Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yU6ImLvdYmIrlpB67JbWm6k6yu4.roa
File: yU6ImLvdYmIrlpB67JbWm6k6yu4.roa (raw, json)
Hash identifier: SVhUnP+L6Hx5cQBwlmdvRjA30YzbE1IDdkOyJ34nXSA=
Subject key identifier: C9:4E:88:98:BB:DD:62:62:2B:96:90:7A:EC:96:D6:9B:A9:3A:CA:EE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184E6AE44261DC55B0E5A5D6C89DD5CE04B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yU6ImLvdYmIrlpB67JbWm6k6yu4.roa
Signing time: Tue 06 Dec 2022 09:04:51 +0000
ROA not before: Tue 06 Dec 2022 09:04:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:e6ae:1526/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e6:ae:44:26:1d:c5:5b:0e:5a:5d:6c:89:dd:5c:e0:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 6 09:04:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c94e8898bbdd62622b96907aec96d69ba93acaee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:20:b1:3a:88:2b:28:cd:f9:28:65:c6:74:df:
5e:76:e2:ac:c2:72:33:aa:3c:5c:bc:05:c6:e4:73:
f0:dc:8b:39:f2:11:23:eb:48:d3:61:e7:c7:d8:69:
55:cd:3d:54:4f:6b:42:7f:9f:aa:c0:3a:c7:f2:22:
48:d1:ba:ee:25:8c:ff:da:06:7e:f2:5f:67:98:d3:
40:41:59:f7:e2:ee:6c:f5:bd:e6:91:3a:d6:27:8e:
ad:69:90:e0:4b:b2:24:9b:3f:a0:0e:e5:c0:60:84:
90:d8:c4:d3:0e:ea:c7:c7:21:f1:d2:37:2f:f2:94:
cf:72:d0:ee:d9:40:06:21:06:6a:e8:a9:37:19:99:
f1:bb:c4:5a:11:8e:63:85:77:b9:13:f3:c3:b5:eb:
13:62:c7:27:b4:01:83:19:26:6d:3a:46:74:03:2e:
df:d7:eb:a4:89:6f:73:56:e7:af:23:68:e7:3f:64:
9a:20:61:0c:75:0b:aa:70:54:d0:c8:c0:6e:ab:59:
53:50:e0:7c:b5:e6:ad:36:f7:c9:9c:ab:be:dd:01:
d7:cf:27:b4:57:2a:45:e5:45:5c:04:37:c9:ff:61:
63:bc:88:0a:8e:9e:39:93:61:60:70:90:fc:e9:69:
11:da:80:27:8d:6a:e5:75:f8:a7:a6:5e:8e:03:f1:
76:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:4E:88:98:BB:DD:62:62:2B:96:90:7A:EC:96:D6:9B:A9:3A:CA:EE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yU6ImLvdYmIrlpB67JbWm6k6yu4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9b:29:01:10:e2:8f:60:40:c9:80:cf:2c:ce:4f:55:1a:3c:12:
cb:28:9e:c9:f3:ea:47:7b:02:fe:59:b2:c1:2f:54:ad:cf:b8:
5b:be:47:ba:7e:6d:a5:6e:a1:63:23:6c:e2:a3:cb:37:a5:37:
fc:d1:0d:15:f7:b2:c2:1e:bf:2c:0e:59:7f:0e:0c:60:4d:d0:
37:d0:fd:86:51:fb:80:0f:ef:55:b6:7d:22:dd:1c:e6:91:26:
7b:dd:00:b2:34:50:bd:1e:cb:07:74:df:bf:cd:a6:d3:94:c0:
34:7d:2c:65:68:21:ab:27:9a:2a:47:82:16:ee:3c:ba:97:52:
84:df:01:f4:92:d6:99:a1:c7:08:44:3e:d2:7f:85:98:12:4c:
ea:69:5d:52:d0:bf:da:e5:cd:cc:42:8a:c2:50:69:9a:46:47:
a7:46:bb:b6:bf:0e:5a:82:81:a8:f1:1f:d7:e5:3e:95:b9:ba:
33:3c:7d:cc:f5:3d:27:f1:cd:8d:d2:ef:78:8b:a6:d8:40:a5:
27:28:fd:7a:59:b2:a9:35:7b:80:14:e6:42:16:3c:fe:e9:43:
5a:81:fc:6a:d5:4a:b9:cd:d9:ed:80:d3:b6:83:66:5b:e1:38:
07:0c:f7:45:73:80:2e:26:da:85:bd:6b:77:d2:84:32:82:39:
fa:71:04:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:15:11 2025 by rpki-client