Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fv6i6mvXd1r-cgvuiFlJs1Xbd5g.roa
File: fv6i6mvXd1r-cgvuiFlJs1Xbd5g.roa (raw, json)
Hash identifier: Nm5CVj2VU/WAQRBcSKQ4txvYjarhPzC+B0vnX83JyPA=
Subject key identifier: 7E:FE:A2:EA:6B:D7:77:5A:FE:72:0B:EE:88:59:49:B3:55:DB:77:98
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182C46518FC0C038DBBC7F1F2FB640C0EF8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fv6i6mvXd1r-cgvuiFlJs1Xbd5g.roa
Signing time: Mon 22 Aug 2022 07:12:16 +0000
ROA not before: Mon 22 Aug 2022 07:12:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c4:65:18:fc:0c:03:8d:bb:c7:f1:f2:fb:64:0c:0e:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 22 07:12:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7efea2ea6bd7775afe720bee885949b355db7798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f4:0f:81:88:8d:42:44:99:a8:71:fe:1c:13:
35:ef:e6:46:4d:c9:78:7d:44:ca:a5:c3:02:d2:c6:
a9:3e:b1:52:c3:06:8d:e3:58:36:55:a9:a0:a7:a1:
4e:d8:bc:6f:e1:c3:9d:ce:98:49:7e:ee:46:50:70:
bb:44:c7:da:f5:01:81:5f:b1:4c:8a:7e:3f:b9:fa:
ca:3e:96:4e:2c:02:fc:fa:07:20:47:83:57:c4:7a:
98:e2:29:0f:db:96:d7:bc:b9:87:e2:3c:fd:40:6a:
be:a4:cb:63:3c:ad:96:fc:50:78:09:b9:86:aa:3c:
24:7c:65:1a:a7:8b:f7:e7:9a:26:89:e3:c0:b0:d3:
63:f7:c2:71:5a:57:22:f4:97:ad:05:25:36:67:04:
c5:64:e6:fa:3c:2c:c0:e9:27:34:d4:21:72:af:25:
2a:75:c1:02:0f:b7:ab:3e:28:0b:a4:34:15:c6:53:
89:d3:7f:87:cb:8e:22:e5:ac:96:06:5f:09:6a:9a:
3e:f6:63:cf:00:5b:21:18:00:21:10:0c:12:fb:7a:
a5:13:38:fa:15:74:d4:d4:b0:4d:6c:a2:5f:97:d4:
7d:eb:6e:d9:4f:ad:24:e4:da:68:07:11:2d:c0:69:
c9:53:79:26:f0:c4:5b:55:d2:29:ac:6e:c4:1e:de:
11:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:FE:A2:EA:6B:D7:77:5A:FE:72:0B:EE:88:59:49:B3:55:DB:77:98
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fv6i6mvXd1r-cgvuiFlJs1Xbd5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
80:31:32:30:2c:d4:12:55:9d:d7:2a:19:b4:49:d6:6d:e0:85:
67:fd:63:81:11:bd:5e:5c:ae:f9:ef:4f:e2:ca:7c:86:ca:dd:
e6:2f:55:4b:91:a6:34:b3:65:8d:66:d6:d4:50:46:f1:9e:09:
29:2b:f4:9e:1d:cc:55:71:dd:80:75:45:f6:e7:f4:c9:01:1f:
0c:cb:a4:1c:70:8a:0c:3f:7d:d3:6b:f9:30:2b:35:66:a2:e2:
e5:0f:b5:f8:79:cf:e8:36:b5:6d:30:cf:81:af:8d:a9:22:6e:
37:a4:ab:c2:d4:68:48:4f:ad:83:87:95:2e:dc:82:08:78:3c:
4c:b7:33:c7:f2:e7:ad:ba:38:18:b0:38:34:19:9b:ef:70:d9:
f8:62:82:20:6a:ad:0a:7f:f9:a6:9e:b3:9a:e5:d1:29:88:5d:
6d:97:9f:d9:67:1f:24:1b:76:da:e2:60:4c:d5:9e:70:1f:3a:
69:cb:ba:ac:9a:2d:25:d0:41:4d:92:27:2b:8c:fc:f2:b7:25:
ef:6f:47:a2:85:98:30:da:7f:a9:24:b0:78:f1:d3:4b:5f:78:
70:9f:2f:e0:78:84:7a:e5:42:07:7f:b4:9c:17:64:3c:54:f5:
72:77:fc:54:2b:0f:ee:98:ae:81:3b:4d:35:bf:f9:07:af:5e:
0d:57:78:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:13:24 2025 by rpki-client