Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/10y2KeV1xVpSI2CiB1Z_RtulOeA.roa
File: 10y2KeV1xVpSI2CiB1Z_RtulOeA.roa (raw, json)
Hash identifier: L+O/dtXC65waPRg3ZpT61Ir7NCYuSnDNc0vdwyIZIOM=
Subject key identifier: D7:4C:B6:29:E5:75:C5:5A:52:23:60:A2:07:56:7F:46:DB:A5:39:E0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188085BBC59B44DB5FE09686CC71638C19F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/10y2KeV1xVpSI2CiB1Z_RtulOeA.roa
Signing time: Thu 11 May 2023 01:10:09 +0000
ROA not before: Thu 11 May 2023 01:10:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:08:5b:bc:59:b4:4d:b5:fe:09:68:6c:c7:16:38:c1:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 11 01:10:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d74cb629e575c55a522360a207567f46dba539e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:9b:09:ec:3d:6b:f3:57:70:23:45:60:5e:5a:
9d:bf:a8:17:36:b2:72:0e:00:0f:1f:30:5a:a1:31:
88:58:fa:98:c3:97:7b:34:e5:77:db:02:77:4f:07:
27:bb:78:db:62:2b:96:24:fe:10:a0:38:1c:5d:b8:
dd:a1:34:cc:96:71:10:4f:e3:3d:4d:28:58:5f:db:
86:1e:a4:a3:0c:61:ef:33:fd:ab:df:6e:3f:b2:06:
df:f2:b3:a7:94:ff:a0:4f:3f:87:87:0b:ba:88:88:
94:b4:94:32:c2:cc:3a:35:c6:d8:6f:4f:b9:0e:58:
a8:58:fa:52:d7:eb:94:32:e0:62:db:06:4b:35:c6:
1f:5a:a7:06:9c:08:e5:60:c4:04:2b:30:38:03:f1:
8c:a1:9b:42:05:9d:c4:b9:1d:4d:0f:8a:61:12:ce:
68:9b:c3:c9:c2:a8:6c:8b:27:5b:9b:31:fe:95:15:
28:6a:f7:08:95:ce:c7:fe:aa:1e:1f:0e:ed:6a:a6:
02:73:e7:47:28:d2:cb:63:12:ef:ad:ea:5c:4c:74:
29:85:fb:30:1f:58:d3:1a:36:69:48:95:14:34:a0:
78:5d:e9:3a:7c:c0:a7:6b:3a:fa:d3:d1:68:7c:55:
22:20:4f:0a:09:db:39:0c:b7:51:c9:11:82:c4:37:
e5:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:4C:B6:29:E5:75:C5:5A:52:23:60:A2:07:56:7F:46:DB:A5:39:E0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/10y2KeV1xVpSI2CiB1Z_RtulOeA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
35:dd:1e:1d:61:f9:09:4f:34:9e:a0:2d:28:1f:0a:0d:85:9f:
98:6d:1d:b5:74:61:a4:14:12:87:1e:d8:a1:e4:3a:99:ac:d3:
78:8e:01:8d:89:f7:81:7f:04:b3:a8:ee:f8:99:59:fa:0a:14:
88:3d:0a:88:03:c5:19:8f:49:ac:c5:fa:5e:16:9a:85:f6:c4:
d2:57:3a:1e:78:77:bc:d4:28:5c:6c:26:e4:70:16:ed:f7:1b:
97:ab:fa:09:65:7f:43:21:3e:96:fb:9f:b2:6e:48:83:76:3f:
12:74:cc:45:23:04:18:ca:5d:91:58:6e:1f:a3:4b:81:c5:6e:
3f:fc:3d:b4:89:82:5c:87:95:5a:42:f8:90:d6:0b:80:18:1d:
0d:55:21:11:a7:d4:df:7b:78:6f:36:1a:f4:9e:a6:eb:66:16:
66:6d:9d:1c:a5:68:03:82:e9:6c:35:a8:bc:f1:69:17:75:67:
d7:a0:d2:8e:82:b6:c3:9d:76:c3:d1:d7:9b:50:3b:97:ed:61:
cd:5f:4e:74:c6:6d:46:cb:18:4c:97:a1:79:38:4c:af:2d:4c:
e5:31:17:d9:b7:6d:f2:d7:3f:9a:fc:ed:4c:1b:9b:c0:cb:7a:
5c:72:91:14:11:54:19:1a:37:2b:1a:0a:f2:ee:f5:30:ad:99:
7b:ff:f1:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 11:59:13 2025 by rpki-client