Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tLuwSrt9uXqWDP5bpjQyXhpwQwE.roa
File: tLuwSrt9uXqWDP5bpjQyXhpwQwE.roa (raw, json)
Hash identifier: SLzB5494DYXHWD6Ysdf4vNxeBiCQNeQBwQnvm82BI5A=
Subject key identifier: B4:BB:B0:4A:BB:7D:B9:7A:96:0C:FE:5B:A6:34:32:5E:1A:70:43:01
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184E60A0B7333004276679952971AE18D9E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tLuwSrt9uXqWDP5bpjQyXhpwQwE.roa
Signing time: Tue 06 Dec 2022 06:05:28 +0000
ROA not before: Tue 06 Dec 2022 06:05:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:e609:a990/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e6:0a:0b:73:33:00:42:76:67:99:52:97:1a:e1:8d:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 6 06:05:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b4bbb04abb7db97a960cfe5ba634325e1a704301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:30:e9:96:e7:1b:c7:dd:c8:8f:02:0f:ab:5f:
5e:bd:b0:e4:ad:16:86:ee:5f:87:35:50:57:f2:5f:
74:37:6c:31:9a:59:12:33:50:55:36:c8:e6:68:7d:
c5:75:5e:12:76:58:b3:b4:db:d0:82:51:e1:7b:ac:
56:9a:b9:c5:d1:66:c3:c7:87:56:aa:be:93:c3:3c:
1a:3b:ed:8a:1b:54:73:59:85:d3:70:a0:91:96:71:
4d:61:89:54:6d:46:10:cf:05:de:5d:0a:85:e9:00:
89:a4:a4:c1:6d:41:25:4f:79:46:54:e6:c0:e7:5f:
03:d4:2e:31:fb:16:f4:9c:60:27:58:64:d7:2b:e3:
a5:c8:f4:fd:a6:70:68:5a:67:a2:44:3a:59:c8:ef:
7b:d6:36:5f:24:45:9a:a2:ba:77:61:f5:2b:3a:7f:
2f:0a:ed:25:91:fe:19:ec:fa:fb:8a:6d:c2:57:83:
1b:d9:38:4a:56:9d:07:19:49:71:39:38:90:49:c8:
1a:5f:79:3b:40:d0:b4:72:a2:8e:b0:fa:83:5d:c5:
ac:87:0c:09:41:aa:55:54:b7:45:2a:95:58:d0:90:
e5:91:c9:15:a6:5f:78:f8:a7:f3:13:f7:8e:ed:4a:
f4:97:86:8e:96:78:f9:b2:67:df:ac:35:eb:1b:ba:
d1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:BB:B0:4A:BB:7D:B9:7A:96:0C:FE:5B:A6:34:32:5E:1A:70:43:01
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tLuwSrt9uXqWDP5bpjQyXhpwQwE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
75:c6:b7:94:93:a1:68:4c:f3:3a:20:7d:4f:1e:72:8b:bc:aa:
52:8b:89:e9:0c:45:b6:bf:e7:0a:16:04:20:18:11:1d:f2:a9:
d7:76:0f:87:87:c5:be:2a:1d:1b:ab:8a:8c:18:c8:3e:7f:3d:
13:63:8f:f2:70:b5:ae:eb:ca:4e:e1:4f:26:77:27:18:5e:dc:
76:af:cf:e9:ff:ee:01:ea:c8:7a:46:45:a1:1c:47:7a:83:6c:
b7:2d:45:df:9a:40:ca:a6:05:40:72:cf:1b:9d:8c:61:e5:b3:
88:c3:89:5e:12:f5:91:3f:c9:c9:67:9f:ab:c8:8c:03:e2:f3:
8a:d9:ac:7f:24:c4:4f:53:3a:a1:36:5e:94:a7:1e:2f:22:b7:
5d:9f:d7:e2:45:cd:da:98:a1:d6:22:3d:fe:7e:b3:d4:40:90:
5e:f7:50:db:35:63:11:98:f2:69:24:da:c2:a1:ae:8c:c7:96:
35:ed:69:63:e6:8a:4a:5e:73:89:0a:58:be:b5:08:c1:a8:82:
a2:a3:e1:64:ba:9c:46:ab:8e:e5:3a:df:ca:9c:e5:48:3b:14:
74:4a:4c:a9:e2:30:b4:f2:6f:11:4b:d4:2a:b1:fd:d6:ff:26:
9f:ca:9e:a4:b6:8f:08:6a:45:4e:c3:dd:29:5b:b0:22:c1:56:
11:db:c6:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:53:10 2025 by rpki-client