Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cV007v9xFA6ZF_tZeaekXMLvxZU.roa
File: cV007v9xFA6ZF_tZeaekXMLvxZU.roa (raw, json)
Hash identifier: QiG9ccVpScua6esEpYNB1iuvEclAPuxLHSJavtOiEeU=
Subject key identifier: 71:5D:34:EE:FF:71:14:0E:99:17:FB:59:79:A7:A4:5C:C2:EF:C5:95
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185887D29614ECCED69C998E90D8BA36651
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cV007v9xFA6ZF_tZeaekXMLvxZU.roa
Signing time: Fri 06 Jan 2023 19:09:42 +0000
ROA not before: Fri 06 Jan 2023 19:09:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:88:7d:29:61:4e:cc:ed:69:c9:98:e9:0d:8b:a3:66:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 6 19:09:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=715d34eeff71140e9917fb5979a7a45cc2efc595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:33:f3:4f:02:57:11:19:cb:ab:ef:e8:cb:9c:
de:c9:46:e8:d0:23:51:d4:3d:42:4f:41:0d:f0:2c:
a1:d7:69:98:cf:4d:26:d7:2b:6a:1a:4b:a9:7a:a1:
ff:22:32:08:2a:de:48:42:e8:4c:47:ec:25:9f:da:
15:bc:3f:0f:53:be:42:f1:22:0f:d7:e1:bd:84:e3:
6b:7f:f4:28:f9:21:8d:6c:e7:65:06:1c:0a:57:e3:
4c:f3:d3:e3:1b:d4:1f:99:92:29:f1:d0:2d:a9:98:
7e:5a:45:1f:24:da:09:12:3b:03:f7:16:2d:e8:e2:
03:67:74:2e:43:5e:a2:ad:f1:4f:f2:1f:e4:fa:c8:
ba:b8:bd:66:d4:64:4d:fc:5e:26:53:10:56:7e:3e:
14:b3:3a:fe:15:38:aa:d6:89:a1:08:29:fd:50:86:
1d:13:6e:5f:48:4d:75:e4:bc:57:04:2d:b3:e0:61:
e4:55:14:6b:6e:ab:80:86:84:ba:72:c1:bc:13:78:
45:22:fa:ef:09:81:bf:35:c7:80:fd:e7:86:05:61:
b6:c1:0c:24:87:38:e5:2d:c1:f1:16:ff:80:3c:f3:
de:08:aa:32:75:34:e4:a0:e7:b9:6a:4b:f7:61:47:
63:05:da:54:f0:59:91:ba:12:65:8e:0d:0f:ce:9f:
05:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:5D:34:EE:FF:71:14:0E:99:17:FB:59:79:A7:A4:5C:C2:EF:C5:95
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cV007v9xFA6ZF_tZeaekXMLvxZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
31:4a:61:6a:68:01:5c:6f:f1:0e:98:ca:e9:f0:d9:4d:81:38:
e2:33:b4:48:f0:0c:a2:06:b5:b5:77:78:76:9a:f0:b6:8c:46:
ff:f6:b1:d1:1e:a6:6d:19:f8:e8:e3:c0:c9:d2:4f:a2:a2:08:
ef:da:8c:85:31:d8:15:cb:cd:d4:17:cc:d7:d0:ea:83:f2:91:
3c:d3:eb:28:4a:cf:24:1c:b8:bd:42:ed:b2:12:80:d0:43:f1:
2c:27:6c:a2:9e:2c:0c:7a:5c:c7:4c:b4:90:33:2e:97:4f:e0:
af:7f:cd:15:6c:fb:0d:78:30:91:dc:1b:18:bc:a6:2f:ba:7e:
b8:57:a0:24:33:b5:ac:fa:e7:a1:68:5a:f3:48:2d:90:08:e7:
ec:e6:c4:97:f3:77:d2:5c:9f:df:5c:ff:df:44:d9:52:b1:77:
6a:f2:27:04:3b:27:81:64:58:1e:ef:33:d3:66:95:38:fa:d4:
63:fc:b7:4d:20:5b:21:04:3e:2a:7b:09:02:55:e8:aa:a0:48:
c1:dd:9a:82:25:ef:e8:76:84:a3:ea:78:79:53:79:cf:58:f0:
2b:32:67:7e:e9:91:cb:50:d7:7e:b9:e0:b2:0d:a5:3d:a8:db:
d7:4a:dd:8c:a0:d5:46:47:25:16:43:07:f7:72:82:f8:86:cb:
a1:39:d4:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 10:59:42 2025 by rpki-client