Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/d64vQ9M-u-xJlLZc4zzztpfMkzE.roa
File: d64vQ9M-u-xJlLZc4zzztpfMkzE.roa (raw, json)
Hash identifier: hbp2tF3yZCAkzx28WlGFKxz2jbnJnDe7e1nVY3ignlE=
Subject key identifier: 77:AE:2F:43:D3:3E:BB:EC:49:94:B6:5C:E3:3C:F3:B6:97:CC:93:31
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188796FD45812CCDCE0A2066B3BB7F151D0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/d64vQ9M-u-xJlLZc4zzztpfMkzE.roa
Signing time: Fri 02 Jun 2023 00:09:11 +0000
ROA not before: Fri 02 Jun 2023 00:09:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:79:6f:d4:58:12:cc:dc:e0:a2:06:6b:3b:b7:f1:51:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 2 00:09:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=77ae2f43d33ebbec4994b65ce33cf3b697cc9331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:98:7c:97:33:34:c5:be:78:cf:36:29:e4:5b:
6c:25:79:73:45:e9:dc:4a:87:b1:93:26:52:09:05:
03:fb:37:0f:6e:48:7d:1c:8d:63:b7:ee:1e:7b:17:
03:d2:db:4b:a9:55:a9:ec:9c:0e:53:d3:9c:6a:9d:
dd:43:f6:35:2c:dc:62:e9:e4:f7:24:3f:07:1a:7a:
16:d1:1e:aa:3e:90:2e:71:ad:24:88:85:bd:23:e0:
52:13:a6:7d:3d:d3:6f:56:3a:5f:da:e8:62:a9:04:
2d:9f:1f:b7:21:2d:06:a2:f5:61:28:4d:2d:2c:a0:
d3:53:1e:da:1f:2b:5f:db:8a:64:0c:98:04:0b:8b:
e5:45:33:df:b0:3b:2c:2b:df:c2:28:73:82:55:d9:
10:22:48:31:eb:11:37:88:5e:39:72:70:93:99:a3:
16:7e:7d:07:eb:3b:c8:6a:58:e4:b9:ca:ff:47:fb:
31:d2:cc:55:e5:e7:0f:e5:33:02:58:e9:65:52:52:
f4:af:d4:40:66:67:eb:1c:24:eb:61:9b:a7:ec:38:
a7:d3:14:18:33:c1:70:96:03:f3:e3:07:f0:67:99:
4b:d4:53:24:f7:71:76:75:a3:75:a7:a1:bb:58:f1:
3c:ba:66:0d:7d:89:3b:05:67:e2:9f:5e:c4:b9:c4:
70:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:AE:2F:43:D3:3E:BB:EC:49:94:B6:5C:E3:3C:F3:B6:97:CC:93:31
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/d64vQ9M-u-xJlLZc4zzztpfMkzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1d:0d:01:82:6d:66:33:ac:10:f8:f6:47:b5:5f:6e:1f:e9:d0:
2d:ae:80:f3:c1:aa:af:2f:99:38:12:21:72:0e:9f:b9:5a:f3:
a5:e0:29:4c:ff:da:62:27:20:3b:e7:5e:96:a0:3e:6c:8f:dd:
df:2e:7f:bc:8e:91:30:06:7b:36:ad:e9:b0:e2:af:4b:72:a2:
81:ce:36:16:6f:c0:b5:f1:f1:16:9a:21:9a:e7:c8:83:b8:08:
65:44:a4:af:e3:6e:57:f7:49:83:dd:31:6c:0d:ff:a5:90:eb:
f8:8d:71:49:a9:06:00:13:3a:f5:27:25:f4:6b:43:aa:31:01:
63:4e:bf:43:21:35:12:28:e1:21:a8:cd:1c:f7:01:9b:99:ec:
ba:60:3b:d2:a2:44:98:77:c1:eb:f3:1f:b4:c3:dd:ef:b4:34:
ac:d2:56:d7:4f:6f:3a:73:85:33:25:8f:3b:6e:bb:d9:2c:b2:
8c:f3:7b:84:d5:c9:37:4f:5d:ed:e3:37:b3:74:64:18:0b:c7:
e0:93:e2:d0:5a:ee:73:43:27:ca:8b:5e:97:3f:09:ee:8b:9d:
a3:23:bd:36:d1:cc:c5:a8:99:2e:be:2b:02:cf:11:fa:91:73:
db:ac:f7:8c:67:42:90:05:65:ab:41:67:0a:dd:71:d6:23:aa:
0f:bc:39:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 23:42:55 2025 by rpki-client