Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ckZIHKCI6Jvj41rxfJVzKJBWR4g.roa
File: ckZIHKCI6Jvj41rxfJVzKJBWR4g.roa (raw, json)
Hash identifier: 5u4lMVrt03dGfMlYT3d9Aec1xKfSOuyLmVBRxH5Gmrs=
Subject key identifier: 72:46:48:1C:A0:88:E8:9B:E3:E3:5A:F1:7C:95:73:28:90:56:47:88
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7FF20719
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ckZIHKCI6Jvj41rxfJVzKJBWR4g.roa
Signing time: Sat 30 Apr 2022 18:10:37 +0000
ROA not before: Sat 30 Apr 2022 18:10:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2146567961 (0x7ff20719)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 30 18:10:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7246481ca088e89be3e35af17c95732890564788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:97:bd:e8:7c:eb:7f:00:cf:d3:00:f8:20:f7:
d7:e9:6c:69:4e:7d:f6:e8:14:1f:eb:65:fd:9a:cc:
d9:f8:0f:54:15:f7:e7:a3:d7:83:34:46:2c:96:f6:
0b:4c:6a:24:a8:18:b7:02:11:64:83:a1:3e:95:c0:
4e:cf:57:3e:29:de:c6:ba:ed:ac:16:4c:cf:b2:0b:
e9:3d:90:06:be:c9:55:f1:8a:4d:4e:35:78:f3:a3:
9e:ce:cd:ba:d0:d8:c7:df:6b:47:8a:01:dd:d7:dc:
1f:3f:59:f4:ce:d7:5f:1b:b7:39:68:5b:20:f0:9d:
12:34:9f:36:aa:4a:c9:7c:72:2c:85:ee:b6:eb:0f:
58:62:a0:57:bf:18:4f:eb:c3:b9:b7:da:21:48:71:
42:aa:bf:dd:80:1b:b5:63:89:a7:25:29:3b:a7:b9:
97:76:ec:8c:05:c6:0a:29:56:21:88:a2:c8:96:17:
42:16:13:0b:af:82:90:b5:7a:25:a7:71:1f:2f:94:
a5:ec:03:17:a7:70:1b:a5:56:ea:73:b1:f1:8c:34:
56:a9:03:db:80:50:01:ae:8a:ca:d4:10:d0:3a:b5:
da:b1:d6:ed:ba:81:1a:b3:1e:23:2a:a8:b4:54:ab:
2d:75:f1:b6:a2:a5:da:38:ad:23:71:d7:90:27:fb:
0d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:46:48:1C:A0:88:E8:9B:E3:E3:5A:F1:7C:95:73:28:90:56:47:88
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ckZIHKCI6Jvj41rxfJVzKJBWR4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9a:74:1f:26:88:3f:e8:5d:c1:87:0f:46:0a:82:2e:1b:8d:8c:
b5:7d:a5:45:f2:97:a4:5d:56:df:e4:e5:f5:ff:11:ec:ae:cc:
67:a1:d6:c1:56:ac:cb:e6:61:72:c8:5b:f9:bc:49:30:96:54:
c4:31:79:d3:d8:c7:79:a7:a1:08:fc:4d:16:96:a4:db:a9:22:
3e:c5:35:63:5b:22:df:c4:95:de:e8:37:76:f4:d7:b4:0f:69:
09:51:d2:3d:75:1e:ad:93:37:fe:e4:be:35:8a:7b:d7:fb:5d:
6b:64:c7:14:7b:8f:a3:71:dc:f5:5e:bc:75:34:cf:e7:15:9e:
f5:07:bd:e6:fd:d0:9c:d4:d9:6a:a0:07:81:33:6d:ce:69:18:
b0:b6:fd:f8:94:a7:94:34:c3:53:ea:e3:02:67:5b:db:88:b3:
75:93:77:a1:2c:05:5c:10:cc:4c:fc:42:20:7f:ca:5a:7e:3a:
fa:e9:da:e2:86:1c:f1:e3:a3:03:fa:0a:6a:86:69:f8:70:d3:
d5:82:89:32:91:52:b9:c2:01:4f:66:37:ff:80:1c:04:15:ed:
ea:72:11:75:ea:4f:19:a0:70:45:a4:da:9e:b6:eb:47:db:b9:
f6:98:86:37:cb:90:8f:de:be:9e:54:cf:8c:35:29:55:b7:a1:
ed:9f:ad:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 05:39:45 2025 by rpki-client