Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sj6fHSPegVdjoj-X6ylfn3vh6xc.roa
File: sj6fHSPegVdjoj-X6ylfn3vh6xc.roa (raw, json)
Hash identifier: f4+x4hdpsrehroEFuk9kcEBvtah3gLwyzx7wXhrog3Y=
Subject key identifier: B2:3E:9F:1D:23:DE:81:57:63:A2:3F:97:EB:29:5F:9F:7B:E1:EB:17
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A1CBE7B9F245205D0F9E518796B888121
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sj6fHSPegVdjoj-X6ylfn3vh6xc.roa
Signing time: Tue 22 Aug 2023 10:16:00 +0000
ROA not before: Tue 22 Aug 2023 10:16:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:178d:7ed9/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:1c:be:7b:9f:24:52:05:d0:f9:e5:18:79:6b:88:81:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 22 10:16:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b23e9f1d23de815763a23f97eb295f9f7be1eb17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e5:04:34:a0:51:3c:4f:e5:1a:cc:06:d9:90:
e1:f7:8a:a2:36:71:28:33:4f:40:48:ef:be:18:fb:
99:81:fc:73:ee:98:59:a0:5e:81:c0:5f:2c:09:d8:
91:0d:9b:c3:18:a9:44:45:3c:41:05:83:ac:67:9e:
10:64:18:58:18:47:36:ec:f6:07:9b:40:4e:1c:60:
89:c0:58:a1:15:3d:72:ef:6c:14:03:6a:7c:78:a9:
e4:ed:90:25:d9:cb:0f:32:5e:ee:22:71:cb:1e:b0:
d9:0b:78:ce:01:ab:c8:f6:8a:40:31:44:ac:1c:5f:
4a:e9:de:bd:c6:6a:72:44:3d:6b:49:e1:75:bc:d7:
42:58:d5:3c:30:38:93:a8:06:91:3c:d5:c3:d3:cb:
20:a0:ba:3c:93:e4:84:f5:97:5b:55:c4:24:f7:17:
47:ec:a4:fc:6c:16:91:ed:a1:94:b2:f3:62:c4:f6:
d9:e6:3a:0e:f7:57:20:03:04:e8:0e:39:c2:ca:d7:
93:80:c6:29:0c:b9:48:e7:30:d1:d4:ba:ba:0f:1d:
fb:a6:5e:4d:09:93:9f:4f:01:11:92:95:23:d9:90:
3a:80:2b:03:b0:ca:1f:db:9c:33:c4:7a:02:92:0e:
f9:83:10:70:b6:4d:99:1e:32:85:d8:79:9c:01:c3:
0f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:3E:9F:1D:23:DE:81:57:63:A2:3F:97:EB:29:5F:9F:7B:E1:EB:17
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sj6fHSPegVdjoj-X6ylfn3vh6xc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
80:18:d3:ce:c6:5e:5a:fd:46:36:54:31:c7:37:5b:32:7e:f4:
8c:78:a0:be:25:a1:df:43:f9:68:5e:92:c6:e1:c4:43:e6:f3:
26:fb:ca:90:f8:3a:8d:6a:d3:d0:a8:f3:19:2c:3a:92:24:6e:
ac:d6:2b:09:5d:1f:af:94:1e:5d:58:da:cc:40:0c:35:71:61:
35:67:9c:3f:98:eb:a6:f1:3f:ac:67:48:fd:5f:b5:fc:59:c2:
ec:98:70:23:43:1d:6f:ab:92:ce:b2:e6:eb:3a:2d:28:7c:66:
2a:0b:8c:02:92:ed:ab:f2:ab:dd:26:27:7a:3d:9b:7f:bc:02:
0e:66:92:c2:3f:07:60:a2:ce:b9:01:06:00:fd:66:7c:57:0b:
83:81:ee:5c:da:42:aa:ca:0f:ba:4f:f3:87:27:a8:8a:a1:64:
d5:8a:42:16:9a:9f:3f:98:a1:50:23:8d:7c:8f:10:1e:3e:35:
1a:8a:1f:36:d4:36:96:0e:aa:23:38:04:e7:86:11:8f:72:9b:
24:5b:d6:b6:08:f9:8f:81:18:b3:06:47:2d:cf:3e:23:4c:f6:
be:16:5c:cb:fc:32:3a:f1:44:40:8f:b7:c7:f3:7c:23:62:fe:
34:a4:e4:0d:16:aa:d0:c0:e8:99:9e:2b:34:0f:24:f9:35:74:
0f:bb:da:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 10:07:47 2025 by rpki-client