Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cpe6ArEfam3eDLkFfAKHHAFS5nU.roa
File: cpe6ArEfam3eDLkFfAKHHAFS5nU.roa (raw, json)
Hash identifier: hCHb5NZijTKrarWuiv9lJjAoQZiIfVkapBwgJ2PHj68=
Subject key identifier: 72:97:BA:02:B1:1F:6A:6D:DE:0C:B9:05:7C:02:87:1C:01:52:E6:75
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182610F84E8EA3CFB4DF5F5AB00123A48E8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cpe6ArEfam3eDLkFfAKHHAFS5nU.roa
Signing time: Wed 03 Aug 2022 00:16:23 +0000
ROA not before: Wed 03 Aug 2022 00:16:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:61:0f:84:e8:ea:3c:fb:4d:f5:f5:ab:00:12:3a:48:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 3 00:16:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7297ba02b11f6a6dde0cb9057c02871c0152e675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a0:99:eb:35:28:2a:6e:00:ea:62:65:5f:fb:
b1:9d:6d:c3:b1:f1:79:3d:d0:2f:dc:b0:fc:9a:4d:
69:aa:34:71:89:2e:d6:2e:8b:a0:74:b2:b6:ae:fc:
90:37:fe:07:81:a5:fc:cd:c8:b2:f1:6a:b7:c2:1c:
b1:d2:20:cc:07:b5:8d:46:11:f9:84:6e:e9:5f:c0:
12:4a:ea:a6:a0:0e:a4:79:f6:77:71:ed:21:57:94:
df:7c:05:93:ad:20:0a:29:11:4f:e4:c7:99:92:9b:
34:e6:1d:48:68:3c:5e:90:b1:d1:94:13:94:a3:80:
f8:d8:2b:b9:89:ce:0c:c8:2e:91:ea:30:05:a2:6f:
ff:35:24:f8:ef:53:03:16:de:d8:7e:5e:af:ef:52:
52:1b:82:86:22:51:52:00:0f:ee:81:32:3c:ff:82:
17:fe:eb:31:c8:8e:b9:7d:05:d0:7d:50:85:bb:59:
be:f7:b2:bd:c4:6e:7c:f4:6b:dc:6e:30:55:48:2e:
91:48:92:49:75:3d:3b:8c:fa:d8:d7:1c:22:e7:a1:
a2:d7:76:27:a7:eb:9a:63:16:38:8e:3b:c4:ad:8a:
58:6b:be:b0:4e:a5:85:d9:50:c9:0e:2a:e0:bf:f3:
d1:26:92:d7:30:c9:ed:1d:2a:89:9d:ad:29:ed:31:
1b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:97:BA:02:B1:1F:6A:6D:DE:0C:B9:05:7C:02:87:1C:01:52:E6:75
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cpe6ArEfam3eDLkFfAKHHAFS5nU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
15:49:dd:7c:18:79:bd:94:01:f8:cc:e4:f0:0b:e4:7c:df:65:
42:60:cc:80:94:d1:77:51:0a:b0:e1:c3:3c:69:dc:94:c1:aa:
5f:32:84:2b:10:00:9b:13:a8:48:94:43:cd:29:d0:5f:ad:55:
61:c8:0f:3b:fa:13:83:ba:7a:54:a5:6c:9c:b9:7e:30:2e:92:
ae:a6:01:9c:2d:ac:6e:5c:01:9e:f3:62:6c:03:0c:94:ff:98:
c9:a9:44:74:d3:2c:40:9c:e3:08:77:c6:0d:5f:fb:2b:ea:cf:
c7:65:4f:a7:dd:b4:89:9f:c0:1e:47:a4:fb:4d:87:bf:81:00:
27:b2:86:59:3e:da:1c:5f:cf:e9:e3:a2:15:fc:a6:c5:44:70:
78:0c:26:0f:7b:f3:3b:3e:48:3b:64:ae:0d:c2:ea:85:20:be:
ed:f6:22:a0:6c:8c:c2:0d:09:7a:4c:3b:1c:4f:af:22:c2:fe:
17:84:30:a1:47:1b:2d:d8:65:a8:84:33:5a:1e:76:5c:ab:ce:
7f:f5:2e:bc:bf:5c:3f:ed:0a:bb:a4:dc:48:aa:42:2c:14:a6:
2d:32:1a:bc:20:6b:3c:a8:82:f1:5c:c9:19:5b:7b:0e:35:52:
6c:94:26:a0:20:b5:df:65:37:cd:cb:b6:38:31:19:87:a3:8c:
99:c1:06:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:57:42 2025 by rpki-client