Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xAhcabBvAQacU2yG5ZtHMGxWFWA.roa
File: xAhcabBvAQacU2yG5ZtHMGxWFWA.roa (raw, json)
Hash identifier: QRJwDuckoS/LMwCkM2JBR84s5BYGchjSWL1YNuD2QtI=
Subject key identifier: C4:08:5C:69:B0:6F:01:06:9C:53:6C:86:E5:9B:47:30:6C:56:15:60
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 701B886F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xAhcabBvAQacU2yG5ZtHMGxWFWA.roa
Signing time: Sun 06 Mar 2022 04:12:34 +0000
ROA not before: Sun 06 Mar 2022 04:12:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1880852591 (0x701b886f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 6 04:12:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c4085c69b06f01069c536c86e59b47306c561560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:dc:36:3e:e4:65:78:97:7c:4a:7f:1c:d7:03:
68:61:ce:69:f2:88:b2:32:53:42:7b:fb:87:e4:b2:
49:7d:a9:8f:73:c4:f8:ac:ca:22:c7:4b:21:24:26:
97:fa:80:b6:d5:8b:d0:f0:c9:9e:4e:1c:bd:71:e5:
ae:3b:92:8a:a8:dc:e7:fa:b3:c2:0f:ed:ed:a4:a9:
81:1c:2c:5f:25:99:7e:02:d8:ca:63:c8:3f:7e:1a:
81:ab:9d:bf:80:8b:7e:29:dd:89:08:81:cb:c1:4a:
2d:4d:b6:c7:6a:21:fc:db:94:e5:01:12:8d:74:dd:
1d:d3:36:d2:fc:35:39:7f:fd:33:bc:a3:49:5a:ea:
1c:b9:df:da:5d:93:18:91:e5:29:3e:f3:4a:ea:f1:
e4:f1:7b:d4:29:d0:12:b2:67:ba:6a:f6:4b:bd:d4:
51:3a:d3:7c:ed:1a:95:c2:f7:88:ba:10:b3:f2:32:
6b:a2:b6:81:f0:e6:13:a5:0f:47:7e:bf:f4:e3:ad:
34:af:de:dc:b1:3b:90:c6:99:b4:da:df:1d:94:6c:
66:75:e9:98:4e:80:fc:f3:58:17:15:16:b9:38:2e:
3a:eb:ac:3d:1d:22:a0:30:de:30:55:b5:e5:b2:2a:
6a:17:eb:a8:69:e4:b1:c7:d5:86:e6:47:19:ef:c6:
0c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:08:5C:69:B0:6F:01:06:9C:53:6C:86:E5:9B:47:30:6C:56:15:60
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xAhcabBvAQacU2yG5ZtHMGxWFWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3b:70:50:e7:67:0c:7f:4e:46:79:35:1b:d3:60:04:14:dc:f2:
2e:80:d9:a3:e7:2d:d0:3c:f2:90:e6:7b:d1:24:23:0d:d6:0b:
69:0e:d0:d7:ad:8e:82:99:6c:09:be:ab:f0:80:ec:c7:84:18:
89:d6:6a:7f:98:4b:26:b5:c4:8b:e7:0a:e8:ba:b7:7b:c7:42:
4c:d5:c1:bf:b9:5d:7f:a7:91:38:22:b3:93:25:e5:3c:f4:fc:
4b:39:01:8d:34:f4:97:70:3c:fb:38:fe:43:27:ff:45:bc:8b:
a7:18:36:41:c4:43:4b:8b:ff:d7:de:18:f6:de:6e:db:a5:ca:
74:12:78:23:6e:33:13:df:1b:47:38:e1:00:8f:07:f3:f3:9b:
fa:75:e7:24:51:c2:ec:be:44:f6:98:43:ff:03:88:0c:4d:ca:
73:9e:d6:9d:a5:d2:32:44:3f:0b:5a:8e:f0:6f:00:ee:39:23:
65:24:6d:81:d8:49:ba:1d:0d:e9:8d:e9:7f:05:e9:17:b3:1a:
1a:ac:d5:86:59:08:f0:9b:41:40:a3:25:47:c4:5d:1c:17:1f:
33:f4:5c:60:7a:f1:b1:f8:c2:7b:5b:f1:4f:5c:0f:90:44:21:
ae:c3:86:f1:0e:b7:8a:62:3d:40:1b:59:b0:eb:bb:c0:ff:ac:
9a:fd:c1:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 07:34:04 2025 by rpki-client