Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1VwpiZj1S6doz4iQelEP4wUwoDs.roa
File: 1VwpiZj1S6doz4iQelEP4wUwoDs.roa (raw, json)
Hash identifier: AC/GxWPpHiZJPSsg29ek8lCb+3AQ0iqCS+aB00vESdY=
Subject key identifier: D5:5C:29:89:98:F5:4B:A7:68:CF:88:90:7A:51:0F:E3:05:30:A0:3B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01885A52F14ECBB4E3E73A80708E113AB897
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1VwpiZj1S6doz4iQelEP4wUwoDs.roa
Signing time: Fri 26 May 2023 23:09:25 +0000
ROA not before: Fri 26 May 2023 23:09:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:5a:52:f1:4e:cb:b4:e3:e7:3a:80:70:8e:11:3a:b8:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 26 23:09:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d55c298998f54ba768cf88907a510fe30530a03b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:35:14:5b:a2:f4:0e:46:f8:39:59:81:d3:e2:
b8:9a:0a:39:f0:08:9d:25:c1:48:f1:a5:13:3f:a9:
ca:f4:1f:33:c0:68:ff:02:1b:98:8a:54:e9:24:c9:
4e:50:a3:48:9d:10:f3:b6:03:00:57:f9:6c:87:fd:
92:0b:09:5c:e5:d9:3a:b9:8e:74:3c:4d:cf:d4:6b:
ee:ca:b8:e3:2b:6e:a2:da:7d:9d:1f:b5:d6:ca:de:
d1:bb:8b:06:f3:34:a4:aa:b1:cb:f1:2e:63:73:6a:
df:6a:ff:10:fa:f9:83:b1:3b:7d:d3:d6:3c:8a:77:
3b:34:37:a9:d7:a4:b0:c7:c3:d1:f8:2e:95:3d:d6:
18:59:4d:b3:b6:12:1f:c1:e6:e1:18:3a:c5:39:14:
d1:d0:fe:4e:76:c4:ac:61:16:76:67:3e:f9:f0:8c:
fe:2d:97:8f:59:6b:e6:85:c1:19:12:e2:94:72:99:
43:e9:c2:2d:bf:9c:01:a6:d8:6a:e5:8a:83:c0:ef:
d1:52:14:73:8d:0d:0f:4c:c5:9c:1f:d1:0c:a7:83:
b8:8f:a2:55:5b:21:71:35:f2:cc:fd:b3:ac:87:6f:
b4:11:47:7a:98:c0:7d:60:3c:67:47:3d:7e:fd:87:
90:49:fe:ad:43:69:fc:dd:b9:6c:04:fd:9b:9f:d2:
04:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:5C:29:89:98:F5:4B:A7:68:CF:88:90:7A:51:0F:E3:05:30:A0:3B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1VwpiZj1S6doz4iQelEP4wUwoDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1c:af:cf:13:c5:9a:85:3a:18:46:7c:e6:1c:64:aa:e6:e0:d0:
56:57:dc:34:18:0d:df:c0:64:46:f1:de:a8:d7:f4:45:95:b9:
0e:b3:ea:c0:00:d6:fd:ac:f9:c4:e2:2d:51:33:5c:dd:3b:0a:
81:22:85:f3:76:9f:ad:34:d1:50:73:06:ee:6e:79:10:fe:5e:
53:26:42:72:18:af:4e:18:1e:00:dc:80:fb:5d:cd:01:56:c3:
ba:3c:3a:29:60:13:c7:84:00:d4:f4:7f:4f:68:2b:b5:49:3d:
9f:e1:79:01:8a:47:1d:78:0c:9e:d3:cc:3f:d0:03:c7:48:43:
0e:b4:cc:6f:7c:1c:3d:5d:4d:16:cc:c6:79:3b:7e:9e:a5:af:
19:a2:a6:d0:c3:7d:1e:df:27:cd:2b:dd:da:3d:db:0c:9d:6b:
21:ac:82:b1:4f:45:b4:38:3e:b8:4a:18:58:30:d0:b7:96:33:
90:e0:77:8d:43:e5:dc:8b:24:99:e5:68:c7:2e:84:18:70:39:
7c:fe:3c:3b:90:f6:38:d2:fe:64:26:56:e8:95:81:be:18:8b:
df:cd:20:41:aa:18:55:dc:aa:84:78:60:31:28:fa:4b:9c:a1:
f3:5d:87:d6:42:fe:ed:67:b0:62:4f:5e:67:5b:03:3c:a5:e5:
f4:a9:b1:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 22:49:13 2025 by rpki-client