Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xBjEGjdW1HYFt3mfzPs8U0ZtZDM.roa
File: xBjEGjdW1HYFt3mfzPs8U0ZtZDM.roa (raw, json)
Hash identifier: 4y/faHVYSjT+BYw5yfeCOfK6mFWSSdyLVBR0MnJQxN8=
Subject key identifier: C4:18:C4:1A:37:56:D4:76:05:B7:79:9F:CC:FB:3C:53:46:6D:64:33
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7F74621E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xBjEGjdW1HYFt3mfzPs8U0ZtZDM.roa
Signing time: Fri 29 Apr 2022 04:09:35 +0000
ROA not before: Fri 29 Apr 2022 04:09:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2138333726 (0x7f74621e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 29 04:09:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c418c41a3756d47605b7799fccfb3c53466d6433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c9:f6:76:70:b4:8b:4d:aa:cf:7c:95:26:1f:
8f:74:dc:95:37:33:ac:f3:71:27:ed:0b:96:f6:8f:
d3:d6:09:5b:4b:70:7d:67:14:0c:eb:04:22:ff:5c:
ff:af:46:57:6c:a2:0c:8a:43:97:11:17:81:47:08:
42:f6:e6:84:2e:d1:e6:55:78:e3:67:77:d3:19:9d:
14:a3:00:5b:23:31:45:4e:c9:f8:05:c3:40:e5:5d:
9c:07:68:19:1f:53:9c:54:8b:bc:11:65:fa:60:e9:
72:bf:d1:ab:5e:9f:15:62:9e:ec:e3:a4:f4:b3:cf:
08:d0:a3:2f:6b:df:5f:1b:8b:9d:24:c8:93:2b:86:
22:39:83:dd:dc:3c:9c:47:f7:d6:05:88:a3:31:e3:
48:14:9a:f4:ae:30:25:39:d9:70:e5:47:5f:71:27:
04:48:50:78:e0:4c:6d:da:6c:3f:9e:93:04:d8:10:
1c:29:52:86:58:3a:1f:d4:b0:96:09:64:c2:be:a6:
e6:de:58:54:5c:20:72:b2:46:63:80:6d:b0:62:91:
de:7b:91:da:ba:96:ad:71:e0:f4:c6:9d:5e:0d:50:
17:62:92:2b:3f:2d:47:40:b4:0b:f2:04:99:c4:ab:
d7:7f:5c:4e:f0:26:b8:ca:18:4d:30:d8:6b:f9:d0:
95:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:18:C4:1A:37:56:D4:76:05:B7:79:9F:CC:FB:3C:53:46:6D:64:33
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xBjEGjdW1HYFt3mfzPs8U0ZtZDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
90:e0:8a:d2:0a:29:81:a4:e9:f6:d3:f6:86:46:f1:2b:61:47:
90:dd:69:83:f0:13:0a:1b:ac:6a:73:92:fa:b0:a9:7c:45:e8:
eb:36:92:9a:91:58:23:7d:46:84:f4:0b:c6:3e:0b:ec:32:6a:
b8:70:25:9c:f8:3a:8a:cf:80:08:4b:68:e7:57:06:27:b0:55:
ea:6a:da:27:f9:d4:61:83:d4:6a:67:21:5e:03:10:c8:19:68:
ac:aa:2a:8e:f5:e1:07:38:eb:26:77:f9:87:be:d7:9a:59:af:
57:1e:df:5c:a0:ab:86:d6:a8:74:54:81:d6:58:8d:8b:0f:be:
02:e5:ec:6b:99:ac:42:e1:a3:d7:a3:11:7f:97:9f:bf:cf:5b:
57:05:aa:a9:22:ec:77:92:9d:92:a6:dd:0b:86:b9:55:75:97:
02:af:6b:dc:b7:ee:7a:a9:e9:45:80:68:a6:75:b4:0c:a3:95:
ea:a0:3e:56:74:da:5c:31:fd:98:74:5c:09:7f:62:c3:45:6e:
33:89:95:6c:b6:96:99:d3:65:2c:e4:4b:95:05:72:7a:47:f1:
d9:a4:50:14:9b:4e:aa:84:0b:73:aa:39:be:4b:a8:6d:8b:8d:
3d:20:3a:9b:42:70:cd:c9:46:f5:62:ae:95:ec:99:c4:47:23:
d3:33:e4:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 18:20:33 2025 by rpki-client