Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/b4G1PpRp1rmMAUcI90xWJyCjBOE.roa
File: b4G1PpRp1rmMAUcI90xWJyCjBOE.roa (raw, json)
Hash identifier: BGcqj1RQ9JxpZ3Vo7ARSidyrSFVDfSZmKEggKwpKj8E=
Subject key identifier: 6F:81:B5:3E:94:69:D6:B9:8C:01:47:08:F7:4C:56:27:20:A3:04:E1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018943FB53306FDB2CEC6F9956047CA8AE04
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/b4G1PpRp1rmMAUcI90xWJyCjBOE.roa
Signing time: Tue 11 Jul 2023 08:04:51 +0000
ROA not before: Tue 11 Jul 2023 08:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:189:43fa:dc45/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:43:fb:53:30:6f:db:2c:ec:6f:99:56:04:7c:a8:ae:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 11 08:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6f81b53e9469d6b98c014708f74c562720a304e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:24:b9:18:50:0e:05:83:c1:d2:c5:a2:4f:68:
f7:fc:f7:ac:79:5f:a9:66:66:cb:af:5c:df:b1:c7:
77:7b:15:06:8b:29:55:d6:61:a9:8f:db:7b:23:13:
c6:73:1b:20:a2:ab:0d:11:e9:80:8a:17:27:6c:05:
f9:5e:cf:f3:6c:49:7e:7e:20:17:b1:d8:d5:6d:be:
a0:b0:14:d0:6b:dc:f8:b7:af:77:2a:d2:f7:31:6d:
3f:fc:d4:56:47:27:5d:f7:8c:31:9e:00:7a:bc:7c:
2c:6f:a0:71:74:6a:d2:09:e7:53:a4:fc:27:fe:3b:
48:ca:77:c6:93:1f:79:90:11:8b:8a:9b:da:be:00:
c2:10:1e:d2:37:1e:90:6b:ec:78:25:10:01:56:50:
4d:3c:c2:a4:db:31:e4:aa:9a:da:fb:5a:1a:64:26:
c9:9d:3f:b0:da:f3:d2:e8:96:58:e5:e3:27:42:18:
06:82:8c:b3:d5:5e:b7:01:ee:22:99:e1:c2:07:4e:
90:11:a9:3e:df:56:77:ae:8b:1a:a8:15:07:94:f6:
3a:24:90:9b:14:d5:19:63:ee:53:e4:af:4e:6a:52:
4b:f7:e4:67:4b:68:07:e0:30:25:80:0d:15:21:81:
a3:86:f7:3b:fb:11:19:9e:0a:d2:d4:aa:9c:f9:5a:
78:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:81:B5:3E:94:69:D6:B9:8C:01:47:08:F7:4C:56:27:20:A3:04:E1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/b4G1PpRp1rmMAUcI90xWJyCjBOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
37:fa:43:86:90:72:8f:22:c8:07:6c:7a:50:e6:46:6e:79:32:
21:a3:e9:e1:68:f4:2e:a5:90:95:89:a1:c5:9d:b2:76:39:e7:
c1:c6:73:97:8d:9f:aa:b3:49:8e:66:c4:34:98:3c:99:25:5f:
31:e1:35:e8:3c:2a:fa:2f:36:cf:6b:94:fd:19:5e:f1:d6:99:
f4:7e:3b:c7:bd:be:21:92:ae:03:4e:69:14:50:84:ff:57:60:
60:aa:de:4f:be:01:61:98:4f:7b:5e:d9:a0:f2:92:87:99:b9:
3c:98:61:d6:76:5e:bd:cf:8c:1b:79:db:c0:11:1b:3a:56:da:
ec:f8:21:9f:14:48:86:7c:bf:c0:eb:5d:f9:85:77:72:39:8e:
f1:08:6b:9a:8a:d6:f4:3e:88:6b:46:65:4d:e5:dd:36:f9:5e:
fc:56:9d:71:56:ae:70:2d:c9:65:8b:d3:0f:8a:84:bf:42:7e:
c0:ba:5a:a7:38:3d:d5:af:99:d1:1a:a5:88:94:b6:6d:c9:aa:
e4:cd:51:58:0d:fe:7f:9f:a3:7b:35:f6:9d:40:a3:9a:ab:4d:
25:54:c5:3c:60:1e:de:74:f3:1b:50:22:8c:ea:df:56:20:1d:
32:32:80:cd:81:a4:98:5f:dd:da:18:5f:f6:48:6e:9c:33:58:
de:29:de:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:27:24 2025 by rpki-client