Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cknfQ6uUQUn3GkxH4_FZkjKuR6A.roa
File: cknfQ6uUQUn3GkxH4_FZkjKuR6A.roa (raw, json)
Hash identifier: dNCJgmH1oICrjBhE58RuP09g2kMs5Al9g9Ephn+lXR0=
Subject key identifier: 72:49:DF:43:AB:94:41:49:F7:1A:4C:47:E3:F1:59:92:32:AE:47:A0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01889D78AFAE05DECF05DE6AA96EA70B508B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cknfQ6uUQUn3GkxH4_FZkjKuR6A.roa
Signing time: Fri 09 Jun 2023 00:05:12 +0000
ROA not before: Fri 09 Jun 2023 00:05:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:188:9d77:fc46/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9d:78:af:ae:05:de:cf:05:de:6a:a9:6e:a7:0b:50:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 9 00:05:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7249df43ab944149f71a4c47e3f1599232ae47a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:83:ad:64:e8:0f:e9:24:c3:06:e9:7f:b3:7c:
d5:41:3b:79:da:76:e7:ee:ab:da:99:80:7b:e7:ec:
04:60:41:b5:d9:de:33:73:11:0c:5f:f6:d9:d6:50:
56:1b:0f:8b:c7:d0:c0:ce:c8:d2:59:48:d6:fe:0e:
f6:93:8b:e4:d8:85:c0:90:43:ff:91:42:d7:0b:1c:
d0:6d:53:8b:45:a9:a5:16:bd:7e:1c:fc:d9:ae:8d:
88:51:af:0c:6d:d8:ae:88:b4:87:47:c6:11:50:bb:
5d:5b:e7:6a:d9:42:76:8c:ca:99:e6:b0:16:e7:b9:
78:27:2f:eb:93:af:9f:21:e8:7d:22:ad:f3:b9:a4:
e2:05:39:fd:3d:a1:12:5e:08:c4:d9:1e:00:60:e0:
d7:8a:fe:c1:3e:9f:02:b9:00:37:0d:f4:7d:7f:6e:
b8:d2:66:c4:23:2b:5d:18:7a:01:24:ea:09:e7:e0:
e9:ac:17:9a:0a:38:37:f0:3a:8d:8b:ad:bd:bf:2e:
56:f3:ea:ac:bf:2a:ec:13:f2:ba:fb:47:14:a6:89:
ff:cb:a4:42:d3:2f:9d:76:9f:a1:55:16:b0:4d:15:
ef:ed:f4:5f:45:ad:ee:41:e8:c7:ea:26:73:c9:ed:
25:3b:37:6d:58:60:27:4e:05:77:0e:b5:b5:80:8b:
0e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:49:DF:43:AB:94:41:49:F7:1A:4C:47:E3:F1:59:92:32:AE:47:A0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cknfQ6uUQUn3GkxH4_FZkjKuR6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
96:08:46:b3:05:ce:5d:b7:b7:7b:89:f4:d6:b1:8b:aa:85:56:
3f:18:ed:71:78:c1:00:2c:c2:d6:fb:35:72:c5:da:c6:fc:97:
db:94:fa:70:94:6b:9e:bb:87:72:c6:3e:34:36:73:55:55:e5:
d1:02:4e:0b:1d:a9:e6:a1:21:f9:4c:ce:1f:fe:33:84:19:e7:
af:82:67:aa:a6:28:d3:06:e6:09:33:b2:b3:a9:9a:dd:c4:d1:
39:ea:76:be:f9:53:95:04:4d:00:18:1f:23:f9:a4:69:c6:22:
e9:df:18:32:68:41:e8:ff:2b:4b:2f:7e:9c:c8:6d:87:b8:84:
8f:62:ee:16:a9:1e:b9:01:02:04:fc:81:7d:4a:93:6d:42:7a:
25:ae:6f:0b:ce:6f:64:3a:d5:9c:ff:81:16:7a:7a:8c:42:b5:
3d:55:df:86:47:a6:5e:a0:34:dc:4a:c3:56:e0:6a:bb:7b:99:
1a:9d:f7:0c:5b:d9:2a:45:b7:c3:55:7a:c0:60:3b:38:96:16:
c8:4b:52:f8:43:66:36:32:9f:4f:4c:78:d2:8e:b3:41:e6:96:
af:eb:36:55:90:f3:5b:db:e5:4e:3d:66:05:3b:28:6f:b1:9b:
36:54:0f:47:cb:a3:7d:f3:63:b9:8c:09:d1:47:b1:c9:a0:be:
62:00:49:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:14:32 2025 by rpki-client