Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ArxOE6q3hDACVGFBSS4FH8PBqxU.roa
File: ArxOE6q3hDACVGFBSS4FH8PBqxU.roa (raw, json)
Hash identifier: tvbBz/poCySLxk7kOfbyWhEqHilaRmI0bX7SKylTipg=
Subject key identifier: 02:BC:4E:13:AA:B7:84:30:02:54:61:41:49:2E:05:1F:C3:C1:AB:15
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187BC3153BABF51B05A8A0F66F2877B90E2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ArxOE6q3hDACVGFBSS4FH8PBqxU.roa
Signing time: Wed 26 Apr 2023 06:12:41 +0000
ROA not before: Wed 26 Apr 2023 06:12:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:bc:31:53:ba:bf:51:b0:5a:8a:0f:66:f2:87:7b:90:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 26 06:12:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=02bc4e13aab7843002546141492e051fc3c1ab15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:99:f2:d1:75:f8:1e:39:74:c1:0a:38:e0:37:
61:09:09:0c:43:d8:7a:96:27:df:fa:0d:b9:1a:e4:
94:59:4e:51:89:40:d1:6a:a1:54:44:28:cf:1c:79:
bf:bf:79:ba:a1:6d:d6:8c:dd:25:cf:8a:ae:d7:61:
8e:d1:e0:04:64:fb:78:24:c1:a5:51:f9:9b:d7:43:
db:24:d4:6c:fd:a9:d4:eb:7c:0b:30:fe:e7:17:bb:
b8:8a:a6:e7:70:a0:53:4d:67:d2:0c:a8:ef:14:37:
16:75:37:76:74:23:48:6d:8d:30:93:9f:4b:2f:6d:
da:96:fd:62:5f:52:97:05:1c:27:d2:41:f8:84:2a:
69:56:81:f6:d7:92:1c:08:70:94:76:6c:ba:b9:8a:
d9:0f:3d:30:df:23:23:43:ee:82:96:23:e6:78:91:
fc:44:b0:e9:f8:cb:2e:f8:2f:6d:9d:f3:92:eb:b2:
24:74:e8:c0:1b:42:d8:a5:17:41:94:e9:a7:bc:e7:
82:dc:c0:e9:f2:23:c3:88:3b:fa:bb:94:9f:30:02:
c1:1c:dd:93:2e:0b:1f:13:8a:62:47:af:12:0d:57:
5b:b6:24:b8:85:40:33:f9:07:95:de:4b:ea:09:ce:
18:59:3d:dc:00:0a:0c:e2:7d:b6:47:31:ea:b1:c8:
b8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:BC:4E:13:AA:B7:84:30:02:54:61:41:49:2E:05:1F:C3:C1:AB:15
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ArxOE6q3hDACVGFBSS4FH8PBqxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
75:20:d0:bb:0d:ef:c6:54:72:f2:9a:26:ee:f9:12:c5:49:f2:
1e:5e:ef:c5:ff:15:c7:cf:6b:98:6d:a3:2e:8d:f1:f5:d5:9f:
c2:52:92:99:28:36:d9:1f:9a:1c:84:64:53:63:2d:5a:b1:f8:
f3:1a:f8:35:fd:9a:61:77:11:70:5a:ce:e6:81:da:26:a6:92:
e2:9e:c6:e8:fd:2c:3b:69:8a:c1:de:61:9a:39:f4:d5:5c:20:
21:69:3d:32:a8:57:80:96:f1:1c:46:c1:f3:3d:3a:95:7d:f6:
fc:39:4e:c1:d0:37:67:5f:e0:b3:4f:3c:7b:aa:2e:c7:f1:08:
a3:e4:54:d6:f9:75:25:29:af:11:59:1d:b3:ad:c0:da:29:ad:
02:92:e1:e0:54:d2:12:1f:70:c1:b8:d5:d9:22:d3:92:13:e8:
15:a5:ff:55:1a:ad:91:6f:ea:a3:d8:83:b7:b6:c4:6e:5b:69:
fb:fb:b3:2a:9b:dc:d0:02:82:a7:51:a7:6b:9e:b9:77:33:0a:
22:be:4e:ee:80:5b:77:41:4c:d3:c6:da:cd:b5:05:1a:1d:a3:
14:69:3b:41:c1:27:77:dd:52:05:c8:29:91:b3:ec:5b:5a:d2:
84:1d:68:0a:a0:b7:3a:1a:67:40:4c:42:07:88:c3:7e:22:68:
06:eb:42:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:04:15 2025 by rpki-client