Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uINAc6fgSPM3SP2TOfW-fTozPoY.roa
File: uINAc6fgSPM3SP2TOfW-fTozPoY.roa (raw, json)
Hash identifier: 7Eg3o1htClIBJmU4q7rP0ULSFTJ5kte0wgvNFFUWyVg=
Subject key identifier: B8:83:40:73:A7:E0:48:F3:37:48:FD:93:39:F5:BE:7D:3A:33:3E:86
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184EE6E5B94FC32F7A40C15EE5ADD6732A7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uINAc6fgSPM3SP2TOfW-fTozPoY.roa
Signing time: Wed 07 Dec 2022 21:12:00 +0000
ROA not before: Wed 07 Dec 2022 21:12:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ee:6e:5b:94:fc:32:f7:a4:0c:15:ee:5a:dd:67:32:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 7 21:12:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b8834073a7e048f33748fd9339f5be7d3a333e86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:68:4b:cd:2a:6c:00:8d:79:a0:c6:b2:17:24:
c7:4a:68:ae:7a:69:5a:94:7d:aa:3b:d3:3c:f0:58:
46:3f:4b:55:44:09:c7:00:22:f4:a5:8f:7e:7f:76:
c6:4c:b2:33:64:16:6f:56:d8:6c:52:44:4c:9f:b7:
f1:5c:65:95:f6:de:20:c5:54:ea:6e:b7:37:24:67:
b6:8b:dd:4d:db:60:56:d5:00:8a:15:a1:e2:24:17:
0c:5c:09:1d:05:1b:8c:02:bf:f3:5f:ab:1d:da:6b:
1d:e4:c9:c9:e5:aa:57:42:c8:48:46:91:48:87:ba:
88:42:bf:bf:eb:1f:0b:f6:40:59:d4:7d:c2:12:77:
4a:ad:01:b4:7d:a9:b8:37:a0:61:2d:fe:44:05:8e:
f3:f4:a2:94:d5:de:6c:fe:7e:0d:7f:ab:8d:41:62:
af:54:fd:ec:a7:c5:70:02:a7:9c:3c:09:10:f0:46:
d9:30:57:35:45:0f:be:74:89:ee:17:b2:6c:49:f4:
ad:25:81:af:ce:4f:84:26:0e:c5:4d:a1:d2:0a:b0:
4a:a4:64:12:9f:f7:3a:54:56:f0:ab:ad:8e:c8:f6:
70:ea:fe:be:11:ad:10:49:11:61:36:e6:bc:f3:24:
10:3f:9d:14:8d:c9:6b:5e:98:00:83:aa:a1:6d:85:
07:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:83:40:73:A7:E0:48:F3:37:48:FD:93:39:F5:BE:7D:3A:33:3E:86
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uINAc6fgSPM3SP2TOfW-fTozPoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
46:ae:55:5c:82:1f:8a:d8:ad:39:1a:ad:27:fe:aa:a9:4e:0a:
1d:dc:f8:2f:0c:92:07:13:30:f4:ec:37:b2:a5:34:22:08:3a:
0b:a6:fb:22:8e:87:97:af:e1:8d:9a:c6:91:09:d7:2f:5d:87:
5d:af:f1:df:e7:60:cb:c5:38:e3:b6:f7:5d:2a:64:29:3b:15:
87:7a:9e:cb:48:22:e9:85:16:34:96:67:22:1d:0f:19:73:63:
33:4d:78:3a:ce:8b:a0:11:09:9d:b4:5e:ee:d7:e8:45:d4:e4:
d6:9e:26:c7:e2:f8:83:8f:12:f6:3d:a4:2e:57:c6:46:2f:d5:
3d:48:4d:7a:fe:1b:ba:f4:0c:8a:57:df:c0:41:18:ae:23:8d:
9c:f8:70:77:f0:2e:5d:d5:d5:07:bf:48:86:d1:c1:8f:05:f0:
a9:cf:20:ea:2e:3f:bf:b4:76:c5:5e:39:57:a6:a6:73:7e:87:
7f:1e:cb:03:52:74:46:94:ac:30:8b:9c:18:de:85:a4:67:98:
b4:b4:58:b5:6d:4f:eb:95:5a:c7:0e:19:e3:0f:cc:65:68:0c:
5e:5f:45:68:5b:25:59:f1:54:81:86:33:7c:41:b7:59:4b:59:
9d:1d:70:e1:78:1d:6f:5d:f0:cf:e1:09:b9:5e:ba:a3:ec:6b:
f9:27:a0:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:23:31 2025 by rpki-client