Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/X0_or393M8UdCr8VLqBprdV1xXs.roa
File: X0_or393M8UdCr8VLqBprdV1xXs.roa (raw, json)
Hash identifier: VbPUxxrTGAPiyAHrb0GW8Jug8o+AtgW5jOuuJh7Uurk=
Subject key identifier: 5F:4F:E8:AF:7F:77:33:C5:1D:0A:BF:15:2E:A0:69:AD:D5:75:C5:7B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188A12319AC5C1901B56AC1193DAAE7B676
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/X0_or393M8UdCr8VLqBprdV1xXs.roa
Signing time: Fri 09 Jun 2023 17:10:12 +0000
ROA not before: Fri 09 Jun 2023 17:10:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:a1:23:19:ac:5c:19:01:b5:6a:c1:19:3d:aa:e7:b6:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 9 17:10:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5f4fe8af7f7733c51d0abf152ea069add575c57b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:60:d4:4d:b2:3d:0e:49:b0:aa:83:d7:e4:32:
b5:c2:ed:3c:c8:54:49:5f:11:a7:c3:6e:c0:21:8e:
37:db:56:e1:2e:16:76:79:39:c2:f4:32:47:39:cb:
2d:ab:d2:03:b4:d4:56:28:8b:b3:33:e6:a4:f5:fe:
4b:57:21:99:97:53:97:f9:3d:78:4d:87:a8:9d:eb:
27:ab:74:cf:8e:d4:4e:c3:73:30:8d:fc:fc:a5:b0:
81:43:0b:4c:a9:d6:7c:04:3d:99:f3:67:1e:1d:0a:
86:0b:fa:c6:cb:f4:ab:bf:ea:89:b4:8b:ec:38:e6:
f4:20:57:38:31:69:9d:1f:2d:ef:e3:ee:a5:10:11:
07:bd:49:a4:d6:b8:d9:53:11:39:82:4b:27:42:37:
3a:b2:81:7b:ea:f3:fa:ed:8b:db:11:d7:67:80:51:
ce:e9:19:0a:54:95:61:65:5c:bc:d3:fc:21:14:47:
6f:3d:7d:8d:0c:ae:c9:5a:ef:37:6c:66:66:9d:be:
98:4f:75:16:7c:c6:0e:6e:92:aa:2b:59:6f:e5:44:
43:39:df:89:fd:98:df:ad:a6:b5:6e:40:86:2e:b9:
70:e7:05:23:14:f2:95:ac:74:db:f1:95:43:c1:aa:
f9:bb:e3:4e:2f:11:3a:63:2a:ca:a5:1e:48:14:f1:
1d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:4F:E8:AF:7F:77:33:C5:1D:0A:BF:15:2E:A0:69:AD:D5:75:C5:7B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/X0_or393M8UdCr8VLqBprdV1xXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
32:44:48:47:32:d0:eb:43:b2:2d:22:5a:3a:6b:ee:4e:37:2b:
87:b2:d6:34:42:89:68:35:ba:89:60:6a:80:bd:10:e3:a2:15:
93:6b:76:db:86:f7:70:67:ff:54:a3:0d:cf:19:47:31:20:c3:
67:b1:3c:3b:9e:5e:b7:12:66:e9:f2:a7:a9:24:1d:ed:43:8c:
d7:aa:23:35:70:4a:e5:c3:3c:0e:a5:21:42:ec:ba:6f:1f:36:
47:e3:f3:96:a4:6d:e7:7d:ff:12:69:cf:57:d6:fd:be:da:a8:
d7:1c:32:4e:45:41:c3:fa:6f:86:86:e8:9f:5d:a0:3b:2f:50:
5a:c0:72:43:38:a1:c6:e7:e9:28:75:ad:0d:69:db:19:a5:e8:
af:19:d7:45:d7:e9:a6:72:0f:da:7e:27:de:11:42:64:ac:ca:
90:d7:0d:c3:87:52:19:95:a0:7f:4f:4a:72:67:99:47:1a:da:
7a:fa:73:2c:e8:bd:e3:1a:25:45:a1:87:b2:ec:8a:6e:93:e1:
aa:61:79:95:85:8c:fc:95:54:e2:58:ad:27:0d:8a:ce:ab:e3:
d8:12:02:2f:37:a5:56:d7:3b:f1:dd:07:f7:9d:a6:07:64:04:
1a:a4:b0:27:f7:06:ff:b8:d5:78:49:ee:41:3a:56:0e:2c:0f:
7e:fe:ce:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 13:24:10 2025 by rpki-client