Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/b64kpaA6Nw4cgU5tAvix2HVzSKI.roa
File: b64kpaA6Nw4cgU5tAvix2HVzSKI.roa (raw, json)
Hash identifier: nqEThRqjvwbwIn2jtKxjDFfK5UTnH69FT5Q3G/g8fxs=
Subject key identifier: 6F:AE:24:A5:A0:3A:37:0E:1C:81:4E:6D:02:F8:B1:D8:75:73:48:A2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182EF491F320BCDA0367497094C6FC4D6E8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/b64kpaA6Nw4cgU5tAvix2HVzSKI.roa
Signing time: Tue 30 Aug 2022 15:05:22 +0000
ROA not before: Tue 30 Aug 2022 15:05:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64:ffff:0:182:ef49:10c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ef:49:1f:32:0b:cd:a0:36:74:97:09:4c:6f:c4:d6:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 30 15:05:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6fae24a5a03a370e1c814e6d02f8b1d8757348a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:84:1e:4d:23:d1:79:40:8a:7a:6b:cd:29:30:
5c:c5:6b:06:36:3f:a2:e6:bc:76:d2:c5:58:4d:34:
cc:f9:1a:b6:40:6c:ec:1c:fd:2a:1d:b7:5a:1b:a1:
aa:c2:c1:e9:31:65:ac:3e:c8:c0:2a:7c:31:29:c2:
72:f7:74:e3:4b:01:63:b9:3d:50:0a:36:ce:7f:a6:
e4:dd:ff:9e:8f:bc:f6:20:3c:99:60:99:41:d1:bc:
45:84:3e:a6:70:05:68:bc:f5:da:06:96:2f:79:b5:
09:4a:82:29:51:7c:52:11:99:c0:5c:02:8e:23:f8:
99:dc:76:43:56:05:e0:ce:6a:3d:16:6d:26:16:aa:
07:35:5c:1d:43:c2:e7:f2:6e:c5:fe:21:73:45:ea:
52:44:08:77:40:dc:0d:b7:f4:3d:8d:48:de:cb:e6:
d6:93:9b:c5:28:4f:6b:90:5e:e8:06:57:09:80:fa:
37:c2:cd:5f:bc:80:b3:25:6e:04:42:2e:e0:e6:48:
17:53:42:34:33:fc:83:04:a3:ba:eb:bc:25:b1:90:
4b:b7:52:84:bf:58:24:43:b1:3d:ee:b7:09:fd:33:
2f:15:05:24:26:55:c4:46:f9:36:73:34:e3:74:a7:
6d:64:16:a2:70:be:24:e8:19:06:1b:eb:9d:70:e1:
f8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:AE:24:A5:A0:3A:37:0E:1C:81:4E:6D:02:F8:B1:D8:75:73:48:A2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/b64kpaA6Nw4cgU5tAvix2HVzSKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
67:72:c7:c8:04:15:5c:c6:5e:eb:7e:ed:d0:52:7e:d6:5a:ea:
9f:2a:25:89:5d:11:04:a5:cf:f2:02:ba:5d:f2:60:2b:70:58:
7d:a7:85:2d:2f:1d:7a:b2:ff:ea:74:04:c2:83:ac:f5:1e:62:
52:3d:5f:94:3d:18:ae:52:2b:0a:08:f0:9e:6d:6e:74:68:8c:
9d:b0:65:69:b5:1d:03:e8:e9:0e:65:ce:0a:86:4f:16:05:63:
37:46:b6:3d:b6:32:d8:83:d0:cd:4e:e6:fb:ab:ac:30:51:dd:
27:68:37:5c:b7:90:9d:65:4d:2d:d9:51:d6:fd:5e:0c:17:a7:
0d:fa:73:04:d2:ae:9d:76:0a:a8:00:69:32:7c:37:87:d6:6a:
fc:23:7b:03:6c:d6:08:32:c2:0d:88:40:55:a3:f7:44:28:eb:
69:62:9b:01:19:e7:e3:e3:46:d7:d8:20:e4:5f:a3:f3:b4:b3:
8e:95:09:76:8f:25:44:13:23:e3:c8:99:13:b5:0f:57:38:d2:
4f:a8:53:11:3c:5b:4e:2b:98:2c:f5:56:02:43:dc:d8:19:47:
9f:11:39:b0:09:ea:29:4f:1d:bc:9b:6e:a8:a2:45:e8:55:a6:
6e:0d:1a:b2:8e:9b:6b:30:ba:41:e7:76:5d:72:f8:7a:5d:a3:
13:5c:00:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:10:21 2025 by rpki-client