Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/75UEPlwW8Yt7w7DVHIeOY2xkQoc.roa
File: 75UEPlwW8Yt7w7DVHIeOY2xkQoc.roa (raw, json)
Hash identifier: HF+OpK5f6DG/UIz4t1zAm+y/9Is45YzzNoOJk7qZwNY=
Subject key identifier: EF:95:04:3E:5C:16:F1:8B:7B:C3:B0:D5:1C:87:8E:63:6C:64:42:87
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01885419EB312C44514E34AD0A5E70648A85
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/75UEPlwW8Yt7w7DVHIeOY2xkQoc.roa
Signing time: Thu 25 May 2023 18:09:24 +0000
ROA not before: Thu 25 May 2023 18:09:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:54:19:eb:31:2c:44:51:4e:34:ad:0a:5e:70:64:8a:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 25 18:09:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef95043e5c16f18b7bc3b0d51c878e636c644287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ed:45:a4:92:a6:d6:05:70:a7:38:8e:92:21:
30:74:05:d4:66:32:a6:24:f2:03:24:5c:e5:53:08:
2c:03:51:06:78:a8:0f:ec:a0:56:a0:d8:a8:9a:17:
0d:f7:f4:f1:18:af:f4:f3:b0:44:12:6f:56:ce:3e:
7e:a4:ce:70:8a:44:d3:20:81:d4:0a:7c:8c:b6:43:
6b:79:de:cf:60:8b:cf:49:68:96:76:7a:d3:36:2c:
c1:7d:e9:ad:a5:e0:05:99:ea:91:ef:8f:6b:7c:59:
29:d4:c4:35:f5:35:79:1d:db:42:50:38:f8:fb:fc:
41:87:a5:9f:86:42:6b:b1:a8:93:fa:17:6d:44:45:
97:51:03:e3:b0:3a:e5:d0:07:fa:c3:cc:66:01:16:
d5:07:ab:ac:ec:d5:5f:ad:0b:5f:b8:75:39:6f:80:
41:17:96:2a:b6:c1:ff:59:e1:24:5d:b0:92:96:04:
99:4d:87:0e:2c:7c:be:16:a1:0b:78:8f:35:f5:3a:
cb:b2:35:9d:db:15:14:69:a3:dc:a7:ca:01:56:f7:
37:b0:ae:60:64:dd:96:a1:97:90:7d:f3:66:f9:57:
06:79:39:ed:26:35:ff:f8:20:2f:84:18:fd:f0:ae:
d0:e3:af:bf:2a:2c:00:69:cf:49:e5:24:83:f6:22:
6d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:95:04:3E:5C:16:F1:8B:7B:C3:B0:D5:1C:87:8E:63:6C:64:42:87
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/75UEPlwW8Yt7w7DVHIeOY2xkQoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
68:dc:5b:f8:a0:72:40:a1:9e:ba:26:c7:90:9b:7a:bf:ed:d5:
83:73:b1:73:fc:54:91:22:54:dd:f8:e2:66:7a:52:23:05:84:
01:46:02:75:72:da:3b:7a:20:d8:92:c6:5b:ba:49:58:56:c5:
c7:76:8d:20:a6:31:08:ec:97:f8:4c:a8:e8:cd:16:57:10:c1:
a5:da:71:01:6f:d1:5f:1e:73:ca:f5:5a:70:7d:c5:00:c2:cb:
3d:17:c4:59:5a:be:a2:70:33:e5:6b:12:2c:7d:19:87:50:5a:
36:89:76:79:e7:87:ec:1e:8a:fb:17:5c:a7:53:8f:36:97:c0:
45:57:fe:6c:26:72:b8:a3:84:4c:c5:84:84:40:c2:ca:f1:0f:
c1:9f:81:5c:47:65:96:a6:66:f5:c1:1a:29:ab:f9:3c:c9:12:
80:16:ad:31:1a:44:01:a2:6f:af:ed:83:66:a9:b0:b8:74:90:
03:e6:2e:83:32:2f:ca:4a:4f:5c:67:d3:b6:b6:e2:bb:fc:b2:
57:7f:cc:1c:96:82:45:67:21:32:36:8b:4b:22:0f:16:30:ea:
e2:8c:80:66:d2:68:23:1f:f5:10:44:db:9d:72:8a:76:a1:27:
cf:02:73:3c:1f:9b:24:d8:a2:b9:8d:7b:ac:b7:2f:5b:9f:e3:
9d:86:4c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 19:55:43 2025 by rpki-client