Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ArXt_Kb9lfWz82AFwtMVPWDlLrQ.roa
File: ArXt_Kb9lfWz82AFwtMVPWDlLrQ.roa (raw, json)
Hash identifier: ZfrK0zKNQ5SiqshliM9SyWZmHFEJDImeOc82SMcNN+c=
Subject key identifier: 02:B5:ED:FC:A6:FD:95:F5:B3:F3:60:05:C2:D3:15:3D:60:E5:2E:B4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186C492B1923E0B283834C70CA90D0E324D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ArXt_Kb9lfWz82AFwtMVPWDlLrQ.roa
Signing time: Thu 09 Mar 2023 04:13:13 +0000
ROA not before: Thu 09 Mar 2023 04:13:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c4:92:b1:92:3e:0b:28:38:34:c7:0c:a9:0d:0e:32:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 9 04:13:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=02b5edfca6fd95f5b3f36005c2d3153d60e52eb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:62:4a:16:c7:ac:dd:9b:3e:9a:90:df:f2:93:
c9:9b:f7:ca:e0:22:d4:19:76:fe:90:a4:17:e1:d6:
6d:bd:80:22:78:df:89:eb:16:a3:98:ae:55:0f:f2:
55:4e:a2:ac:7f:a2:20:8c:f4:24:b5:81:7f:50:61:
93:d9:fc:54:f8:a0:8f:3d:98:82:a0:e2:cb:10:62:
eb:af:2e:f1:28:06:75:c1:82:3f:16:7f:4b:cc:c7:
f5:72:76:68:2c:1f:b0:db:bf:e0:27:de:ee:ae:ed:
ad:c1:65:a2:7c:21:d7:02:93:c9:e3:b3:1f:61:c2:
c0:0b:57:c1:e5:d7:85:79:ed:6a:1f:59:6e:34:a4:
d7:87:2e:fe:c7:27:9a:97:0b:bc:f2:dd:2d:04:bb:
0b:5f:8e:07:6c:dd:10:1c:cd:f9:1d:9e:09:81:50:
87:54:18:05:0d:01:e4:95:63:38:86:81:c3:9e:2b:
2d:00:d0:77:5d:e7:7d:9b:d4:b4:24:71:96:87:2f:
81:25:79:1e:7d:bd:c9:4d:c9:73:f5:13:d6:e9:ce:
7e:dc:a7:f9:d1:ef:8f:d8:3d:15:05:65:c3:b7:93:
80:0b:9a:47:34:53:5d:b5:1a:13:6b:20:35:7b:47:
1f:39:20:ad:a4:cb:09:d2:25:fe:cc:8f:9f:5e:45:
51:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B5:ED:FC:A6:FD:95:F5:B3:F3:60:05:C2:D3:15:3D:60:E5:2E:B4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ArXt_Kb9lfWz82AFwtMVPWDlLrQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
07:92:d7:24:37:14:b9:b8:39:04:96:5f:ab:b0:d5:0a:c5:ca:
fc:ff:5b:2a:af:15:7f:3a:51:bd:88:a9:8d:d5:fa:94:89:d4:
70:ef:ba:08:64:58:f5:73:e3:b7:6e:8d:0f:45:61:f7:c4:98:
79:90:be:50:cd:bb:24:40:d4:9b:a4:75:bf:cc:79:ce:75:74:
5f:10:6f:1d:ea:8d:4b:c0:b3:27:e7:4f:b5:d0:6c:1d:54:67:
24:2e:d5:ee:24:44:fc:2d:4b:4c:03:8d:57:47:f2:f5:99:dc:
d6:14:b6:42:db:9d:d7:82:b1:38:58:cd:11:f8:f2:6d:6e:16:
85:4e:3d:cf:59:b1:bf:5a:d7:49:27:49:26:50:79:56:6f:f0:
06:c2:3a:d9:3e:2b:11:28:cc:30:3b:5c:3e:ed:68:6b:69:9f:
76:b9:64:37:96:4c:ab:9e:72:a2:ae:ac:96:48:25:2c:f0:cf:
98:60:31:a7:42:f0:6a:cb:60:58:43:35:8a:bf:39:60:ac:5c:
c0:8a:8d:c0:b3:e0:68:bd:6f:47:33:cc:84:77:1e:06:b6:24:
0a:9f:96:e6:35:fc:f8:c2:ac:20:97:18:61:02:c0:23:37:6e:
6f:78:13:17:5e:c7:75:e0:4d:3f:8a:37:89:8c:76:6f:4d:b5:
01:ad:d9:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:20:34 2025 by rpki-client