Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rb1Jpr8Wi417WIRDYF_i4dFLUxc.roa
File: rb1Jpr8Wi417WIRDYF_i4dFLUxc.roa (raw, json)
Hash identifier: mYBc4hzB8KwY5xv7WOtTkt0q9gnwum+reROPDF/cqmg=
Subject key identifier: AD:BD:49:A6:BF:16:8B:8D:7B:58:84:43:60:5F:E2:E1:D1:4B:53:17
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6F893565
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rb1Jpr8Wi417WIRDYF_i4dFLUxc.roa
Signing time: Fri 04 Mar 2022 07:08:48 +0000
ROA not before: Fri 04 Mar 2022 07:08:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1871263077 (0x6f893565)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 4 07:08:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=adbd49a6bf168b8d7b588443605fe2e1d14b5317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:85:46:4b:e2:7f:08:e8:f6:c3:11:24:45:2e:
c0:61:37:65:0a:32:03:33:81:d4:3c:4b:63:37:09:
3a:03:fd:32:26:58:31:85:64:cd:aa:90:93:80:c4:
89:ad:5c:45:88:f2:0c:95:c6:bb:d6:e3:f2:14:a6:
e9:d2:00:ea:ba:96:54:91:1b:10:7d:12:04:dd:13:
1e:5b:9c:1d:6b:5e:5a:3d:d9:25:ed:bc:5c:ec:57:
ad:49:1b:91:27:8c:b7:ed:02:90:56:cf:62:8e:59:
14:8b:93:82:9b:6c:20:bc:eb:09:d9:32:05:c6:2a:
4c:97:5e:b4:39:e2:3c:88:ff:87:0d:3d:cf:b7:57:
15:63:ad:41:87:88:87:51:63:3a:a3:16:3b:ca:fa:
ad:f4:ea:89:f7:4a:c7:3e:c5:b3:e6:42:b5:30:0d:
b7:6d:83:78:0e:ab:09:7e:d7:c8:1b:09:5d:b3:2f:
96:81:65:c9:48:24:4a:42:b0:74:4e:6c:9a:04:12:
2e:d1:62:6f:8e:5d:4b:d4:7b:83:ce:da:9e:95:33:
67:2e:26:13:68:1d:a2:bf:0c:64:11:47:bd:9c:26:
8a:fa:5d:b3:1d:96:1e:3b:ca:ff:13:73:38:66:ce:
59:ad:1a:cf:41:dd:ce:0e:2e:05:ca:2a:87:b7:c0:
8f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:BD:49:A6:BF:16:8B:8D:7B:58:84:43:60:5F:E2:E1:D1:4B:53:17
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rb1Jpr8Wi417WIRDYF_i4dFLUxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9b:a4:63:ea:ab:08:e2:ef:70:7a:69:6a:e5:73:05:2c:d2:43:
31:e9:49:9c:7a:c5:64:bd:d9:c9:3e:cb:06:22:1e:9b:a7:8e:
09:41:d4:8f:ca:79:dc:5e:77:7e:29:a0:de:80:c5:b7:50:fa:
33:3a:db:46:e9:bc:cd:25:ea:5c:a2:1c:91:58:75:d9:12:f5:
fe:ba:f9:07:0c:1d:6c:57:b9:ed:c3:72:35:d2:c7:7b:ff:bf:
96:3d:e8:2f:07:5c:4f:8d:1b:0d:e4:40:39:ae:3e:65:da:71:
53:b0:44:d0:57:e8:99:fb:30:6c:2f:be:f9:a0:73:d0:3c:c1:
35:07:b9:6c:c3:2a:68:db:12:cc:70:59:39:4e:b9:3c:1f:50:
52:c2:8e:66:a6:8e:7a:e3:ca:73:a9:ff:72:8d:cc:26:57:c1:
58:13:98:93:9a:45:5e:6a:5d:9e:11:32:78:17:41:76:97:30:
ba:1b:c1:40:e3:ed:5b:02:47:1f:5e:41:21:68:48:7c:9f:f7:
1b:b6:68:93:99:fd:07:95:fa:ab:44:54:83:36:d3:76:46:31:
12:b3:ec:3d:1d:2b:f8:93:bf:a5:a0:c5:2e:8f:7b:b9:7d:5d:
47:8c:bd:43:c1:9f:62:af:08:93:84:5f:ed:0a:46:16:e0:28:
26:95:da:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 11:47:54 2025 by rpki-client