Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/u9vkDBMqvpRsBVzLmXxE_HA2qfo.roa
File: u9vkDBMqvpRsBVzLmXxE_HA2qfo.roa (raw, json)
Hash identifier: NrMuvhb8xmuY/rFrkAbDac0uDJ//H9NwKDzo55XCgnY=
Subject key identifier: BB:DB:E4:0C:13:2A:BE:94:6C:05:5C:CB:99:7C:44:FC:70:36:A9:FA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183DB24AAF70276A01D78CEC947C0B09A2F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/u9vkDBMqvpRsBVzLmXxE_HA2qfo.roa
Signing time: Sat 15 Oct 2022 10:15:56 +0000
ROA not before: Sat 15 Oct 2022 10:15:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:db:24:aa:f7:02:76:a0:1d:78:ce:c9:47:c0:b0:9a:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 15 10:15:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bbdbe40c132abe946c055ccb997c44fc7036a9fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:95:b3:10:71:eb:6a:70:bb:74:93:85:c0:0d:
29:b5:f7:59:1c:37:17:ab:1e:35:78:10:db:97:aa:
74:91:12:49:02:74:c4:7a:f3:42:b2:09:a2:c8:63:
7a:19:88:8c:df:63:d4:03:8e:c9:53:87:08:c4:f8:
78:e9:ff:59:7c:e1:44:59:f0:75:0c:4b:51:f4:8a:
d1:d7:4a:be:00:7b:93:fe:db:97:bb:a4:e0:c7:35:
a6:8b:55:9f:9e:d6:08:9d:6b:ae:a3:c3:74:62:d3:
04:dd:e3:e4:f6:d4:73:2c:a7:54:17:af:c5:7a:11:
c8:39:b9:e9:1f:53:89:7f:e0:f4:6f:d8:1e:c3:a0:
2b:c4:d1:55:61:de:11:1a:75:c3:50:e1:65:7e:f0:
23:02:82:c1:98:be:c6:91:4b:15:af:43:80:ea:1a:
1c:f2:fe:74:0b:51:78:d0:28:19:42:77:05:c4:cc:
f9:99:df:ae:da:ab:f4:c0:6a:8f:3a:b8:aa:6c:d9:
c3:80:4b:5f:88:28:35:80:36:83:dc:a7:46:0c:80:
25:5c:64:37:0c:49:bd:50:21:7b:93:cb:7e:88:db:
71:30:e5:d4:cd:1a:52:7e:d3:8f:1b:16:0b:1b:af:
24:3f:05:20:a4:7a:fc:4a:d2:71:bd:06:f9:72:2b:
66:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:DB:E4:0C:13:2A:BE:94:6C:05:5C:CB:99:7C:44:FC:70:36:A9:FA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/u9vkDBMqvpRsBVzLmXxE_HA2qfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
91:d2:07:68:df:b9:8c:67:a6:a9:18:40:92:5a:48:35:87:63:
5e:bd:cf:66:0e:5f:4f:7f:9f:71:5b:01:df:e4:2a:a3:c8:bb:
44:23:d2:9c:c4:f8:77:87:56:7c:ef:cc:62:a9:3c:0a:ea:f2:
18:3e:c5:1c:06:7a:ec:92:c1:00:37:76:9d:aa:74:2e:2a:1b:
85:95:14:0c:40:ec:1e:dc:30:0c:67:a7:e4:eb:27:0d:d3:b9:
d2:ca:9c:75:80:c7:bb:dc:47:d7:aa:25:bd:cf:b2:00:18:05:
7e:d4:1a:20:58:ad:3d:f8:47:2c:be:1d:5c:c3:6c:1c:11:b8:
d9:bf:3b:4f:1f:74:1a:98:97:03:be:3d:d6:eb:93:f2:40:1f:
da:d7:c9:d1:7d:50:50:b5:17:ae:14:da:75:fd:e1:85:fd:90:
62:c8:0f:f1:3b:9f:ba:27:ad:2b:0e:8a:55:c9:52:e2:f1:ed:
87:f5:af:53:89:d1:df:d0:07:44:bc:c7:86:f2:ab:3d:df:c6:
bf:b7:7a:4a:ae:a3:f1:af:ad:cb:f8:3f:a3:d9:8b:09:80:c4:
1b:91:b1:5c:c4:4c:08:dd:d0:59:d4:58:b0:e8:36:84:b4:3d:
01:94:b5:a5:03:de:cc:ff:92:c6:c3:34:69:64:5e:47:f0:e5:
f9:97:c7:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:50:31 2025 by rpki-client