Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/a14VieGCCnL3FyYz-R8u2i_2Tvc.roa
File: a14VieGCCnL3FyYz-R8u2i_2Tvc.roa (raw, json)
Hash identifier: 9DxY0dhTaaHE8WZmVjhqSbKfltZl8eAGuZr/fE0zTCQ=
Subject key identifier: 6B:5E:15:89:E1:82:0A:72:F7:17:26:33:F9:1F:2E:DA:2F:F6:4E:F7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6E2C5F29
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/a14VieGCCnL3FyYz-R8u2i_2Tvc.roa
Signing time: Sun 27 Feb 2022 13:08:27 +0000
ROA not before: Sun 27 Feb 2022 13:08:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1848401705 (0x6e2c5f29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 27 13:08:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6b5e1589e1820a72f7172633f91f2eda2ff64ef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:42:6d:91:a3:bd:64:13:45:c7:a1:77:9c:c1:
4c:df:c8:17:3d:36:c5:15:79:10:70:ef:58:f2:1f:
93:65:90:cf:88:7f:41:fe:20:8f:77:1b:e8:fe:93:
54:f5:73:64:25:e1:db:2f:29:4b:ad:39:37:e1:03:
55:bc:a3:b8:8c:78:e4:f1:84:cd:a9:42:60:7c:99:
02:01:b7:48:29:4e:e0:e9:eb:05:b3:6b:31:c7:62:
27:bc:99:f5:68:0e:c4:30:b1:50:2a:a4:6b:ed:f8:
15:ed:a6:2c:4a:3e:51:50:78:eb:a7:7c:e2:4b:43:
26:a4:4a:4e:5c:cf:84:d5:06:b9:46:4b:79:23:04:
1a:b5:74:c8:a4:a5:9c:ef:c5:c3:56:ff:c0:e2:34:
e4:df:9b:c7:8d:54:3e:fb:19:45:43:38:2f:16:80:
0a:35:15:c4:d4:6f:7d:11:6b:6e:d0:7f:ed:65:cf:
87:f8:19:94:8a:0a:a6:d9:37:65:63:fb:9b:2e:89:
ab:d4:71:c4:e3:d6:f2:6d:27:72:d1:67:02:48:a8:
87:cc:28:89:bd:0a:51:6d:d1:30:e9:91:cd:0f:50:
49:cc:fc:23:8d:1d:20:25:35:52:4b:e6:63:62:bc:
1f:7f:fc:8c:4e:da:89:7f:99:b7:92:e5:97:33:01:
1a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:5E:15:89:E1:82:0A:72:F7:17:26:33:F9:1F:2E:DA:2F:F6:4E:F7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/a14VieGCCnL3FyYz-R8u2i_2Tvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6b:5e:3f:2c:49:ab:44:cb:28:55:5b:59:ab:9d:6a:9d:79:c2:
d0:9c:5d:91:22:3d:6f:b6:b2:97:aa:f4:c6:7e:e2:44:51:f1:
85:80:68:5f:25:b3:96:8d:e2:8c:8a:55:06:87:10:10:e4:fe:
1c:b9:34:8e:d1:22:d7:0e:65:48:9d:ad:04:cd:8a:72:e9:5c:
30:93:72:19:78:e4:ad:c4:79:6f:76:cc:05:2e:2e:3d:f3:7c:
4c:cd:e8:31:78:ed:1e:f6:ea:62:a2:2b:97:0e:43:c0:e1:c8:
6c:03:33:43:c0:6f:d2:8e:83:2e:9f:13:2c:c3:53:d3:42:8e:
2a:13:4a:96:b1:62:b7:34:aa:9e:d5:22:4f:d8:64:4e:87:0a:
be:84:c2:d1:59:2e:61:9e:97:14:9a:9c:bc:e6:ac:ce:4c:a7:
1b:03:5a:26:e4:47:33:2d:05:ee:e0:d0:de:e3:18:84:10:6b:
4a:98:7f:80:b9:b3:c7:40:8f:d6:19:e5:b1:66:85:e0:10:34:
3a:f7:0d:b5:2c:a4:d2:22:fe:b4:67:48:df:95:9a:21:3c:4f:
d2:51:58:5c:04:3c:47:ba:40:cb:60:66:e4:d4:59:31:da:dd:
ab:da:82:5e:49:1f:3f:aa:5c:f6:26:65:e2:99:30:69:55:bc:
12:7f:1f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 05:09:22 2025 by rpki-client