Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tRIKn7OmREdbhJBBPvzwlB16aoI.roa
File: tRIKn7OmREdbhJBBPvzwlB16aoI.roa (raw, json)
Hash identifier: Gd2JCVjfncLDqOf4ns1cZIxui23vnCxO/Y6oJ34dLUA=
Subject key identifier: B5:12:0A:9F:B3:A6:44:47:5B:84:90:41:3E:FC:F0:94:1D:7A:6A:82
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8772785D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tRIKn7OmREdbhJBBPvzwlB16aoI.roa
Signing time: Thu 26 May 2022 19:10:13 +0000
ROA not before: Thu 26 May 2022 19:10:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:ff9c:1e7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2272426077 (0x8772785d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 26 19:10:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b5120a9fb3a644475b8490413efcf0941d7a6a82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3f:16:a5:89:9b:d1:d7:25:68:e3:62:1c:da:
09:6c:01:f7:9c:da:b4:78:e7:78:53:4b:db:53:68:
f8:1e:07:7a:2c:9e:34:f2:2b:d6:58:c3:af:c8:74:
24:a2:73:fe:ad:f3:c6:49:17:eb:14:37:6b:24:6e:
23:a5:1b:6a:53:b4:89:4f:56:39:d1:cd:87:b4:42:
7b:a5:f1:81:92:2a:ed:23:03:41:a8:eb:37:29:5a:
02:d4:9b:94:ed:35:12:a2:5f:fe:50:ce:88:49:4c:
ce:41:33:0b:87:70:19:8a:43:a1:67:a2:00:a4:a8:
13:79:3b:65:a7:bf:a3:8a:2b:4f:39:94:3a:9e:01:
fb:fb:47:78:11:1b:ba:f9:dc:a3:7d:b7:c2:69:4a:
be:da:34:b9:2b:de:34:ea:0b:93:b1:4f:4e:cc:e7:
23:6a:3a:01:49:c8:0f:6d:24:98:98:6b:2a:86:2d:
e7:ef:38:92:eb:dc:8a:6b:50:9f:f4:57:97:d7:38:
a3:4f:7b:9c:d4:09:27:1c:d6:cf:2d:f7:e2:b1:a5:
d2:5e:31:61:b3:a7:f3:43:9f:be:5b:3d:31:1b:7a:
21:fd:0b:5d:f4:5b:0a:41:82:79:28:71:6c:9b:d3:
ec:a7:d3:f2:0c:e4:c1:11:43:3f:01:e8:54:9f:51:
49:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:12:0A:9F:B3:A6:44:47:5B:84:90:41:3E:FC:F0:94:1D:7A:6A:82
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tRIKn7OmREdbhJBBPvzwlB16aoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
21:5c:85:6d:b2:3e:cb:fc:b1:da:e3:0e:8f:d6:81:c0:40:ff:
fd:51:d7:bf:ee:6d:a0:bd:8b:00:24:19:da:fc:ad:31:f3:a7:
f9:a4:73:66:ee:3d:34:19:2b:7a:18:9d:7d:cf:a7:b5:83:d1:
07:eb:2e:03:b6:e2:bd:1e:62:4c:e8:ad:4e:90:81:87:1d:f5:
b9:8a:ff:f4:53:70:79:8e:37:58:c3:9f:14:43:db:47:53:80:
40:b1:28:e5:70:dd:c2:5a:13:60:04:7e:f5:92:35:f1:70:7a:
c1:c9:25:92:67:b6:5e:7a:67:34:bf:55:ed:32:ff:62:12:8e:
c2:f8:4a:78:8a:af:5c:dd:73:08:33:83:ac:00:d9:a8:71:44:
e2:30:f4:eb:08:4e:e5:47:93:a4:7c:72:f9:c9:94:16:07:5b:
15:98:c8:65:c6:e5:6d:fa:b6:97:80:e9:e4:8a:64:52:07:8a:
b5:94:03:dc:d6:93:90:ea:21:e2:a2:36:e0:9d:b6:ac:35:02:
b9:07:d0:9b:5e:28:93:dd:94:2b:6c:f3:26:6a:ed:c7:90:e7:
98:a3:5b:68:e4:d6:c1:61:4c:dc:d7:a7:cc:8f:3d:c2:1d:8d:
23:9f:6d:30:3b:33:12:28:80:a4:93:96:53:fe:e5:9e:0f:09:
ca:8d:4c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:11:13 2025 by rpki-client