Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/x_f0EAt9gRqt9fIAYnQw0QBpwmU.roa
File: x_f0EAt9gRqt9fIAYnQw0QBpwmU.roa (raw, json)
Hash identifier: cozzv/2+4+7/gKppH4yOQDL+5j8TIbrK5Jv93B6DWQo=
Subject key identifier: C7:F7:F4:10:0B:7D:81:1A:AD:F5:F2:00:62:74:30:D1:00:69:C2:65
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185548FB285A3589D6F23B59E203EF2B9DB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/x_f0EAt9gRqt9fIAYnQw0QBpwmU.roa
Signing time: Tue 27 Dec 2022 17:09:41 +0000
ROA not before: Tue 27 Dec 2022 17:09:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:54:8f:b2:85:a3:58:9d:6f:23:b5:9e:20:3e:f2:b9:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 27 17:09:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c7f7f4100b7d811aadf5f200627430d10069c265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:22:02:88:68:19:81:b1:b2:e8:75:61:da:55:
71:67:21:b0:9f:d4:76:db:02:37:a6:b9:11:63:3e:
60:56:cd:7a:b2:6a:b8:30:9b:ee:0b:8b:69:14:67:
7f:ef:df:73:6a:6a:ab:8e:49:e3:f5:94:c4:0a:1d:
99:98:a2:da:b4:65:f7:b0:93:a7:a2:9e:91:c0:bc:
d1:06:a6:27:d9:3a:72:7c:2e:d0:98:ca:24:e2:3e:
f7:a5:f6:38:95:30:f3:1f:c3:d8:88:2f:f4:bd:26:
5e:9a:08:4f:c1:10:b0:61:f7:da:50:f9:7f:d6:d5:
b8:d9:47:c3:5b:b0:c4:10:1d:ee:01:2d:f9:eb:27:
b0:34:3d:71:4b:b9:95:e2:e4:12:cc:b7:ae:93:a8:
96:47:3d:e4:6f:71:47:e7:34:10:5a:e2:bf:f4:9e:
c8:13:54:99:a0:26:a1:b9:05:ce:08:47:a5:04:d0:
c7:92:5d:6f:64:d9:d1:84:07:42:17:d7:5f:81:75:
f1:65:9e:9d:d7:a1:94:10:88:7f:82:25:6b:e8:13:
ec:02:23:f8:fa:2c:32:01:0d:27:39:db:70:b6:03:
2f:ac:6f:af:07:63:66:02:0b:2a:b6:6d:1e:3c:b7:
a0:90:08:85:38:d6:93:3e:60:43:2e:e6:a3:cf:b1:
ea:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:F7:F4:10:0B:7D:81:1A:AD:F5:F2:00:62:74:30:D1:00:69:C2:65
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/x_f0EAt9gRqt9fIAYnQw0QBpwmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3c:69:5b:79:73:ef:5e:45:f3:2b:54:99:74:77:52:3a:a0:36:
e7:7c:f9:26:ca:f3:80:ef:66:ff:92:05:df:25:a1:98:86:de:
b5:c1:45:cf:76:b8:06:2e:fe:f7:ac:09:27:ea:a0:3a:a4:1e:
5b:c1:2f:56:49:db:5c:57:30:da:ad:10:a3:a4:56:b1:e2:54:
3b:fd:94:10:9f:8b:53:99:83:29:de:ce:8d:e0:1a:91:da:62:
0d:56:81:53:84:ed:c3:04:f7:32:27:d3:9f:93:b4:82:5a:47:
00:0e:05:cf:24:7a:9a:e8:1a:13:ea:4e:30:89:18:bf:70:8a:
2d:ca:04:73:27:b4:40:7e:0a:bf:f1:37:0f:29:21:be:7b:86:
8f:ab:71:0e:70:36:b5:dc:dd:60:3b:2c:d5:c7:73:31:b2:ae:
4b:32:b5:f2:49:56:1b:e0:12:4c:7e:72:16:2e:68:45:3c:07:
c4:46:25:d9:f8:98:51:3a:a8:1b:d9:29:b6:4a:76:84:a4:cc:
09:70:d3:15:14:ea:2b:cd:d2:eb:25:2c:03:07:b2:20:6f:9e:
fb:63:86:ef:02:14:a4:31:f4:d9:0a:ba:4a:ea:27:28:93:e5:
28:43:4c:62:40:64:95:bc:26:3a:93:ec:af:ff:ff:a2:db:61:
4f:e6:85:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:09:45 2025 by rpki-client