Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/d2oOe0j3HgO5PbZROlfs7V8uaUE.roa
File: d2oOe0j3HgO5PbZROlfs7V8uaUE.roa (raw, json)
Hash identifier: /kIhyxW9DI8AYW48SsJK0ofOpafbXQ84ZF8FqUIb4TA=
Subject key identifier: 77:6A:0E:7B:48:F7:1E:03:B9:3D:B6:51:3A:57:EC:ED:5F:2E:69:41
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018859095A20AAC8CFD6CC167D773636B585
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/d2oOe0j3HgO5PbZROlfs7V8uaUE.roa
Signing time: Fri 26 May 2023 17:09:24 +0000
ROA not before: Fri 26 May 2023 17:09:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:59:09:5a:20:aa:c8:cf:d6:cc:16:7d:77:36:36:b5:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 26 17:09:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=776a0e7b48f71e03b93db6513a57eced5f2e6941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:eb:74:a0:f9:74:43:30:59:6f:a7:2f:fa:58:
a9:ad:49:da:a4:fd:f6:2c:eb:2f:fd:00:90:cb:ad:
96:4a:cf:f7:b1:7d:e5:bd:96:f5:71:27:66:c2:1e:
00:86:eb:e5:2b:3b:33:d2:77:c4:0d:bf:ca:ff:91:
8f:3e:f3:f4:dc:95:4f:e2:61:de:26:5a:14:5b:bc:
59:af:97:64:af:30:73:b8:b0:6b:98:ed:bb:f8:50:
de:04:85:95:3d:e7:1c:09:51:bf:93:a0:ef:74:c3:
42:b6:b8:46:c5:71:d2:74:dc:34:25:47:b8:18:f3:
7b:35:14:72:a9:79:e9:73:45:3b:af:7c:6d:f4:b6:
13:12:3c:7f:f9:cc:c9:a8:f8:b5:1a:14:8a:81:1e:
4e:e9:fa:35:9d:7d:be:31:50:55:28:37:45:7c:3e:
20:de:40:42:a2:b4:88:19:81:05:27:99:59:4e:d9:
30:61:6c:bb:d1:ae:55:fc:cb:e0:d4:6b:9d:47:ff:
d2:42:d4:38:a5:3f:0d:37:5b:57:e0:46:59:47:b4:
d3:ac:d3:62:52:1d:4f:83:67:64:a5:8e:57:9a:d3:
e8:de:93:90:34:cd:83:f4:3e:e3:ee:d3:76:61:ca:
39:19:cf:2b:72:7f:0e:4c:3e:36:27:7a:69:70:44:
c3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:6A:0E:7B:48:F7:1E:03:B9:3D:B6:51:3A:57:EC:ED:5F:2E:69:41
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/d2oOe0j3HgO5PbZROlfs7V8uaUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5e:07:f4:fc:b6:dc:51:83:8b:f7:6e:d8:d9:fd:ea:80:a3:de:
33:86:0a:b6:b8:e3:ba:37:b0:a3:a8:41:d1:5e:7e:aa:61:35:
61:6f:7f:8c:6e:fa:aa:2e:d3:df:4a:bc:ca:e1:b3:c3:17:e1:
3f:8f:28:46:6d:b9:fb:ad:d8:03:7f:9a:44:8f:30:63:be:27:
8d:b2:bd:90:26:40:9e:32:36:76:27:cd:06:b6:dd:53:75:84:
a1:4f:aa:8b:d0:f1:71:ed:06:00:b7:26:d2:ea:d4:e7:24:1d:
f0:dd:11:9e:41:9f:9a:25:a2:08:b6:77:a1:2c:0d:46:b5:06:
18:84:c9:1a:1b:0c:af:3d:8a:64:4a:41:3f:3e:a8:43:fc:f2:
2f:c6:96:57:b1:6f:ae:c8:fe:df:e6:85:f7:ce:ab:34:e7:dc:
dc:bb:54:64:2d:4c:fb:b9:52:1f:53:13:3b:6b:fd:40:79:ca:
92:10:ec:1d:73:01:bb:73:ce:aa:0f:76:35:23:16:db:d8:c4:
63:02:b5:4a:78:af:31:7d:6d:25:d2:ea:63:c3:05:fb:12:c9:
cf:1b:05:7c:8a:e8:98:6f:9e:d1:c0:c1:7c:1b:21:3e:03:dc:
cf:68:33:ea:11:5e:a5:eb:11:2c:4a:dd:45:50:ed:cc:ce:f4:
98:d8:6c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 21:34:22 2025 by rpki-client