Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/riGkWkc7cAcabQAbHIcwUs6DstE.roa
File: riGkWkc7cAcabQAbHIcwUs6DstE.roa (raw, json)
Hash identifier: pmBTlA+vCHGXN1O9PEFUUI+q7S6Tur9rvGAL7gcOFzI=
Subject key identifier: AE:21:A4:5A:47:3B:70:07:1A:6D:00:1B:1C:87:30:52:CE:83:B2:D1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184CD61ABAEE862CF5E44D26B82618105E3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/riGkWkc7cAcabQAbHIcwUs6DstE.roa
Signing time: Thu 01 Dec 2022 11:10:40 +0000
ROA not before: Thu 01 Dec 2022 11:10:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:cd:61:ab:ae:e8:62:cf:5e:44:d2:6b:82:61:81:05:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 1 11:10:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ae21a45a473b70071a6d001b1c873052ce83b2d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ec:cb:17:bd:09:12:c4:8b:2a:54:12:16:89:
6e:af:7d:bb:6f:7c:78:1c:f4:d4:7d:31:92:4d:b3:
d9:b9:9e:37:a3:3d:8e:c5:38:27:d0:54:b0:82:44:
34:58:69:35:91:d4:b9:bd:9e:b2:43:20:8e:59:6e:
75:44:27:63:ce:8b:2d:61:2c:0d:4b:19:38:09:0c:
f4:fc:5c:5b:64:1e:29:ca:6a:c2:56:9f:4f:dd:0c:
15:ba:0f:d5:e1:ec:96:74:91:db:08:c3:07:83:c8:
12:c5:1c:41:e7:a1:c4:e2:7a:01:19:3f:ff:4f:be:
d8:ab:83:28:c5:dd:b6:9a:60:3e:ad:71:fc:fe:f0:
3a:f8:8f:fb:e4:46:ec:1f:03:84:18:94:59:1d:63:
ea:a8:d8:66:01:08:c5:ad:35:56:4c:0e:ed:37:c1:
12:01:66:68:49:ef:91:58:6f:c8:5c:00:13:a0:8b:
db:8c:a2:74:51:07:6a:00:08:1b:03:1b:34:e6:65:
f6:15:f4:be:79:d0:a0:8d:80:c8:54:79:43:1e:c7:
f1:89:8a:e3:10:37:7b:c0:12:16:85:35:48:33:b3:
22:97:79:90:3e:fd:00:dd:71:13:f1:58:11:b3:d8:
2c:70:f7:95:c3:2f:7f:34:0b:9d:a4:80:df:f2:f0:
54:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:21:A4:5A:47:3B:70:07:1A:6D:00:1B:1C:87:30:52:CE:83:B2:D1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/riGkWkc7cAcabQAbHIcwUs6DstE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
73:22:cd:b9:46:94:75:ba:6f:e0:a3:a0:30:f0:c3:3f:70:db:
2d:b6:5a:12:ae:fa:70:77:c7:70:ba:c5:27:17:a8:c0:06:48:
4e:72:b6:99:be:fb:90:d3:2d:0a:6d:7a:d2:72:2c:96:1e:4b:
3e:19:b5:c6:2b:41:e9:63:ea:3d:2e:55:75:20:20:5b:72:ae:
b5:3d:9c:28:98:f4:09:ac:f1:6b:3f:e7:24:5f:c9:4d:22:b7:
c7:44:9a:b5:28:e0:0d:1a:34:3a:34:d2:15:34:f4:25:8e:10:
7c:2e:34:85:4d:5f:1a:aa:8a:7c:e1:e8:cc:2f:98:47:46:83:
bb:0d:1c:a9:13:02:3d:a7:be:d1:74:7b:d1:e9:8a:ad:c9:35:
c2:39:d4:98:f7:70:40:93:09:5a:ca:2a:6b:18:f5:ba:05:1c:
f2:50:d5:83:b0:8e:35:7d:8e:90:54:44:fc:dd:e7:de:d6:68:
4e:5a:8d:44:bc:df:1d:e5:b6:86:7f:4f:b2:dd:56:15:f2:d3:
10:9c:75:96:54:b6:a9:17:ac:51:c0:17:ce:17:32:ff:cd:c7:
6c:8c:14:7b:2f:87:eb:a7:c1:65:2d:b3:e2:35:f4:df:a5:6e:
11:9c:52:c5:92:3a:e9:6e:26:f9:1b:c3:87:54:0a:b9:82:6c:
ef:de:1c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 13:20:19 2025 by rpki-client