Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IFnOogsh6jUmqwkAj71ckTU-Fd8.roa
File: IFnOogsh6jUmqwkAj71ckTU-Fd8.roa (raw, json)
Hash identifier: +vaqXX2FKNphB691IYoilunltXwS65eYJBv9FAR+hXc=
Subject key identifier: 20:59:CE:A2:0B:21:EA:35:26:AB:09:00:8F:BD:5C:91:35:3E:15:DF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01889DE68C46DBA78CDF714F13A52715DD36
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IFnOogsh6jUmqwkAj71ckTU-Fd8.roa
Signing time: Fri 09 Jun 2023 02:05:12 +0000
ROA not before: Fri 09 Jun 2023 02:05:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:188:9de5:cbf1/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9d:e6:8c:46:db:a7:8c:df:71:4f:13:a5:27:15:dd:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 9 02:05:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2059cea20b21ea3526ab09008fbd5c91353e15df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:92:b6:a3:12:2c:21:7a:25:ed:9b:ca:c9:ad:
f2:a2:94:b4:21:40:75:dd:04:81:3a:92:91:e5:b7:
a4:c7:37:78:3c:5a:07:46:fd:66:88:ff:93:81:86:
15:96:f1:6d:be:2c:02:f0:7d:98:4a:d0:27:cb:71:
a4:bd:1f:d3:95:93:10:05:6e:91:10:6b:59:13:03:
ab:35:d2:3c:32:73:da:75:23:70:61:5c:23:43:33:
79:39:8b:07:8f:45:65:42:24:25:b0:27:8f:49:ce:
e5:33:1a:44:d6:21:42:43:0a:b2:51:31:bd:3f:6a:
0a:76:f4:19:fc:71:58:31:cf:ea:1b:d1:53:c8:e2:
98:12:9c:1b:26:1d:80:7c:55:5d:78:c4:cf:29:9a:
fc:e5:0a:69:ad:59:2d:48:36:1a:57:61:a0:2a:61:
56:82:ce:ce:47:af:85:ac:d5:e3:30:ae:68:5b:ed:
e6:9e:55:f2:c1:69:17:29:80:0d:f5:e6:86:3f:05:
83:c5:2c:f0:22:01:15:78:af:cb:a3:e6:9f:6b:c3:
05:65:c4:eb:ee:c6:ad:21:af:61:7a:ea:93:45:be:
62:a7:c2:01:e4:44:87:ef:34:ad:c3:4a:e1:78:cf:
5f:a9:2e:8d:cd:03:9f:17:36:d8:be:10:c7:b7:10:
5f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:59:CE:A2:0B:21:EA:35:26:AB:09:00:8F:BD:5C:91:35:3E:15:DF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IFnOogsh6jUmqwkAj71ckTU-Fd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
09:c3:58:2d:44:6e:d9:c8:19:27:04:d4:cc:cc:b2:d6:5f:32:
7b:e9:eb:3b:35:f3:28:4b:d6:fd:ee:8a:da:31:2a:15:f4:d1:
37:d5:31:e2:78:5d:37:c9:63:08:df:50:bb:06:76:93:84:87:
60:56:ba:fd:81:bd:19:91:c5:66:b7:72:b2:74:00:9a:64:b7:
99:e1:f3:a7:b8:50:2c:3c:e7:6f:12:e9:8e:df:c0:db:28:49:
e7:38:1d:5b:a8:77:f0:c5:73:b8:e5:fa:42:b9:4b:73:de:fb:
ee:08:1d:d7:9d:f3:bf:f5:27:ec:c9:59:6d:7c:a8:c3:8c:a7:
95:cb:02:3b:c3:69:bb:27:57:a6:4d:73:da:67:43:eb:7a:a5:
da:bc:14:20:01:ab:7c:ef:7d:e4:26:09:41:cc:f5:9e:98:ca:
01:fb:4d:74:1a:bf:67:29:43:a4:4b:bc:78:32:ad:0a:97:a4:
49:f4:b7:c1:04:10:61:b5:b7:7c:02:d4:4a:21:ab:85:3a:4f:
ef:26:37:71:72:66:07:e2:20:46:74:0a:7f:75:d5:0f:ca:1a:
16:79:b3:6d:b4:1e:10:27:26:1a:04:cc:09:38:44:61:3e:69:
39:02:86:bc:c5:d7:67:61:72:1f:78:db:de:37:35:c5:00:ee:
b9:ad:ae:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 01:12:10 2025 by rpki-client