Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2Fkif4Ff84vLaBgETmon2W7dFFA.roa
File: 2Fkif4Ff84vLaBgETmon2W7dFFA.roa (raw, json)
Hash identifier: Tdafl5xONEWPkcYDuPA0Eiv9g3ElL316xBn1+Mf6OFY=
Subject key identifier: D8:59:22:7F:81:5F:F3:8B:CB:68:18:04:4E:6A:27:D9:6E:DD:14:50
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188A31091B4887F71BEC709E0B26EF0C7C8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2Fkif4Ff84vLaBgETmon2W7dFFA.roa
Signing time: Sat 10 Jun 2023 02:09:12 +0000
ROA not before: Sat 10 Jun 2023 02:09:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:a3:10:91:b4:88:7f:71:be:c7:09:e0:b2:6e:f0:c7:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 10 02:09:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d859227f815ff38bcb6818044e6a27d96edd1450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:78:c2:e3:01:8e:27:55:8a:48:cc:12:10:02:
65:80:d1:0a:61:95:22:5c:5f:6c:ca:6b:0c:e8:08:
29:d1:26:5b:2f:33:5f:4b:55:10:02:74:60:a3:c5:
54:0c:be:70:42:c0:b2:17:fc:4a:44:75:c7:c0:2c:
05:da:ba:02:ff:ee:b1:4e:a6:94:af:c6:25:6a:9d:
84:dc:0c:6d:fc:7b:b6:54:81:81:8a:23:1c:57:99:
28:b1:8e:0d:0d:40:9f:d1:28:6c:f3:a4:49:54:da:
f0:6d:72:78:fa:d0:11:50:84:76:ef:1e:75:b9:f8:
c3:71:6c:fe:ad:91:ec:52:2c:e8:11:8a:5a:9b:f3:
83:8e:b3:9b:af:f3:73:82:e7:9d:c9:54:a2:35:0f:
00:d0:5f:5b:ca:fd:8f:b7:af:89:ed:d4:e4:cc:b2:
33:c8:2d:9a:3c:f7:a6:ac:70:0f:6f:65:6c:7c:aa:
4c:fc:72:49:5e:45:a2:38:7b:0f:38:6c:fb:44:32:
0c:80:55:d4:7a:4a:73:db:f3:dc:9b:51:5e:03:f6:
ac:43:01:c0:67:19:01:0c:8a:93:63:e4:96:e1:07:
1b:04:9f:ec:f1:91:52:bb:5b:4c:fc:cc:64:8b:c6:
6d:06:b8:f4:9b:f8:38:fe:cd:87:a5:06:7c:5a:83:
98:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:59:22:7F:81:5F:F3:8B:CB:68:18:04:4E:6A:27:D9:6E:DD:14:50
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2Fkif4Ff84vLaBgETmon2W7dFFA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
56:76:04:29:cd:b2:13:f3:0c:90:00:e3:e0:fb:11:89:f6:48:
34:cd:c8:ff:cf:2d:a8:08:f3:ae:4a:26:16:b7:95:02:7c:3a:
e3:a2:f8:25:ce:e8:7f:87:bb:f0:04:86:ff:84:aa:6b:b0:93:
b0:27:31:d0:63:ff:02:43:ec:31:5a:fe:fa:1d:bd:33:3f:77:
1e:e0:de:ba:bc:e0:3d:2d:6b:15:e9:06:40:9f:47:e2:da:cd:
fb:1a:0b:15:3c:95:54:52:88:46:f9:c7:c6:67:7c:5a:a4:d1:
cd:53:d6:48:6f:3b:b7:10:09:98:77:c9:c1:10:19:50:33:2d:
8c:ee:1b:b4:66:02:fb:f0:b9:ef:05:b4:5c:fb:1f:12:5f:88:
09:31:d9:3c:8a:fe:2a:3a:10:c7:5c:03:60:77:47:01:1c:07:
e1:83:c2:28:f8:88:bc:d2:2e:7d:74:4b:da:bc:30:46:a8:8b:
50:3d:4f:e4:d9:9f:9a:d0:24:52:70:88:30:9e:12:cc:dc:ea:
43:4c:bb:24:a6:4f:cf:33:3a:41:c6:28:85:32:3e:27:ca:94:
56:5e:c5:aa:99:fc:fb:c7:16:49:ad:fd:9d:cd:9b:5b:31:e7:
dd:25:64:ea:c1:1a:0f:1e:94:ff:2a:35:d2:58:e1:52:23:30:
39:ac:9c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:26:08 2025 by rpki-client