Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iu8G4UlRRtCvOPSlx3pgK38zfOk.roa
File: iu8G4UlRRtCvOPSlx3pgK38zfOk.roa (raw, json)
Hash identifier: CYyo2nFZby6Ec3JaPbima2qg7eDEacmBIewPzcVDQcA=
Subject key identifier: 8A:EF:06:E1:49:51:46:D0:AF:38:F4:A5:C7:7A:60:2B:7F:33:7C:E9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188BB878FC6DB82775AB50D0B6E8AD40477
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iu8G4UlRRtCvOPSlx3pgK38zfOk.roa
Signing time: Wed 14 Jun 2023 20:10:03 +0000
ROA not before: Wed 14 Jun 2023 20:10:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:bb:87:8f:c6:db:82:77:5a:b5:0d:0b:6e:8a:d4:04:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 14 20:10:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8aef06e1495146d0af38f4a5c77a602b7f337ce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:18:15:32:e8:02:ba:68:8c:10:8f:3a:e7:a1:
10:19:10:70:e6:94:1e:89:5b:93:74:2f:79:59:60:
c4:35:d5:fb:5a:2d:50:30:8c:75:d0:dd:e7:19:c1:
e1:a0:e2:cb:cf:a5:dd:ed:ed:12:e3:8a:bc:8c:b0:
bf:bb:24:36:a3:fc:fb:ca:35:31:7c:bf:7f:62:cc:
ff:07:fa:f5:ae:73:05:19:7b:85:0b:cd:ef:cd:86:
97:00:94:54:d1:b1:ba:c5:b6:07:ac:1d:39:ff:11:
6d:7a:88:84:8f:e9:ea:20:c5:95:b8:1c:54:de:97:
e9:4f:e1:16:2f:40:94:0d:8b:d1:56:15:87:d8:a0:
af:ba:77:cc:c7:16:a2:10:89:70:e6:22:70:42:c8:
8b:26:66:e6:e3:20:a3:99:b8:8e:3a:0e:14:75:ab:
48:9b:29:28:77:23:7c:c0:32:bf:2d:59:96:87:74:
82:96:78:2f:40:53:b9:40:c1:cc:93:69:3e:c9:14:
bd:b3:47:07:41:c5:b9:cd:89:41:ad:06:c3:3e:cf:
a7:d0:ed:27:c5:11:2e:2f:22:b7:07:d7:e9:46:d4:
5a:24:55:89:1f:1c:24:9d:96:51:3a:aa:27:ff:79:
bf:6a:69:d3:a6:8b:a4:fc:9e:18:5e:bf:af:9a:3b:
62:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:EF:06:E1:49:51:46:D0:AF:38:F4:A5:C7:7A:60:2B:7F:33:7C:E9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iu8G4UlRRtCvOPSlx3pgK38zfOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a0:c4:cd:cf:86:30:a1:53:a2:a4:b2:f5:84:1a:7a:54:0d:66:
ba:1c:3f:62:db:20:ce:3a:4e:b0:fd:0b:e3:9f:1d:d2:70:9a:
5a:22:4f:bc:86:e5:3e:f3:40:0e:7d:89:a8:84:17:bb:83:ff:
f4:d4:3c:b1:2d:74:e0:dd:2b:65:6a:49:2c:8e:de:a3:09:5b:
91:fb:d8:61:9b:7d:35:12:db:4d:1b:d6:21:f7:3a:53:1b:7c:
b4:0f:2b:00:56:a1:f6:c8:80:ce:14:ff:28:7c:30:38:41:f7:
78:8e:8e:8c:77:d3:86:5a:f5:52:83:5c:d3:e0:f2:9a:e5:14:
de:3a:f8:5e:da:d9:a6:36:3e:e6:b6:5e:15:c5:03:52:9e:6e:
5d:12:85:e4:db:f1:96:eb:ce:99:7b:73:fb:30:3f:02:ad:0e:
87:d2:2f:68:19:41:2f:8c:e8:ab:79:27:48:c6:96:db:08:f1:
f5:9d:af:15:7a:6b:7e:13:76:9a:be:65:ce:55:61:0f:af:6b:
8c:8b:1a:27:7f:38:66:35:24:3e:9d:68:f5:86:87:7f:1a:ff:
bb:44:e9:66:3c:c4:43:6f:6e:2d:8b:e4:cb:70:72:df:e1:69:
5d:06:f9:0f:a9:77:03:e7:de:f4:1a:7a:fb:de:1c:7c:25:76:
ae:b4:5b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:37:37 2025 by rpki-client