10:5f:85:b4:56:eb:13:
2c:35:80:3b:67:aa:fb:92:b4:dd:86:71:3c:e4:3c:
e6:3c:43:d7:4f:72:fd:9d:c5:1b:a8:78:12:31:ba:
a5:b9:3c:93:03:fc:7c:e9:c0:b5:24:57:27:62:88:
a0:ae:e5:07:f2:0d:3d:36:80:45:d9:8b:ea:23:eb:
50:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:75:01:CB:F9:04:57:62:1A:8F:83:EB:85:68:17:3C:8B:00:3D:E3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rXUBy_kEV2Iaj4PrhWgXPIsAPeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
88:30:2d:31:a6:60:04:26:16:dc:2d:dc:ef:e4:37:fb:17:85:
61:9f:a5:93:42:5c:4e:75:ad:a9:b3:2d:cf:ed:6b:e8:76:01:
2a:e4:ce:7b:3b:97:0a:53:0c:27:0a:9e:52:1a:f2:2f:24:81:
e6:bd:ba:74:94:5d:1a:97:23:92:9d:17:95:91:58:03:83:3e:
b7:87:ad:b2:42:7b:1e:2b:57:f0:f1:23:06:d5:01:e5:e3:e0:
7b:79:4e:95:49:22:af:5a:73:81:d5:4d:db:a5:e5:50:e0:45:
a5:ed:82:75:85:1f:73:19:a2:2c:f8:18:d6:d6:0b:96:6a:07:
0f:5f:4c:74:12:4f:24:dd:72:e4:09:a8:d8:d7:89:12:54:b4:
ee:c1:58:bb:e1:1a:81:29:04:ba:14:63:76:08:1c:ed:50:f0:
8b:04:23:7e:10:bc:b1:52:fe:ac:82:e2:f8:0c:9b:09:dc:84:
0f:59:b2:11:bb:2b:c5:47:c2:ea:04:19:cd:82:98:51:3d:ff:
60:40:50:86:33:d2:72:af:0a:a4:72:5b:89:dd:b1:c4:2f:e5:
cd:e4:ba:5f:41:ec:2d:78:5e:d7:9b:fe:9e:12:84:32:fe:35:
de:06:ee:04:a7:f9:22:bc:8b:b1:4b:49:3e:a7:a9:73:1a:9e:
86:39:fd:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:16:57 2025 by rpki-client