Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uP0XfkSYlEJoi_Mlwmv47HL8cts.roa
File: uP0XfkSYlEJoi_Mlwmv47HL8cts.roa (raw, json)
Hash identifier: b8dmyM2QrM502NToByDbgVByeWFMKgGdqRP+PFZkrtI=
Subject key identifier: B8:FD:17:7E:44:98:94:42:68:8B:F3:25:C2:6B:F8:EC:72:FC:72:DB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184E3EB22935E4CFFFBDA35A1502E61C2D7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uP0XfkSYlEJoi_Mlwmv47HL8cts.roa
Signing time: Mon 05 Dec 2022 20:12:28 +0000
ROA not before: Mon 05 Dec 2022 20:12:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e3:eb:22:93:5e:4c:ff:fb:da:35:a1:50:2e:61:c2:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 5 20:12:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b8fd177e44989442688bf325c26bf8ec72fc72db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e0:d4:a7:7d:e5:e5:ce:e7:46:8e:60:68:14:
25:30:e6:f9:c6:55:ad:22:c5:3e:89:1d:70:76:d3:
ab:47:a9:e1:6f:72:75:af:84:a0:09:c1:9f:6a:39:
1c:be:d7:ae:b7:8c:e5:a8:98:a2:b7:31:31:12:4a:
e0:e6:db:4b:28:9b:71:5e:38:c6:00:b6:26:9d:12:
a3:2c:35:db:f1:83:ce:b9:25:f1:64:31:54:a6:ad:
40:35:d8:76:4a:28:35:5f:0d:79:d8:0f:f5:f1:70:
f5:93:51:ba:8e:eb:c8:35:21:65:fb:34:b9:cf:25:
ce:6e:81:3f:ff:2e:84:96:80:b5:65:42:a8:8b:c7:
d8:bc:56:47:68:32:dd:ea:da:d8:ec:de:b1:16:1d:
bf:53:1e:b6:59:c7:3e:81:5b:fb:d9:a5:7c:97:2d:
aa:1f:e9:06:bd:c3:73:97:34:61:5b:2e:ce:57:1a:
fb:ac:50:23:e1:40:12:52:25:8e:00:d0:a3:d8:0a:
08:7d:c3:3a:67:15:3c:93:3a:df:34:6c:e4:3f:bd:
c2:dd:ab:15:7a:6c:55:be:76:ca:c3:10:a3:db:b9:
c7:07:ab:1d:3f:98:ac:6a:aa:b4:db:19:2a:ed:ce:
4e:b5:f6:eb:4f:f0:ab:2a:26:12:47:64:b6:75:32:
fc:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:FD:17:7E:44:98:94:42:68:8B:F3:25:C2:6B:F8:EC:72:FC:72:DB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uP0XfkSYlEJoi_Mlwmv47HL8cts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
25:f0:3e:d3:00:ea:93:ae:81:4a:bb:af:4c:ec:f6:3d:a9:61:
e1:1c:ee:de:a6:9b:39:97:4a:a9:fe:f2:d7:56:a1:80:46:d4:
c3:48:5a:f1:56:1f:98:6f:26:aa:49:ab:69:db:58:7e:ae:84:
07:8f:da:31:68:30:87:82:36:47:30:88:55:68:40:6a:c7:a4:
f6:2f:a1:9c:71:0c:5b:c9:05:54:f6:e1:2a:60:be:c4:ac:a4:
0e:dd:60:2d:96:f9:e6:f6:f9:38:1a:9f:03:ba:33:0d:db:63:
62:80:3b:c1:11:2d:0c:2f:d8:18:f1:b1:92:9e:4c:2f:4e:79:
16:79:6d:37:c9:a0:e8:f7:14:4d:12:71:b1:d4:b0:28:41:69:
26:2d:5f:ad:86:9a:4f:05:71:80:9c:30:14:17:61:78:c7:97:
22:b5:d8:51:c2:95:3e:36:8e:00:e3:c0:d1:a5:c1:da:e1:ec:
b9:85:08:63:3e:05:ca:b2:0a:5d:a8:a5:53:7c:84:8b:4f:68:
c1:ec:8c:d4:af:5c:6b:2f:85:31:cb:81:7c:72:bb:13:a4:7a:
3f:dc:2d:40:a1:76:a6:a1:ab:73:c3:fe:ee:81:12:52:61:5d:
3b:87:4f:dc:78:f7:29:78:8e:24:72:06:cb:2f:f0:e2:b3:33:
ea:6e:b8:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 02:56:10 2025 by rpki-client