Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_R_SNY0UxoTfSg5Zv3acQzysg_g.roa
File: _R_SNY0UxoTfSg5Zv3acQzysg_g.roa (raw, json)
Hash identifier: d0D1A+uqEtaEzyAbBtiWVhqfeLDwaiPVRkhk16aqi+Y=
Subject key identifier: FD:1F:D2:35:8D:14:C6:84:DF:4A:0E:59:BF:76:9C:43:3C:AC:83:F8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188BE1BA809CE245E789A64E2A5AF1B18A3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_R_SNY0UxoTfSg5Zv3acQzysg_g.roa
Signing time: Thu 15 Jun 2023 08:11:03 +0000
ROA not before: Thu 15 Jun 2023 08:11:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:be:1b:a8:09:ce:24:5e:78:9a:64:e2:a5:af:1b:18:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 15 08:11:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd1fd2358d14c684df4a0e59bf769c433cac83f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:38:bb:f6:12:3e:4d:ca:9c:8a:b0:5b:ec:cf:
6d:92:4e:39:1b:92:89:ef:6f:0c:f1:f1:0b:bf:4a:
87:d7:55:3e:e0:88:58:f4:1d:85:7b:3e:b5:db:23:
1a:33:66:b5:eb:6a:eb:22:94:88:5b:b5:dc:c3:01:
5a:44:e6:07:bb:51:fa:88:41:af:0a:d9:f1:a4:69:
91:7d:c7:3f:de:7c:4b:cc:d4:ac:22:0a:e2:95:31:
19:b9:48:bc:56:30:54:4c:41:9f:d4:e0:7d:43:4c:
b3:be:20:ac:66:f3:fe:b0:cb:a2:3a:3b:ea:89:9a:
e0:37:4c:18:08:91:ae:46:dc:a6:6b:8b:01:bd:8c:
3f:8f:78:68:d3:95:9b:98:86:b4:fe:cd:8e:8f:9f:
de:e8:5d:9f:1e:f6:8e:41:11:eb:b1:f5:fe:61:a5:
e1:e2:28:59:e7:7c:f5:ba:bb:d7:5d:d0:41:b6:4b:
f2:47:63:18:af:cd:fb:b2:a9:8b:95:f9:79:fd:12:
c8:c7:26:86:42:85:63:b7:1f:2e:71:5a:2d:5a:70:
13:62:1f:70:96:56:71:d2:6f:bb:30:cc:74:31:3e:
c8:86:41:e6:fe:fd:42:de:f9:26:e1:fd:63:0f:39:
69:60:b6:e2:6f:74:6f:5c:d8:5e:66:17:6a:ac:77:
89:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:1F:D2:35:8D:14:C6:84:DF:4A:0E:59:BF:76:9C:43:3C:AC:83:F8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_R_SNY0UxoTfSg5Zv3acQzysg_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
66:38:fb:39:43:1c:ab:b5:55:da:4b:3a:90:6a:52:ec:b7:9a:
28:0f:2d:d7:92:a9:38:4c:69:2f:2d:97:a2:f0:2e:96:e3:63:
22:b0:b3:b9:7d:6f:79:ca:5a:29:86:15:2e:b0:e8:ad:d9:b2:
a0:b0:0a:ad:54:1c:26:94:d8:f9:f5:b2:94:70:a6:67:0f:25:
1f:46:61:78:c4:bb:ac:79:4c:d7:96:71:27:a0:76:e0:17:ad:
ca:f8:82:79:82:66:f6:a4:1c:56:f1:09:7a:83:87:e4:34:dd:
66:6d:73:44:69:7c:2d:b6:29:96:11:41:43:51:4b:ac:0a:e6:
38:3f:19:25:89:6a:45:dd:5e:f8:7b:98:13:7d:c1:36:ca:1f:
ff:c0:bc:44:f9:eb:fd:ef:55:a2:96:7c:fc:6e:94:f6:97:d9:
c4:3e:bc:83:e6:28:b8:9d:bb:ce:48:63:9a:75:1d:1a:29:43:
57:ed:97:25:1a:60:c6:cd:6a:95:61:b2:ed:ec:c6:88:60:01:
3c:2b:6e:ec:dd:e2:31:ad:c0:4c:4a:e0:38:2f:8f:55:47:b1:
7d:70:85:4e:18:0a:11:df:76:56:db:07:d9:8a:b7:7e:96:f5:
e6:77:5b:fd:11:a0:bb:01:f5:5d:91:9f:f7:3d:b7:45:47:c1:
dd:e3:24:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:49:38 2025 by rpki-client