Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xG66dDOQxgSPLO7w4wsA6xDa7qg.roa
File: xG66dDOQxgSPLO7w4wsA6xDa7qg.roa (raw, json)
Hash identifier: SIUsKaWUGJisE69pL1oxvx5IDmyLeBD6OdMBLkBkD38=
Subject key identifier: C4:6E:BA:74:33:90:C6:04:8F:2C:EE:F0:E3:0B:00:EB:10:DA:EE:A8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01858A6B8B226DDAAB4C0F4EEDE079A98CF6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xG66dDOQxgSPLO7w4wsA6xDa7qg.roa
Signing time: Sat 07 Jan 2023 04:09:41 +0000
ROA not before: Sat 07 Jan 2023 04:09:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:8a:6b:8b:22:6d:da:ab:4c:0f:4e:ed:e0:79:a9:8c:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 7 04:09:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c46eba743390c6048f2ceef0e30b00eb10daeea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:49:64:c4:ad:4a:0c:55:61:73:b0:ac:b2:fb:
4e:7d:13:ca:1d:b2:e6:cb:2a:9a:e1:c4:e3:dc:6e:
bd:34:20:51:5e:75:d0:9b:83:58:2b:e7:c7:5e:a7:
d6:b8:7a:36:98:f1:2d:9c:d9:bf:a7:67:dc:dd:b6:
14:93:fc:19:fc:f1:cc:7f:d5:23:2b:59:58:49:45:
1e:54:70:26:ca:3d:0e:55:d8:04:e5:90:6a:43:06:
4e:a6:08:bd:02:8e:3a:99:e6:5d:12:f7:93:4f:7f:
bb:12:f7:78:7d:cd:88:6c:c7:f9:fc:0d:46:d8:98:
2b:cd:5c:90:4e:06:af:57:b1:b3:cc:c3:f2:e0:62:
fe:14:61:0b:33:38:16:ba:e6:0c:8a:12:73:a1:16:
c6:7d:31:16:07:6f:35:8a:47:bc:df:bb:01:a8:52:
4f:ac:92:b4:45:0b:3d:e7:71:cf:46:53:9b:33:ad:
a4:65:1c:d7:84:d5:91:7e:fe:ef:1f:4d:19:d0:2c:
a5:38:27:47:47:e9:c8:27:5a:03:79:51:10:8d:8e:
94:5d:f4:e2:3b:3a:21:62:dd:2c:09:aa:56:0c:e6:
c8:3b:df:06:a3:07:40:91:98:92:81:d5:7e:58:79:
7d:b3:6c:26:9f:3d:f8:cb:84:cc:7a:5b:55:b1:c3:
62:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:6E:BA:74:33:90:C6:04:8F:2C:EE:F0:E3:0B:00:EB:10:DA:EE:A8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xG66dDOQxgSPLO7w4wsA6xDa7qg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
01:bd:60:db:3c:08:19:43:53:9a:1f:bd:af:a7:cf:bb:80:d0:
99:42:2c:fb:ed:e5:1b:3b:29:b2:08:ad:60:91:4e:17:8b:d8:
48:72:16:4d:22:4b:15:5c:23:03:ca:51:7e:9e:a1:c1:d8:7f:
7e:db:7f:06:8e:1e:3e:15:2b:ea:9e:3a:09:ae:e0:02:81:3c:
8c:e4:a8:db:16:2a:e8:31:9c:eb:ba:b5:97:88:61:85:ba:eb:
15:83:fc:77:51:b2:5c:d5:d1:cf:0c:3b:be:46:9d:f0:25:54:
bb:71:f0:ed:3a:1e:86:af:07:20:87:16:b9:7b:48:4d:0a:41:
95:0a:3c:2f:c4:b8:f4:a0:cd:56:93:cf:fb:01:c9:fd:c2:84:
3d:d9:2a:80:6d:ea:bc:ba:49:02:87:10:1b:30:7a:8f:93:63:
da:d3:bc:5c:9c:85:d5:96:28:ae:b4:28:2d:ad:9d:f3:36:2c:
b1:a2:9c:48:8c:35:3f:de:39:af:b8:0c:ba:6c:52:11:dd:a2:
3a:c0:0d:59:ed:59:90:1d:88:39:bf:77:a3:df:55:a0:75:99:
66:74:89:91:3c:9a:d4:a4:b9:da:31:e5:07:08:dc:4e:cf:75:
30:b4:42:ab:a7:af:0a:9e:c6:25:3b:cf:2d:32:36:29:fb:03:
a9:7d:be:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:48:44 2025 by rpki-client