Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/u8NYAU_gVlg0PCYxaFzv0xWta6w.roa
File: u8NYAU_gVlg0PCYxaFzv0xWta6w.roa (raw, json)
Hash identifier: 2BXfSQReia9NSrJ9IeNBwmUZaexYDwbbXtBZ0rhgWLE=
Subject key identifier: BB:C3:58:01:4F:E0:56:58:34:3C:26:31:68:5C:EF:D3:15:AD:6B:AC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 71296F12
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/u8NYAU_gVlg0PCYxaFzv0xWta6w.roa
Signing time: Thu 10 Mar 2022 00:10:13 +0000
ROA not before: Thu 10 Mar 2022 00:10:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1898540818 (0x71296f12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 10 00:10:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bbc358014fe05658343c2631685cefd315ad6bac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e6:36:22:7b:0c:b9:c0:b5:9f:43:c1:0a:9a:
9b:b3:1b:74:6b:cf:78:d3:67:42:8b:1d:38:ac:c5:
da:d3:0e:53:7f:b3:a1:e1:17:ea:88:67:3d:0a:d7:
bc:0b:74:7b:a9:18:82:96:85:58:f0:2a:29:6a:3f:
f0:ce:2c:a8:11:b5:68:d1:ba:26:32:7f:29:5a:38:
60:64:ea:cc:67:f2:4a:f5:6d:c2:c7:ae:3b:ff:66:
7e:a0:ca:86:8a:0f:13:03:44:ba:cc:21:34:8d:7f:
0f:08:6d:5a:51:7f:3c:7f:77:96:1a:29:e7:1b:ff:
a8:6e:51:1f:a8:89:34:e2:6c:10:53:94:61:fb:ba:
8c:73:7b:e9:79:47:31:e8:14:f3:83:e0:57:7a:d7:
9e:d0:1e:47:18:66:75:a4:54:63:90:5c:13:89:4a:
3a:8e:95:4e:f6:32:b5:01:bc:76:75:05:e9:80:4e:
68:97:96:01:83:f7:f8:48:59:56:18:4a:85:ad:4e:
75:bc:80:34:b3:e9:25:e8:e9:5a:2a:5b:62:a9:32:
fd:80:c0:44:af:89:75:a8:75:8d:54:25:e7:0d:b5:
ca:78:49:d9:29:38:0e:ac:91:10:85:e8:1d:c1:2b:
58:a8:79:e1:15:76:09:48:9b:ab:45:c3:10:b5:fc:
fa:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:C3:58:01:4F:E0:56:58:34:3C:26:31:68:5C:EF:D3:15:AD:6B:AC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/u8NYAU_gVlg0PCYxaFzv0xWta6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
32:aa:f2:61:8e:40:11:5f:9f:c7:b1:1b:30:5a:5d:d9:c4:90:
75:07:e9:1d:5f:ca:aa:ea:54:c6:af:32:0b:5f:88:bb:07:51:
55:aa:1c:d6:76:79:47:81:16:b5:5b:4c:1b:fd:e7:d8:6f:dc:
40:31:87:95:b1:b4:4a:65:37:c3:80:30:e1:1d:13:a8:ec:9e:
46:41:e7:3d:8b:1e:33:53:27:c4:dc:78:8c:29:fa:d2:a4:8b:
7d:b4:9b:3c:21:e9:15:7e:c0:54:f1:14:d3:3c:46:4a:1a:87:
d1:cb:c0:cc:22:c2:78:9e:48:42:c2:22:6a:d8:36:c3:ef:7f:
64:b7:81:25:51:70:6f:ed:23:63:66:ab:4e:42:b9:c1:82:3e:
93:f0:af:9a:9e:ed:27:0d:da:0d:ad:2b:ab:4d:70:9b:59:ce:
ad:c1:d8:c5:8f:d1:db:ba:d4:70:bd:73:6b:65:e7:b0:b0:61:
4f:57:0d:20:5b:7b:86:61:15:f0:db:c7:8b:17:d8:cb:0d:7c:
20:07:0d:c8:e7:aa:1d:ab:0f:61:76:5a:a6:72:5f:43:50:5f:
2b:2d:92:ee:38:7a:44:85:4a:a8:bd:5f:a4:91:79:89:dc:6d:
77:bd:35:4f:5e:2d:5c:c7:67:bb:d4:6c:08:6d:86:f3:68:fd:
4b:3a:c2:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 19:28:19 2025 by rpki-client