Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cU_zKkwJUNf9NZ_bD40TQUNNMuI.roa
File: cU_zKkwJUNf9NZ_bD40TQUNNMuI.roa (raw, json)
Hash identifier: /xR9AJ6fEJ4culT0nY+3YwsHEcQyLpPeAQmLvyBE2uw=
Subject key identifier: 71:4F:F3:2A:4C:09:50:D7:FD:35:9F:DB:0F:8D:13:41:43:4D:32:E2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A1D68C52CF60593860E378A9C51F6594B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cU_zKkwJUNf9NZ_bD40TQUNNMuI.roa
Signing time: Tue 22 Aug 2023 13:22:00 +0000
ROA not before: Tue 22 Aug 2023 13:22:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:178d:7ed9/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:1d:68:c5:2c:f6:05:93:86:0e:37:8a:9c:51:f6:59:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 22 13:22:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=714ff32a4c0950d7fd359fdb0f8d1341434d32e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b3:76:1a:0b:27:fe:0d:2c:75:7a:1b:c9:6d:
ce:66:10:67:13:a2:e2:da:19:a1:a7:cc:85:0b:a5:
24:5a:95:1d:1b:85:f9:08:cc:0c:ef:78:b4:21:2b:
03:97:77:61:0d:a3:56:55:29:a2:35:72:2f:84:90:
de:d1:ec:fc:bd:9e:0a:4a:8c:90:57:f1:6b:11:77:
8f:cc:22:06:b1:29:ee:95:b6:e3:7f:cd:db:fe:e7:
b6:53:05:ff:8d:be:15:03:e4:74:1c:f8:ad:de:0b:
ba:dd:65:b1:f5:f7:17:6e:00:a0:c9:89:d4:d5:bd:
fb:d5:cb:1e:2f:0c:c4:b8:41:0a:75:10:2c:0e:bd:
83:8e:ff:03:25:e5:a7:7b:ae:86:6c:00:79:bd:70:
3d:d7:fd:9e:de:ef:93:8a:dd:88:13:c9:53:d6:c4:
bf:fc:48:ef:18:6d:80:01:e6:c4:81:24:2c:51:e6:
55:77:1e:46:ad:8b:c0:6d:da:29:8d:2e:72:dd:cd:
1e:a5:19:86:c9:fc:ec:7c:84:5d:d1:cd:4b:4a:a0:
c2:0f:50:5e:7b:61:1a:3c:c3:ba:da:98:f2:13:7e:
c1:f2:6c:d3:1c:17:aa:76:cf:59:66:0b:24:34:88:
d7:4d:fd:ff:89:01:58:94:6a:8b:92:20:1a:7f:1f:
20:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:4F:F3:2A:4C:09:50:D7:FD:35:9F:DB:0F:8D:13:41:43:4D:32:E2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cU_zKkwJUNf9NZ_bD40TQUNNMuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
69:80:91:3c:64:6c:0b:c0:8f:fb:38:5b:4d:c4:c8:d8:66:40:
cc:e3:c4:57:ef:ff:f2:2c:b5:a5:df:85:02:66:47:d9:cd:f4:
10:e1:e9:6c:2c:29:a9:8d:0b:42:3a:0a:00:a3:fc:2f:d7:d3:
0f:6f:5a:9a:b0:be:1f:85:14:b0:d8:b4:9a:a8:e3:4c:90:00:
d9:ad:84:9f:03:5f:a7:f6:5d:97:54:93:bf:f9:cc:76:4a:1c:
ea:6d:ad:28:ec:07:05:c2:0e:91:8f:ce:41:d2:c4:aa:2a:79:
6d:f4:d9:3b:01:5c:eb:25:2c:2c:30:45:6c:f8:13:51:a7:a3:
79:8d:f5:0f:57:50:aa:e9:91:0e:09:37:b5:8a:83:49:e2:dc:
b0:5e:39:9c:c1:22:ac:57:e8:9f:f6:8c:68:28:5d:aa:3f:36:
ed:04:9f:d9:b4:d1:cd:d3:b0:d1:5a:ef:e6:57:03:6b:36:86:
11:c5:74:c9:cc:ba:83:ed:a0:9d:d7:38:03:a1:ee:bf:d6:d0:
14:86:07:7b:00:9f:12:74:3d:56:27:97:3d:04:f0:c3:2a:7a:
34:7f:dd:0a:56:f0:b5:cc:a4:44:53:6a:17:88:d4:31:46:11:
a8:c2:50:85:61:36:9d:3d:69:28:45:f7:4d:bf:d2:e3:ec:ed:
56:35:ae:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:31:53 2025 by rpki-client