Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/D8uuwJalUWQGyQFz_GswgolYXxs.roa
File: D8uuwJalUWQGyQFz_GswgolYXxs.roa (raw, json)
Hash identifier: xVQ8tqemzGHMeTahv5MfaHZIfGl+JB8Ax+aSbVQu3DU=
Subject key identifier: 0F:CB:AE:C0:96:A5:51:64:06:C9:01:73:FC:6B:30:82:89:58:5F:1B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187FB0D0EFB60B456AEB67FA2925D8D095B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/D8uuwJalUWQGyQFz_GswgolYXxs.roa
Signing time: Mon 08 May 2023 11:09:09 +0000
ROA not before: Mon 08 May 2023 11:09:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:fb:0d:0e:fb:60:b4:56:ae:b6:7f:a2:92:5d:8d:09:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 8 11:09:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0fcbaec096a5516406c90173fc6b308289585f1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4b:c5:10:94:16:84:53:29:b7:36:e1:66:16:
ab:91:5d:2b:05:06:29:1e:d3:21:41:18:2a:61:28:
e3:9f:9c:78:82:04:a2:0c:2e:9a:f3:0a:ca:b0:4d:
39:0c:d5:cb:f3:d0:4e:86:69:4b:c3:f9:e0:1c:e9:
28:f8:c9:36:5b:a7:20:a0:08:8c:f8:1b:96:c3:8e:
80:ac:f5:62:f4:6b:0d:1f:1f:38:d4:b2:2f:c3:87:
79:7a:cc:82:6d:24:19:8d:e8:89:46:ac:18:f7:28:
a7:8f:48:fc:87:75:12:bb:86:1f:07:b6:df:6e:a1:
35:09:21:91:39:66:2e:74:73:14:56:d0:67:6f:41:
99:e7:a0:d4:86:36:7f:9b:18:8c:09:60:62:e6:33:
5e:9d:64:69:5c:1d:30:32:e1:1f:1a:6f:c7:2a:2b:
52:4c:97:20:22:4c:7e:b6:9e:6e:3f:97:14:7e:84:
da:74:0c:bd:15:86:3b:9b:17:30:a7:82:a5:79:fb:
e4:70:f7:8d:e9:a5:3e:8a:c7:61:2e:37:9a:c3:39:
f8:6e:25:fe:57:26:13:3e:d0:fa:09:1a:cf:9b:ee:
47:b9:a5:b1:60:c1:28:c1:82:ee:2e:3a:36:aa:87:
17:5c:bf:6f:c0:7b:7c:b3:98:ff:45:67:71:80:e3:
5b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:CB:AE:C0:96:A5:51:64:06:C9:01:73:FC:6B:30:82:89:58:5F:1B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/D8uuwJalUWQGyQFz_GswgolYXxs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
91:f8:07:bc:5a:90:0d:16:51:fd:e5:7b:34:fc:52:6b:32:22:
2c:d8:8d:b3:db:a2:96:7f:36:af:0e:aa:a0:2b:09:6e:ca:1b:
f2:7a:7b:e4:de:67:9b:d5:b4:94:58:3a:d9:f1:87:dc:d3:d8:
c4:73:17:f3:04:60:89:25:77:d9:ea:ee:25:0f:e8:ce:2b:67:
db:ff:fd:ea:b1:11:7d:3d:1f:3d:e1:64:b7:a5:e6:59:6c:95:
ca:9b:aa:bf:e2:c3:35:ee:7f:f3:b9:08:66:2e:3b:94:71:04:
ce:fc:eb:af:fc:83:01:33:9b:75:c3:03:4d:f7:e2:d9:7e:cc:
cf:e0:36:87:cd:5d:50:71:1e:f0:05:75:5f:c1:a2:c0:66:96:
25:80:25:e7:4a:b7:74:29:c8:3b:08:01:ea:cd:bb:3a:c3:70:
54:9e:fa:cb:0d:d1:3d:6c:c3:d4:ea:34:26:8f:2c:66:a3:d2:
aa:a5:29:30:53:28:26:b9:b0:d4:f8:20:d0:64:e4:a5:22:20:
91:75:76:f7:0b:f1:5b:16:a8:ec:85:a5:22:54:63:e5:5c:2e:
ef:bd:fb:98:59:55:ce:42:30:09:dc:ad:eb:65:5a:db:47:54:
86:62:a3:b9:03:0c:9e:2f:83:22:8c:a4:d9:33:95:8d:6e:b5:
d6:ed:c3:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:27:34 2025 by rpki-client