Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0lVSiZYDe6DnHrN5hZJmXplAnUY.roa
File: 0lVSiZYDe6DnHrN5hZJmXplAnUY.roa (raw, json)
Hash identifier: JL2AVSdtT5bG7veeDJRnLx7ZY5PWcaVKmEN5E7tX4Co=
Subject key identifier: D2:55:52:89:96:03:7B:A0:E7:1E:B3:79:85:92:66:5E:99:40:9D:46
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188CDC3D81C78E59C2370383F34918EC229
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0lVSiZYDe6DnHrN5hZJmXplAnUY.roa
Signing time: Sun 18 Jun 2023 09:09:04 +0000
ROA not before: Sun 18 Jun 2023 09:09:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:cd:c3:d8:1c:78:e5:9c:23:70:38:3f:34:91:8e:c2:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 18 09:09:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d255528996037ba0e71eb3798592665e99409d46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:41:86:07:e2:6d:03:02:d4:bf:de:96:01:07:
5a:fc:2d:77:41:a4:74:05:42:f1:f6:3e:ee:48:ce:
b7:7c:61:7a:f0:49:93:a8:e0:2e:95:7b:b1:07:96:
1d:95:52:b0:11:93:6c:e8:20:42:b9:f8:75:d0:21:
95:2d:05:e8:56:e1:4a:04:2a:23:04:5c:9f:a6:32:
9b:af:11:d7:54:c6:6b:31:f5:2c:5e:a7:5b:7e:8e:
bd:0f:ec:bc:e7:db:fb:ff:3e:52:54:fa:70:84:9f:
b4:4a:bf:99:bc:3d:5d:6b:1b:be:85:8b:81:b8:f3:
46:9d:77:9d:9f:cc:ac:05:53:d7:75:e5:a9:89:99:
b8:b0:92:20:b1:a2:5f:59:4d:a4:fa:b2:db:65:f4:
91:d1:cd:69:00:06:ac:a0:5d:4f:12:27:3d:a6:50:
01:e2:7a:89:ef:b3:74:53:82:3e:25:4b:40:12:eb:
77:81:00:51:dc:a2:41:2c:8c:7a:bf:05:9d:9e:70:
1c:53:2b:00:48:07:76:92:56:4c:42:f4:9e:11:53:
ed:f1:56:c2:a0:3d:ad:cc:88:a3:8e:cf:84:22:3e:
cf:fb:a1:09:d6:8f:b4:1d:7b:a2:68:97:2b:9f:41:
b0:28:d1:50:67:b7:56:b9:7c:d5:1c:26:89:c2:ba:
cc:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:55:52:89:96:03:7B:A0:E7:1E:B3:79:85:92:66:5E:99:40:9D:46
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0lVSiZYDe6DnHrN5hZJmXplAnUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
27:50:fd:15:1e:4b:a4:97:fc:a7:83:29:ff:25:6f:7c:51:e2:
f3:68:70:15:3b:54:14:7a:d2:f3:b7:65:06:3f:0d:94:ec:56:
cf:5f:0e:c6:57:21:d2:92:78:3c:23:df:e1:6b:61:11:c7:2a:
c5:9c:80:93:5b:06:a0:f2:09:72:e6:90:81:68:35:92:9c:7b:
ce:36:c3:44:34:a4:ee:15:b8:d5:9b:be:59:b2:64:46:04:44:
89:9b:a8:44:ad:5a:ec:b3:a7:e4:d4:e6:21:97:84:55:b0:81:
47:d9:ff:db:30:06:58:bb:42:ee:04:36:2e:f9:36:3d:14:66:
94:1c:0c:a2:2d:34:25:6f:36:31:80:30:78:09:ff:1f:e1:00:
99:87:bd:52:b9:b8:26:fb:dd:2f:96:46:e5:e8:9b:68:df:cd:
08:e0:a9:8f:d8:70:b6:54:be:92:f4:43:2d:fb:e0:8a:4e:db:
e8:a8:48:25:4d:41:e9:0e:0a:e5:32:39:1f:97:a4:46:8a:ee:
6b:dd:95:29:e8:7b:a6:2d:d8:0c:09:a0:37:82:67:76:d6:5d:
e7:5c:05:4b:5f:83:a8:97:d7:31:bf:82:a2:30:e8:a9:e9:40:
a0:d7:10:ea:79:05:11:71:ea:58:f8:47:d8:a2:18:37:d6:3a:
e6:a8:5b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:21:50 2025 by rpki-client