Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/R75kb8T9GDTGj02N3dJVPHz0wZc.roa
File: R75kb8T9GDTGj02N3dJVPHz0wZc.roa (raw, json)
Hash identifier: 2rv1qtn8GlErvPvMI4iZrsZm2gRMUV/aMNhDY8oZ2Fo=
Subject key identifier: 47:BE:64:6F:C4:FD:18:34:C6:8F:4D:8D:DD:D2:55:3C:7C:F4:C1:97
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018877147FC2CB338BF5266831C726FF56C7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/R75kb8T9GDTGj02N3dJVPHz0wZc.roa
Signing time: Thu 01 Jun 2023 13:10:12 +0000
ROA not before: Thu 01 Jun 2023 13:10:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:77:14:7f:c2:cb:33:8b:f5:26:68:31:c7:26:ff:56:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 1 13:10:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=47be646fc4fd1834c68f4d8dddd2553c7cf4c197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:71:03:21:ae:4b:98:29:14:59:cc:85:e6:8a:
30:2b:7f:13:73:26:b6:04:fb:f3:37:3a:d4:00:2a:
ad:38:04:44:b0:e4:43:a6:70:59:0a:c3:ed:a2:c5:
91:60:13:0e:40:4c:96:93:8c:9c:7c:be:7b:4a:ec:
93:a0:57:74:fe:bb:d2:db:39:f6:9c:6b:54:10:ba:
cb:20:6e:3e:82:f4:4c:3f:c9:7b:ba:a2:77:08:4f:
ff:51:0c:73:19:c7:aa:48:fc:c9:22:b6:01:ef:67:
02:4c:75:7f:01:86:3f:42:45:45:a1:68:6e:20:98:
09:36:4e:f2:49:c8:50:36:ac:82:16:5a:26:6a:13:
a3:51:06:a7:6d:5e:ba:ca:1c:21:bb:66:e3:b4:a1:
c8:cb:73:be:2e:40:24:a5:3f:78:dc:11:04:48:b9:
83:38:bb:93:27:bc:33:87:ec:bc:6d:4a:f2:ee:b0:
87:e2:1b:f2:c8:41:18:65:6d:a4:53:ad:2e:97:e6:
1b:b2:34:13:e7:35:7c:91:a6:90:34:be:51:2f:3e:
25:d7:34:8a:f9:15:9c:d6:95:f4:1a:df:ea:b8:1b:
2c:49:60:28:4a:3a:5d:e3:67:eb:f2:8f:7b:7d:fa:
bc:10:32:58:6d:cd:18:63:79:27:fd:bc:e5:f1:99:
c9:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:BE:64:6F:C4:FD:18:34:C6:8F:4D:8D:DD:D2:55:3C:7C:F4:C1:97
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/R75kb8T9GDTGj02N3dJVPHz0wZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
72:49:4f:b3:71:a7:d3:52:17:7e:cc:c6:b1:0a:7c:16:b3:4e:
51:4a:a2:f0:7a:11:6e:59:55:36:a7:25:29:51:32:ef:76:c4:
ff:28:8c:eb:85:e7:cc:2e:e6:9e:d4:80:c3:fd:5c:c5:45:db:
20:92:98:dd:fb:97:ac:51:a9:6e:b5:2c:e6:8f:b3:5e:21:bb:
ce:ed:78:61:c2:07:3a:b9:04:9e:82:d0:8f:08:63:26:2f:a8:
4d:b1:c8:13:67:7b:6a:30:52:ff:53:5c:a2:e3:94:37:9c:8a:
6b:78:5c:0d:70:93:37:54:25:a6:1e:09:56:5e:7d:91:53:42:
a4:49:bb:26:af:3c:56:10:30:3b:10:e1:47:3f:1d:51:c3:a0:
77:c8:cb:63:8a:dc:3c:b0:53:78:8e:62:d4:ba:68:39:26:d6:
03:ad:25:13:b3:af:a4:a4:87:e0:22:93:30:98:ee:c2:4e:3a:
56:17:87:d6:61:07:d8:48:55:53:b6:1b:b8:f1:ab:84:12:89:
f1:3b:54:11:b9:34:25:4b:2f:c8:27:8b:2b:02:70:a5:37:1e:
32:e6:21:1b:9a:fa:64:d5:0a:1e:83:0a:bb:86:b8:77:38:2d:
b6:e7:b0:21:e7:16:73:b9:7e:5c:6a:cb:f9:b8:52:d2:a2:de:
08:8b:dc:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 08:53:49 2025 by rpki-client