Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ckMfTUowZEsnbhH0H7g4RmMmXzE.roa
File: ckMfTUowZEsnbhH0H7g4RmMmXzE.roa (raw, json)
Hash identifier: ZxZlV1N40WgfTHKI4fcGXKA8dVbKY8PAUfGGmfCK+rw=
Subject key identifier: 72:43:1F:4D:4A:30:64:4B:27:6E:11:F4:1F:B8:38:46:63:26:5F:31
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018275376E7AA99BA66AB425F5B3F22F11D4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ckMfTUowZEsnbhH0H7g4RmMmXzE.roa
Signing time: Sat 06 Aug 2022 22:12:23 +0000
ROA not before: Sat 06 Aug 2022 22:12:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:75:37:6e:7a:a9:9b:a6:6a:b4:25:f5:b3:f2:2f:11:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 6 22:12:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=72431f4d4a30644b276e11f41fb8384663265f31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d8:62:30:5f:c4:2d:22:88:7e:62:d9:37:e3:
88:84:fc:d5:d3:43:01:2a:4d:3c:a1:af:8b:f3:6e:
e0:47:7e:95:60:ef:66:98:0d:da:cc:24:8e:08:d5:
60:14:e2:df:9b:23:b0:86:77:ab:2f:26:1a:39:fe:
2e:7c:4b:e9:b7:d0:5c:5e:eb:81:48:e9:71:ff:26:
1b:13:0d:58:39:ca:1b:de:6f:a9:a3:d1:d8:29:38:
30:e4:0d:08:25:f6:8a:d3:13:74:23:20:92:74:da:
c1:ad:9c:0e:2d:c4:83:7c:38:7a:67:bf:5a:70:10:
7d:47:00:fb:65:d1:fb:1e:6e:ae:f7:38:60:ea:5a:
3a:74:11:f5:a8:b5:51:9e:03:48:0f:e8:4c:20:83:
43:7f:6b:57:51:ab:31:37:ee:67:f0:14:ab:44:23:
dc:2f:c1:08:f1:f1:73:2f:26:5a:c2:7d:53:98:a4:
4b:04:de:01:8b:c1:9d:ce:81:ac:39:b9:a1:ae:c5:
60:01:6c:ff:b3:cb:c4:82:62:bd:86:b4:3d:18:16:
10:04:c2:5a:6c:c7:31:e3:0b:1c:52:97:57:4c:b0:
1d:1e:81:f1:57:be:fb:79:93:65:2a:33:3f:5b:d8:
7b:a0:0f:18:64:09:d1:16:43:50:da:ac:0d:a6:f8:
cc:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:43:1F:4D:4A:30:64:4B:27:6E:11:F4:1F:B8:38:46:63:26:5F:31
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ckMfTUowZEsnbhH0H7g4RmMmXzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8c:2c:99:0d:e0:63:36:4b:2c:46:79:c1:5f:93:22:9a:6b:3d:
66:f8:5b:6f:5e:62:a8:eb:ab:ea:34:5f:50:3c:9c:99:84:37:
c0:f1:e8:73:16:1a:ff:a9:5e:fd:df:2a:df:f9:79:7d:7e:32:
ab:2c:21:c9:8c:fe:34:e2:4a:32:be:db:62:b3:12:59:53:af:
24:03:c0:68:49:8e:97:26:0f:cb:5a:c5:a3:20:a2:7a:a7:82:
3f:83:cf:3b:b1:6a:2b:14:c5:29:2b:65:57:67:fa:6c:b7:b3:
97:be:8d:7e:b0:f3:b7:fa:f2:bb:ec:a5:4f:c9:83:e9:9f:90:
4a:6b:08:f6:04:68:3a:03:d7:0b:4f:78:31:82:20:e6:7a:df:
bb:80:1d:d2:49:c1:7a:70:56:a1:09:e0:98:98:ff:b6:73:2c:
68:d2:f7:3c:98:e9:96:45:ef:e2:93:5e:b5:ea:0f:0d:dc:40:
a8:22:f8:d5:1d:8c:3d:78:7a:bb:3f:a3:bb:18:b8:aa:6e:e5:
6e:63:46:60:38:28:f7:62:3f:0c:dc:d8:1a:c2:dc:f3:ec:9b:
02:e7:df:62:0d:4b:40:c4:4c:2b:3d:13:74:6b:2d:d0:64:6e:
ed:66:3f:e1:82:c5:72:05:cb:39:2a:b3:98:bc:16:ec:a7:91:
1e:04:59:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:00:22 2025 by rpki-client