Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tmJoQzQPRfqRJAuo9RI3qLb_YAM.roa
File: tmJoQzQPRfqRJAuo9RI3qLb_YAM.roa (raw, json)
Hash identifier: THfjK+itTYzFhr/Ex2/Ssdr3UUvzQj390cWdzdEeHWQ=
Subject key identifier: B6:62:68:43:34:0F:45:FA:91:24:0B:A8:F5:12:37:A8:B6:FF:60:03
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184DE8C03F748E4313A37AFBD787F676D54
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tmJoQzQPRfqRJAuo9RI3qLb_YAM.roa
Signing time: Sun 04 Dec 2022 19:10:28 +0000
ROA not before: Sun 04 Dec 2022 19:10:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:de:8c:03:f7:48:e4:31:3a:37:af:bd:78:7f:67:6d:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 4 19:10:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b6626843340f45fa91240ba8f51237a8b6ff6003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:94:16:68:3a:b5:99:3f:9e:03:0e:18:13:f3:
bc:d6:8e:31:1f:4e:d9:79:47:29:cd:f3:d7:e5:d0:
15:3b:98:1a:b2:5b:2a:f9:a2:03:22:fd:36:52:13:
81:41:5b:00:9e:c3:da:4a:e9:13:72:ab:92:10:4b:
10:d6:a2:19:d9:b3:93:7b:66:44:50:3a:13:17:4f:
87:ae:1f:f9:7f:95:a2:86:8f:bd:df:12:e5:77:f5:
ae:9b:8b:dc:3f:03:d1:7a:02:f1:95:fc:ea:46:d7:
46:a2:08:6d:f1:e8:c2:cb:a9:41:92:51:e3:75:38:
66:25:b8:ff:b6:cb:f7:36:26:9b:7e:8e:e3:35:b7:
4a:d0:5c:14:b1:74:10:8c:4c:02:a1:6e:fb:34:a9:
4d:26:6d:4e:0b:97:d9:a1:86:4a:db:30:6d:44:06:
a1:24:e6:0e:68:db:d8:ef:31:2b:48:4c:20:0b:0e:
c9:a5:a9:2c:44:ba:fa:77:c9:4e:46:a1:65:f0:ed:
a0:fc:f0:a8:7b:cb:b5:32:8b:e3:1f:50:3c:66:2c:
cb:e7:55:02:58:38:0b:e4:92:2c:65:b6:35:84:e6:
dd:59:7e:71:a0:ad:fa:81:e3:88:12:5b:d7:82:48:
b2:3d:a0:f5:5c:a5:30:92:30:c0:cd:0a:d9:ff:bc:
60:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:62:68:43:34:0F:45:FA:91:24:0B:A8:F5:12:37:A8:B6:FF:60:03
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tmJoQzQPRfqRJAuo9RI3qLb_YAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
37:a4:bf:0f:f5:8d:d7:a8:6e:a7:81:3c:f3:34:25:d6:d4:50:
c3:87:fe:81:2c:ad:be:02:69:35:75:0c:53:09:d5:3b:23:c3:
85:8f:03:92:59:73:41:30:fb:2f:9c:4b:18:8c:c9:ea:7c:52:
d8:fe:d5:36:e8:e2:c5:84:32:91:7e:0a:c7:39:de:9b:6e:96:
f3:3c:6b:c0:06:ed:9f:9d:1c:e0:00:46:ab:54:99:ca:be:13:
cb:18:c3:86:fe:52:16:5a:3e:ab:af:29:e3:57:ae:c8:48:c9:
2c:17:60:65:12:e0:77:a9:26:a5:d0:96:37:d7:ec:23:04:ee:
0f:43:c5:69:6b:e9:c5:36:a9:cf:4c:38:74:b9:df:b4:8c:5f:
30:49:f4:43:14:39:15:25:93:f8:f9:ff:88:d5:f0:44:84:97:
a6:89:03:8e:ff:a6:fc:09:e4:29:8d:e7:2c:98:ef:60:1d:c7:
24:75:c0:64:f2:54:c2:97:24:03:9a:b6:6c:93:3a:41:25:3b:
24:c4:4f:47:cb:e9:c3:44:97:e1:83:7d:62:3c:bf:c9:18:f1:
12:fc:9b:96:ae:3b:66:2a:03:c9:c5:a1:bb:2d:72:7e:59:c0:
6e:f1:b9:bc:85:1a:18:ba:6b:97:14:2c:7c:7f:3d:1e:61:d7:
db:52:56:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:07:49 2025 by rpki-client