Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rtsqfEH0RVKffxdko5bgcEma4i8.roa
File: rtsqfEH0RVKffxdko5bgcEma4i8.roa (raw, json)
Hash identifier: eLu8578lHv/cXmiV5y/yDiIIt/PwUj5Bzh9PbyjG88Q=
Subject key identifier: AE:DB:2A:7C:41:F4:45:52:9F:7F:17:64:A3:96:E0:70:49:9A:E2:2F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01854741F2BC597F14978C346920CE51F2B8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rtsqfEH0RVKffxdko5bgcEma4i8.roa
Signing time: Sun 25 Dec 2022 03:09:42 +0000
ROA not before: Sun 25 Dec 2022 03:09:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:47:41:f2:bc:59:7f:14:97:8c:34:69:20:ce:51:f2:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 25 03:09:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aedb2a7c41f445529f7f1764a396e070499ae22f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:e3:bc:13:e0:37:ca:15:6d:97:d9:f1:5e:e2:
da:88:fa:0c:24:cc:47:cd:74:48:02:88:b6:02:8d:
22:5b:28:ea:3d:8e:8f:91:78:7a:be:37:b8:07:94:
94:67:96:14:87:73:34:c5:0b:10:81:d7:07:5d:d4:
4c:57:0f:2e:f0:de:15:68:bc:0b:6b:8b:de:44:54:
7c:2f:1b:6e:af:cf:2e:21:8f:e3:36:d2:47:41:39:
e7:36:a4:89:02:dd:13:ce:c5:94:86:e2:77:28:8b:
1f:bc:8d:38:ac:66:56:2d:c7:7c:76:fd:e8:ed:f4:
21:72:b4:82:4e:91:d4:7d:80:78:b6:e1:1e:1f:5a:
06:58:e8:9d:b3:34:e0:79:6c:0c:fc:08:b8:8a:5b:
33:9a:69:27:c5:a9:f5:91:da:e8:88:a4:b0:52:61:
1a:d7:a2:d1:0d:9d:7d:b5:6b:38:1d:38:f6:c1:f3:
e4:93:31:84:d6:20:56:5d:ec:b9:df:18:88:23:ca:
55:59:b6:b9:ac:64:f1:11:cf:94:de:87:63:49:6f:
f4:45:51:c6:db:70:8c:a1:64:2c:11:a0:11:18:2d:
7f:32:33:c5:7c:3e:40:d3:56:69:5d:ef:1b:be:a2:
36:19:70:32:75:6e:42:40:89:e9:49:23:eb:e1:66:
43:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:DB:2A:7C:41:F4:45:52:9F:7F:17:64:A3:96:E0:70:49:9A:E2:2F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rtsqfEH0RVKffxdko5bgcEma4i8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ae:66:ed:13:70:12:f7:be:f7:f8:46:59:18:1e:9b:f8:94:ca:
f4:24:93:c7:33:32:12:4d:b3:8a:aa:87:5c:1d:7f:cb:35:42:
c7:09:14:06:52:04:f6:19:7a:f9:2b:f3:75:73:92:24:70:75:
c7:13:e3:c6:df:fd:22:d5:15:29:68:ab:48:c7:2a:d5:29:db:
89:fa:12:e4:de:56:ab:06:e7:1a:20:89:34:da:d1:af:dc:5b:
e2:41:98:15:e3:25:77:ac:49:06:82:1c:56:ed:1b:b8:05:95:
be:7f:ba:9b:e8:54:b5:eb:f4:b8:cc:05:c1:0e:0d:98:a2:d3:
cd:a9:a1:d2:8f:e6:34:8c:e6:c6:38:0f:c4:c1:1a:3a:c8:2a:
24:72:a8:1b:0b:60:44:d4:4e:36:f0:3c:95:5c:25:02:71:3a:
e2:cc:33:a5:e0:7d:00:39:65:19:f0:15:83:19:01:46:c8:02:
cd:ef:b2:c6:c1:36:8b:e4:1e:83:87:61:ed:ae:b0:fd:62:43:
c7:b8:3d:f9:c6:d3:8f:84:09:02:e9:5a:64:f6:0b:6f:e0:b4:
1a:78:03:f8:8c:d1:de:15:fe:8d:36:0a:a5:17:da:49:84:07:
a5:82:3c:62:b1:78:57:7b:a0:f0:e6:6d:28:27:be:d0:49:53:
92:e3:7f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 12:54:23 2025 by rpki-client