Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rvXlgU-qE_lwZKF50kOF7nFHvqo.roa
File: rvXlgU-qE_lwZKF50kOF7nFHvqo.roa (raw, json)
Hash identifier: Ubnnnz/iKGzv7HZ20aKkvYm7gABDSws//uEEE9wG7wk=
Subject key identifier: AE:F5:E5:81:4F:AA:13:F9:70:64:A1:79:D2:43:85:EE:71:47:BE:AA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 876634FA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rvXlgU-qE_lwZKF50kOF7nFHvqo.roa
Signing time: Thu 26 May 2022 15:09:13 +0000
ROA not before: Thu 26 May 2022 15:09:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:ff9c:1e7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2271622394 (0x876634fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 26 15:09:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aef5e5814faa13f97064a179d24385ee7147beaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7a:8a:4b:af:ca:e9:9c:dc:67:37:ac:5d:2b:
e8:99:98:da:a4:6d:05:6f:8e:54:a9:ac:02:f1:42:
6a:68:88:4c:52:01:69:d6:e0:3a:0a:f1:ca:ef:8c:
14:a2:a5:7f:70:78:a1:9f:7d:1a:6b:39:f2:f2:4b:
27:df:5b:18:2a:2b:d5:9a:a8:fc:24:7e:23:b4:00:
a6:dc:e8:ab:31:4a:0f:24:4f:8a:5c:d1:a0:20:2d:
7e:cf:91:20:e6:87:39:0b:23:b5:ce:5c:98:23:4e:
3e:0f:76:d0:bc:ad:93:47:03:c2:48:a3:7a:f9:d2:
3e:51:d5:67:7f:70:1e:d5:5b:9c:11:a8:2c:bb:2e:
a8:aa:d5:95:0f:fc:f5:93:2f:be:14:85:a2:ce:8c:
56:3a:aa:84:d3:20:43:c3:ea:fd:4d:b5:42:22:da:
9a:12:01:e9:b6:b7:73:16:f7:4a:74:b5:60:b1:85:
e9:69:2b:3e:7c:58:58:cc:5a:2b:71:12:cd:4c:03:
92:ea:f8:e5:1e:80:c9:f6:d7:f4:cf:b3:f3:7b:a5:
0e:04:a7:41:ee:b4:d6:99:ec:8c:13:06:2f:e7:66:
4e:2c:48:b7:8a:e1:98:df:c0:c1:76:37:bd:fd:d8:
61:7e:22:18:5b:db:53:1f:f2:1f:46:b0:0a:d8:31:
2d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:F5:E5:81:4F:AA:13:F9:70:64:A1:79:D2:43:85:EE:71:47:BE:AA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rvXlgU-qE_lwZKF50kOF7nFHvqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0c:99:90:1f:93:f9:1f:e0:0f:6a:97:17:7e:07:68:b3:0a:dc:
3d:90:40:14:37:52:10:ff:67:53:5c:82:b4:17:13:00:ef:8d:
c6:46:94:f8:e9:5f:a7:82:25:bd:58:53:79:ed:b0:7a:1a:a6:
58:fd:0d:f4:81:cd:f3:ce:3d:48:f4:90:f1:90:0c:f1:36:11:
1b:10:61:d8:c9:c7:cb:76:6c:28:ea:ff:08:7f:f8:b5:39:30:
4c:5d:a9:0f:5c:ee:84:63:33:34:62:e5:0b:5a:4d:42:26:ba:
5d:30:b2:bb:04:aa:dd:f2:ed:11:4c:15:72:8b:ee:e5:f1:51:
40:28:62:50:ea:8f:c2:45:9c:ef:16:4b:45:9e:1d:09:3a:52:
59:15:2b:3e:b4:c0:a0:d2:82:de:4a:5a:af:2e:aa:25:47:2a:
ee:a8:09:8a:a9:fc:71:9b:9b:2c:81:f7:60:5f:81:80:3e:8c:
87:2e:27:23:4e:74:13:e6:74:2e:e9:ed:8d:07:7b:4c:87:d9:
7b:1c:df:0b:20:da:f9:e9:aa:e5:19:23:ec:9a:76:c5:4d:1b:
08:b1:52:7b:fb:48:cb:ef:57:9f:d9:52:60:73:81:87:40:b6:
1e:bd:1b:8d:6a:45:db:9a:9a:2e:fe:23:b2:72:8e:42:10:fa:
dd:b2:2a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:22:49 2025 by rpki-client