Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aW50BrWlqsIAsygJ67qfJ4QzVY4.roa
File: aW50BrWlqsIAsygJ67qfJ4QzVY4.roa (raw, json)
Hash identifier: skBH+upnevpgl67MQH3q/YmvZZl86UNpsHREG+2EMpk=
Subject key identifier: 69:6E:74:06:B5:A5:AA:C2:00:B3:28:09:EB:BA:9F:27:84:33:55:8E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01885E9D91513308219B4EF8255FE28BB654
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aW50BrWlqsIAsygJ67qfJ4QzVY4.roa
Signing time: Sat 27 May 2023 19:09:24 +0000
ROA not before: Sat 27 May 2023 19:09:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:5e:9d:91:51:33:08:21:9b:4e:f8:25:5f:e2:8b:b6:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 27 19:09:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=696e7406b5a5aac200b32809ebba9f278433558e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a3:f4:3b:a7:b5:7a:76:fe:72:8d:a1:71:7b:
c4:71:46:c0:43:0d:f0:b0:b4:17:6a:21:85:9b:e2:
69:26:b3:94:8c:95:12:91:fe:7b:d3:93:22:2f:e9:
d6:7c:ea:7d:a3:fa:d1:6d:8a:ad:6d:41:b3:71:b0:
9d:6f:63:b6:bc:e9:e8:cc:46:6b:26:ba:c5:38:6c:
c9:43:82:07:7a:80:de:7c:87:b6:06:cf:fc:ef:82:
f7:1f:1a:be:d1:a1:68:58:27:d7:34:f1:90:e4:1d:
50:63:59:c5:29:d4:e2:75:62:23:bc:59:18:82:8c:
79:7c:19:9d:ef:d4:a1:31:9b:2b:dd:f2:b6:4e:02:
e9:74:f7:c7:b3:6b:df:45:86:af:18:51:dc:d9:47:
76:f7:f8:3e:4a:90:70:8b:30:d4:1e:6f:f1:6e:e6:
e8:59:c7:81:e5:3b:f3:ce:b2:a2:0b:e1:b0:50:30:
d5:aa:03:0c:2f:79:43:23:a8:38:b6:90:f2:39:28:
ff:2d:36:f3:51:ac:c3:9c:39:0e:78:b8:04:b6:10:
22:cb:5f:55:d7:ec:f2:50:e8:3e:ef:40:94:19:54:
14:a6:c0:3d:a0:dc:f0:b6:d3:1c:d4:30:40:49:4a:
1a:5b:be:4a:dc:8a:bf:00:bc:d1:97:50:32:31:bc:
00:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:6E:74:06:B5:A5:AA:C2:00:B3:28:09:EB:BA:9F:27:84:33:55:8E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aW50BrWlqsIAsygJ67qfJ4QzVY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
10:30:93:84:fb:7e:89:93:e0:74:2e:13:d5:69:07:d0:dd:b5:
d0:23:0d:95:8c:46:c7:21:7f:bf:c3:b8:5d:29:a4:b5:e8:88:
e4:59:7e:d6:cb:13:cf:19:f5:75:de:35:56:4e:af:59:51:d3:
9f:3d:fa:1e:83:4e:6b:e0:7d:c7:63:55:b1:82:9c:e5:cc:41:
e7:bc:ad:b5:9f:5b:61:ad:6e:4a:45:d1:37:ea:93:c6:2b:56:
73:4d:38:27:59:cd:48:d7:f4:17:0d:9f:b5:a6:de:c8:20:78:
d9:13:98:be:89:4c:4c:35:40:9d:0a:c8:84:37:5e:f9:16:03:
24:e6:c8:17:77:a0:93:7b:39:f6:7a:5d:da:b6:91:15:23:53:
61:99:d9:51:ac:51:dc:27:64:e3:17:ba:41:ea:ee:20:68:2b:
12:c4:27:4c:e9:69:7c:3e:77:61:39:12:23:b9:6d:43:96:69:
c9:b4:f4:3d:f3:c0:51:f1:c1:71:25:f0:f3:cf:8a:3c:0e:31:
49:af:2b:83:ef:cf:6a:64:b1:29:16:5d:59:8f:fb:0a:55:8a:
4c:b0:0f:78:f1:3a:13:00:95:87:37:51:fd:c3:6d:f4:e6:01:
9e:19:1e:0b:e0:26:c9:03:89:c7:d4:e8:86:1b:2a:2d:1c:fc:
7d:72:d3:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 07:45:44 2025 by rpki-client