Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/u7Kzfcf0b0gVdr7bjJK3QJ23oEI.roa
File: u7Kzfcf0b0gVdr7bjJK3QJ23oEI.roa (raw, json)
Hash identifier: WWiAnPhlgJjOg4PVRUBlSaId5Ik+BHhdbnjkZt4OFlY=
Subject key identifier: BB:B2:B3:7D:C7:F4:6F:48:15:76:BE:DB:8C:92:B7:40:9D:B7:A0:42
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185548B1DE1575B9644417E9EEA366003AB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/u7Kzfcf0b0gVdr7bjJK3QJ23oEI.roa
Signing time: Tue 27 Dec 2022 17:04:41 +0000
ROA not before: Tue 27 Dec 2022 17:04:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:548a:9cf9/128 maxlen: 128
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:54:8b:1d:e1:57:5b:96:44:41:7e:9e:ea:36:60:03:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 27 17:04:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bbb2b37dc7f46f481576bedb8c92b7409db7a042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:21:c6:5e:6f:be:fc:e0:e0:6c:76:55:95:2f:
0c:38:65:75:5f:1f:56:10:f8:91:1e:06:cc:27:8a:
eb:fc:56:f9:a4:c4:99:ce:d1:7f:4f:39:bc:9a:bc:
55:43:5b:c6:3f:2b:ae:65:29:c6:91:12:08:22:18:
29:c2:ad:c6:91:a7:21:f5:b6:1b:96:9d:e8:e1:15:
d5:62:9e:a3:01:5c:b9:dc:d2:e9:08:17:3a:9b:45:
f3:0e:13:67:23:49:74:8f:a9:95:bd:ab:43:17:30:
42:b5:4d:61:07:48:1b:b0:04:62:ef:0d:07:33:8f:
e7:a3:c8:a7:ec:ce:d1:ad:dd:9c:7e:a9:bb:80:0d:
87:6d:4c:c4:b9:28:0c:ab:07:4e:aa:6a:34:d6:0f:
4c:8b:a5:56:d9:2e:66:b9:9e:e6:97:e8:fa:32:81:
44:2b:48:67:96:f3:9a:eb:82:af:b3:10:24:b1:38:
5f:47:0d:80:e3:d4:b7:bc:ed:76:ee:23:be:d4:86:
3c:61:ac:8f:74:54:dc:70:a7:48:c6:ad:0f:05:21:
6f:cb:bd:3d:cd:3e:71:d8:ae:c9:e7:3b:99:58:d1:
78:3d:19:2c:d5:13:ed:80:c1:2a:0c:d3:ee:a3:38:
c9:94:f6:ba:b7:2d:ae:22:94:88:28:30:55:98:69:
76:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:B2:B3:7D:C7:F4:6F:48:15:76:BE:DB:8C:92:B7:40:9D:B7:A0:42
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/u7Kzfcf0b0gVdr7bjJK3QJ23oEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ab:af:26:65:ad:02:04:90:48:d6:9f:02:f3:4e:a9:98:10:66:
08:53:36:1e:cd:f7:2a:ca:f9:d6:a3:07:af:8c:fb:ff:9c:ce:
fe:0c:d6:49:27:a5:fb:b1:87:b2:e3:4c:64:72:f6:44:dd:4b:
c3:9a:6c:74:8d:78:c2:af:cd:00:a2:59:e9:92:1d:05:00:32:
52:37:f2:d4:7f:e1:b5:96:1e:32:c6:51:c4:02:dd:49:be:50:
ca:d0:80:0d:45:8c:d7:78:43:81:84:9b:1f:bf:6b:cc:87:0a:
55:b3:59:df:95:fc:c4:6e:67:21:6b:29:de:87:30:bb:3e:cc:
80:7b:2a:b3:b3:71:78:ab:f4:a5:df:f6:87:41:50:f0:6a:6e:
c9:e5:4a:87:5d:e9:1d:2d:fa:fd:01:c8:95:33:b7:61:68:75:
b1:ba:b4:d1:c1:6c:40:4c:58:34:31:6a:56:46:76:f7:38:9a:
2e:59:ae:a9:4f:ea:7c:12:7c:00:05:6e:b5:e4:32:1d:29:16:
89:28:49:c0:cd:26:93:be:a2:82:1b:07:7b:aa:a1:c4:4c:e5:
b5:3d:9a:16:64:19:74:96:be:a0:51:a8:00:fc:c0:db:80:e2:
b7:00:b3:77:37:65:52:3f:56:4c:8d:8a:fd:5d:f3:4e:b9:d3:
3a:f6:d4:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 20:42:25 2025 by rpki-client