Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/27frIwx-VvAfvwp5El3LQWisrWQ.roa
File: 27frIwx-VvAfvwp5El3LQWisrWQ.roa (raw, json)
Hash identifier: KxFQJp9942WlL7abuZMUlhHBuafBkOeourx0MaMZU6M=
Subject key identifier: DB:B7:EB:23:0C:7E:56:F0:1F:BF:0A:79:12:5D:CB:41:68:AC:AD:64
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188B99842C98DD3F0246671B81DBC0693E1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/27frIwx-VvAfvwp5El3LQWisrWQ.roa
Signing time: Wed 14 Jun 2023 11:09:03 +0000
ROA not before: Wed 14 Jun 2023 11:09:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b9:98:42:c9:8d:d3:f0:24:66:71:b8:1d:bc:06:93:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 14 11:09:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dbb7eb230c7e56f01fbf0a79125dcb4168acad64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7e:2d:5a:41:fb:12:51:fe:39:b5:80:5e:49:
3c:bc:b3:86:81:be:e6:44:34:dd:04:a0:06:9a:ce:
9d:5d:30:db:2c:f6:e4:0e:05:2d:88:29:df:bf:82:
f6:64:7a:02:f3:c8:d2:63:25:0a:17:55:b0:f6:a0:
e4:ac:4e:3c:d6:dd:ee:b8:20:8b:e6:14:ed:1f:f1:
76:0a:6f:bb:f3:25:74:78:a6:5d:7d:49:d0:a2:e2:
ee:92:0a:82:18:9e:37:81:73:77:50:d2:7a:95:f7:
bd:0f:2f:a0:24:4e:cc:78:85:73:e5:21:27:eb:fc:
32:95:df:7c:2a:99:9e:c8:84:da:ae:38:d5:94:ae:
65:d6:a5:80:2b:fb:a9:b4:99:7f:c1:9b:a8:33:9c:
f1:b3:87:2c:4f:e9:9a:f5:6f:e0:e9:33:90:eb:01:
5d:3d:b6:83:cd:a4:1b:70:74:d9:23:93:26:7c:b2:
f5:b8:2c:bb:7b:ed:55:5f:07:6f:bc:bf:18:26:fd:
ff:ae:d8:83:43:02:c3:ab:7d:59:aa:c5:c3:d8:8f:
d9:29:f0:aa:49:14:d7:57:7d:bd:f3:9f:2a:8f:c0:
a1:ed:0e:1e:18:62:f7:fa:26:97:e2:72:8f:6e:09:
37:c9:f0:d1:ca:3e:b4:b2:20:17:3a:a4:d2:fd:00:
e2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:B7:EB:23:0C:7E:56:F0:1F:BF:0A:79:12:5D:CB:41:68:AC:AD:64
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/27frIwx-VvAfvwp5El3LQWisrWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
af:c3:5d:c3:fa:c1:ff:df:2d:a7:9f:fa:75:d4:a2:83:e9:a7:
04:6b:73:96:2e:dd:80:dd:8c:43:44:82:76:22:76:36:2b:a4:
47:4f:db:ba:d2:38:e4:85:61:e4:a4:bb:9f:64:e1:a9:18:e7:
6f:04:7d:39:12:0b:bd:ef:32:9e:6b:7d:3b:f6:7f:77:ec:3a:
d8:14:89:6a:a4:16:9e:a9:cc:60:e6:4f:68:da:06:54:76:dd:
7f:68:d0:50:ef:91:ad:9f:fa:e0:d6:69:ef:9d:35:60:e4:58:
55:75:e2:f5:6d:5a:c2:65:43:be:fe:e0:a0:26:5c:0a:36:e6:
b8:fe:40:be:98:1c:3f:da:b1:87:2f:2e:4e:16:d7:d1:24:d6:
5a:79:54:d4:8a:0f:c9:70:e0:a6:ae:9f:d5:8d:a9:1e:2d:3b:
64:03:61:00:55:bf:af:41:ea:af:01:d4:5c:55:4c:1b:db:9d:
f6:51:ac:d3:c5:79:fe:a9:b9:88:d7:3a:a2:71:c9:63:b3:69:
f4:b6:a4:ed:38:db:da:6d:fa:6e:e5:13:c6:1a:70:a9:1d:87:
92:70:98:3f:15:89:44:54:6a:33:e6:78:d0:9e:49:9b:48:46:
0c:f9:b2:d9:b9:f1:8c:45:bd:dd:35:16:39:fd:ca:7e:7a:17:
62:1b:fa:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 04:19:29 2025 by rpki-client