Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ryUxh1sdX5SDbAYH1u6jAN9VLAg.roa
File: ryUxh1sdX5SDbAYH1u6jAN9VLAg.roa (raw, json)
Hash identifier: VoRjh67jjD1h1xmoo/XrC+jAhB+SBQYpyyJgnETU7Xw=
Subject key identifier: AF:25:31:87:5B:1D:5F:94:83:6C:06:07:D6:EE:A3:00:DF:55:2C:08
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01851CC0CB42F7E06847F24AAA481D55279F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ryUxh1sdX5SDbAYH1u6jAN9VLAg.roa
Signing time: Fri 16 Dec 2022 21:04:34 +0000
ROA not before: Fri 16 Dec 2022 21:04:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:1cc0:6f0e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:1c:c0:cb:42:f7:e0:68:47:f2:4a:aa:48:1d:55:27:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 16 21:04:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=af2531875b1d5f94836c0607d6eea300df552c08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bf:89:43:f0:ac:27:6b:14:38:69:f5:ca:a5:
6a:01:94:e9:53:90:42:fa:80:ae:85:33:ca:75:12:
dc:87:bc:24:7f:ce:ac:49:7a:c8:a6:12:ca:c7:04:
84:78:68:e9:8b:24:aa:1a:73:47:3e:c1:34:52:47:
71:a4:94:02:56:1c:fb:d8:0b:9f:31:46:b5:1d:2d:
95:14:09:60:16:56:3e:24:ee:46:40:af:ff:ae:97:
7f:b4:0c:df:ca:7c:aa:60:ed:8b:03:4a:04:6f:0f:
c3:45:b6:b2:ae:39:e4:7f:6e:f1:25:61:2c:66:29:
6b:7c:be:1c:7a:73:0c:15:18:86:1a:b9:68:e7:6c:
4d:23:7b:f8:46:d8:63:84:23:a0:95:96:14:b5:92:
3b:94:aa:24:06:d3:7d:96:f7:b0:a4:18:83:e6:d4:
98:45:f2:01:ed:3f:4d:e8:08:a6:cc:a1:53:14:64:
0e:21:8c:dc:2d:c7:4f:6d:78:6f:77:8e:c8:f0:41:
6c:a8:0a:b7:9c:aa:ee:97:fc:a6:dd:50:85:e0:d9:
ca:a8:30:61:7b:08:66:f4:84:e3:84:d3:82:06:f3:
77:5f:b4:63:11:18:f4:f1:2d:eb:14:2b:49:75:23:
9b:29:cc:a9:e2:d0:d0:08:eb:d8:e6:6d:a8:b2:3b:
fb:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:25:31:87:5B:1D:5F:94:83:6C:06:07:D6:EE:A3:00:DF:55:2C:08
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ryUxh1sdX5SDbAYH1u6jAN9VLAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
88:94:58:46:b5:30:47:3e:94:51:17:2a:03:8e:73:c6:5e:08:
9a:a2:a3:1a:a2:a2:37:54:53:3c:ba:47:4d:14:a7:38:8b:6e:
dd:3e:56:98:98:2c:97:65:8e:a3:a6:c5:55:14:1e:63:32:32:
1e:51:c2:34:d4:d2:1b:02:86:9f:eb:da:c0:7a:54:fa:b4:36:
02:90:c3:b7:ae:c0:1f:c7:cc:0f:ca:74:f6:c7:16:7e:74:13:
76:f7:66:db:32:c8:99:bf:d0:0d:5c:81:ed:0b:46:0c:4e:32:
cc:51:0b:2e:c8:84:7c:b8:b3:18:45:6e:7b:53:1f:66:3b:64:
42:cd:ef:24:a7:12:c8:3b:9b:fa:13:ec:fc:5f:76:8a:bc:54:
eb:7e:73:77:61:3c:62:ed:e8:2a:bf:b6:9d:5b:cb:28:7a:0c:
2c:9a:40:f0:a8:31:bf:b2:c8:82:82:00:34:45:1a:31:3e:ec:
8c:44:cb:6e:3b:39:65:d4:d1:eb:8c:2d:25:b9:3f:43:8c:9a:
e0:9b:62:99:39:f9:06:e4:49:d0:7f:2a:76:9f:26:8c:a6:32:
be:18:12:a8:b7:78:47:f9:b7:01:49:4b:d8:4c:ec:28:44:f9:
10:05:67:d2:35:f5:e9:6f:3e:6d:f4:ce:ff:74:70:39:b7:c0:
4c:67:7a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 14:04:37 2025 by rpki-client