Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/b13rrcZp57pxNcfYpnZTJBSfPBM.roa
File: b13rrcZp57pxNcfYpnZTJBSfPBM.roa (raw, json)
Hash identifier: 6DvShqcdZUnrQYgysufM8ezQM/YbW+iZE7boUQEzqAU=
Subject key identifier: 6F:5D:EB:AD:C6:69:E7:BA:71:35:C7:D8:A6:76:53:24:14:9F:3C:13
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01882C9A5FE50BF34B4D1A7902598C93916A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/b13rrcZp57pxNcfYpnZTJBSfPBM.roa
Signing time: Thu 18 May 2023 02:04:54 +0000
ROA not before: Thu 18 May 2023 02:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:188:2c99:cd68/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:2c:9a:5f:e5:0b:f3:4b:4d:1a:79:02:59:8c:93:91:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 18 02:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6f5debadc669e7ba7135c7d8a6765324149f3c13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:57:ce:29:69:f2:92:dd:2c:75:71:2d:17:80:
46:77:13:50:ee:bc:94:6a:a5:fa:a9:ca:89:50:c8:
da:5d:bb:9c:27:9b:fe:28:df:3a:cc:4a:35:41:56:
94:e1:4c:f7:95:f2:d7:b2:00:82:56:42:ba:c9:c7:
04:0f:c0:a7:6a:a0:34:2f:b6:2c:0e:ec:1a:40:ca:
ed:ac:99:15:49:9f:3d:97:83:af:61:fa:f5:f4:b2:
cf:52:c0:8f:7e:08:05:24:57:cf:b5:bb:63:fa:d6:
de:22:8b:eb:77:a4:4b:5a:4a:4f:86:74:ef:a6:31:
01:f5:04:77:05:5a:e6:f8:84:2d:ff:67:c2:a1:65:
a1:46:5d:f7:f5:67:ef:81:c3:a7:49:ea:4b:0f:a5:
71:df:34:25:d6:3f:b1:93:12:44:3e:a1:a3:5d:0c:
e6:97:35:5a:3d:f5:60:3d:c2:a9:11:47:e3:59:6b:
9c:ac:06:0c:52:ca:d1:aa:4f:aa:4d:72:3b:2c:de:
0e:06:b2:39:1f:fb:cd:2a:08:46:e6:2e:fe:f0:6a:
3d:ef:6a:e1:a4:1d:ee:3e:d4:16:ae:f8:64:39:60:
c6:db:6a:44:aa:e0:4f:a1:57:c7:79:f8:3d:dd:63:
0a:88:81:c9:8b:94:9c:f3:30:15:12:c0:cc:e3:58:
0c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:5D:EB:AD:C6:69:E7:BA:71:35:C7:D8:A6:76:53:24:14:9F:3C:13
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/b13rrcZp57pxNcfYpnZTJBSfPBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
37:73:e9:c6:6e:94:04:0d:08:65:f3:1b:98:e7:61:36:94:e9:
d8:e3:37:3c:fc:72:55:71:8e:f8:85:63:d9:1e:7b:23:12:9e:
9b:46:cc:1b:1c:43:84:da:ab:f1:e8:ee:87:45:c9:93:05:e8:
e4:a0:88:74:81:c0:cd:64:33:14:9c:7d:49:8a:ca:4a:ad:b3:
f9:7b:fd:79:bc:5b:d5:5b:86:05:7b:35:43:52:37:1c:5a:a3:
4f:9a:0a:3e:86:79:83:28:42:cc:71:07:a2:99:8e:72:db:cb:
36:76:1a:49:15:12:3b:1f:8d:28:0a:9e:25:79:21:f3:2d:e0:
68:8c:83:f1:ae:bc:f9:7b:7c:47:81:c9:b2:e1:cc:f1:45:49:
4b:eb:10:54:4c:d9:98:d7:91:fa:92:2e:8b:9f:ce:4a:ef:3c:
db:a8:d3:b5:55:7a:c8:1a:39:e3:32:5f:cb:42:56:f6:05:d8:
33:da:8b:f7:9d:4f:21:19:de:3c:b7:32:a3:0c:3a:d1:b1:1c:
ef:bc:b1:58:65:ce:b5:dd:9e:63:db:ff:d8:1d:12:c4:20:66:
b9:5e:6f:29:2a:48:d5:99:74:ac:00:bf:48:06:63:ba:ca:a1:
5f:be:e8:68:28:88:34:3d:4c:18:ae:b8:6c:b1:6c:03:00:8c:
06:bc:83:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 09:47:54 2025 by rpki-client