Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/s0vVFU6FUqet9KOz53nC3LYFfcQ.roa
File: s0vVFU6FUqet9KOz53nC3LYFfcQ.roa (raw, json)
Hash identifier: Pey7pQuCDjJE/rp237mL0Gwa/J45Pkd8fxoL18hoX3A=
Subject key identifier: B3:4B:D5:15:4E:85:52:A7:AD:F4:A3:B3:E7:79:C2:DC:B6:05:7D:C4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018258417D98DDF191EEB487C17A99406574
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/s0vVFU6FUqet9KOz53nC3LYFfcQ.roa
Signing time: Mon 01 Aug 2022 07:14:23 +0000
ROA not before: Mon 01 Aug 2022 07:14:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:58:41:7d:98:dd:f1:91:ee:b4:87:c1:7a:99:40:65:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 1 07:14:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b34bd5154e8552a7adf4a3b3e779c2dcb6057dc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c7:87:5e:0a:73:21:3c:e3:30:8c:ee:26:48:
77:80:27:81:22:ff:c7:cd:76:9e:90:d1:f0:ea:6c:
7c:4d:9f:2d:04:43:f5:90:b6:6d:e1:31:7d:63:96:
1f:af:ad:a6:83:d7:fc:bd:af:8d:e8:27:d9:5d:a6:
d1:0b:37:4d:33:7d:4c:83:91:80:ca:0e:ea:47:2d:
49:f2:28:ef:52:5c:85:4d:f5:a4:f0:ab:3e:e4:68:
9b:b0:27:2d:15:eb:c9:52:fc:c1:75:24:94:d5:30:
1f:12:54:77:8c:da:80:94:a4:f9:0b:7e:ae:de:02:
bc:85:cf:f0:3e:37:65:31:63:ae:e9:ff:c8:7a:38:
94:e8:74:dd:f6:f9:1e:94:6d:f0:d0:05:1b:58:b7:
24:fd:9a:0c:97:07:ee:04:df:42:37:a2:a0:75:83:
2e:01:8c:94:48:18:50:d2:2a:6e:e7:49:82:17:7a:
1b:e8:c3:a7:43:a4:75:d0:16:8e:cb:0d:98:10:70:
22:7c:de:01:db:f1:d1:3a:84:13:fc:17:42:a2:08:
f7:31:99:79:48:7e:5f:4a:48:91:cd:71:b5:70:9f:
d5:6d:d9:c8:a4:5a:c3:27:46:8d:b4:f2:86:48:69:
a1:4c:e3:ed:10:bb:8f:ef:7f:e8:9e:55:ea:cd:c2:
f7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:4B:D5:15:4E:85:52:A7:AD:F4:A3:B3:E7:79:C2:DC:B6:05:7D:C4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/s0vVFU6FUqet9KOz53nC3LYFfcQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
81:2c:15:7b:c2:79:fa:fd:43:49:3e:6b:f9:16:06:72:3d:39:
3c:91:47:15:eb:25:9b:02:7b:6c:eb:24:7b:fb:36:5d:6a:f4:
11:1e:80:c8:41:f5:dd:bb:cc:a9:75:bb:f0:e4:df:40:bb:33:
68:68:bd:26:a8:ce:0f:e2:80:92:69:34:c1:ba:6b:6e:ed:61:
0b:53:bd:0f:0d:b5:20:01:10:5e:48:82:7c:e9:0f:22:a9:ae:
e1:2c:4b:8c:ac:37:c6:0f:1e:cf:09:c4:78:75:5f:04:b8:da:
68:8c:c2:f2:5d:18:58:56:c8:f7:3b:fb:c0:0f:f2:09:d9:3c:
4c:5d:97:d7:ec:49:aa:ee:71:09:43:41:62:3b:f6:91:df:88:
ad:b8:d3:bc:cb:1d:b2:3c:6e:5c:2d:bc:c9:fd:02:be:b7:04:
d2:37:24:da:0d:f4:6f:28:ac:1b:8b:77:19:a2:91:6d:c5:33:
87:e4:d4:1c:0d:1f:62:73:b6:25:bf:10:3b:19:50:cf:44:66:
d6:01:47:31:5c:bb:af:1d:93:38:79:ea:14:8a:44:dc:5c:68:
d4:58:e1:eb:51:b1:cd:75:14:5c:6e:1e:42:43:0d:3e:62:8d:
79:e1:6e:f6:da:ab:5b:6c:e4:23:5b:b2:d8:8f:42:60:9d:9d:
7c:d2:d1:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 15:44:02 2025 by rpki-client