Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/p0z6EIQYhPP0eeVtDA7oVQ6uqNw.roa
File: p0z6EIQYhPP0eeVtDA7oVQ6uqNw.roa (raw, json)
Hash identifier: C9ApMddz0P8MwONhr1dQM0cVFZy0Httubm7kpR6tUaw=
Subject key identifier: A7:4C:FA:10:84:18:84:F3:F4:79:E5:6D:0C:0E:E8:55:0E:AE:A8:DC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188ACB8BA32A3FE675D328255E0265996BB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/p0z6EIQYhPP0eeVtDA7oVQ6uqNw.roa
Signing time: Sun 11 Jun 2023 23:09:27 +0000
ROA not before: Sun 11 Jun 2023 23:09:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:ac:b8:ba:32:a3:fe:67:5d:32:82:55:e0:26:59:96:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 11 23:09:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a74cfa10841884f3f479e56d0c0ee8550eaea8dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e1:5b:c1:de:ed:49:89:bb:e6:77:29:ee:20:
42:2b:f0:53:82:66:dd:be:08:51:24:7c:aa:58:da:
0e:bf:7b:cd:62:60:6d:67:18:d4:10:7b:a0:cd:13:
d4:b8:34:cd:73:49:00:97:4b:c3:ce:b7:d7:c6:b9:
eb:77:aa:68:12:cc:e0:84:d8:43:45:9b:c1:92:cb:
d0:c1:6c:0a:57:ac:c6:41:ff:20:e8:0a:e6:50:f8:
ff:2f:56:98:cc:f6:f8:7d:50:f6:ab:cb:51:ba:4a:
87:1a:7d:3f:ad:32:11:6f:22:99:d5:e2:51:79:94:
d4:d8:a5:38:e7:c8:b8:4b:d8:e3:57:26:88:30:ac:
98:a3:d0:c8:f7:28:4d:36:fe:43:04:37:65:54:26:
e8:5a:e6:14:45:df:70:21:ba:27:33:3c:ae:af:e8:
97:63:fb:0d:32:27:7d:ea:b0:98:97:99:10:b6:22:
e2:3c:8c:a7:d6:82:5d:6d:c6:3f:13:04:e6:5a:58:
2e:21:69:25:85:8f:95:7c:76:30:50:37:6c:51:53:
30:26:bb:9a:af:37:35:ae:0b:11:c7:1b:f1:57:40:
9d:12:dd:4c:f9:88:5d:0d:1a:dc:51:71:ac:b9:0e:
2d:0f:c5:22:db:31:7c:25:43:68:22:0d:63:74:9e:
18:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:4C:FA:10:84:18:84:F3:F4:79:E5:6D:0C:0E:E8:55:0E:AE:A8:DC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/p0z6EIQYhPP0eeVtDA7oVQ6uqNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6a:4f:b0:b4:5d:e7:e4:fc:9e:f9:13:63:46:69:df:b7:4c:e5:
6a:3c:95:09:ba:44:01:89:1c:59:e6:2f:15:db:12:6b:4a:bc:
07:cf:04:d1:1e:87:10:e7:e1:1d:3e:8a:3e:e4:3b:0b:fd:92:
00:cc:49:b2:0d:fa:97:91:71:25:89:2f:79:f7:9a:d5:a4:c5:
7c:3b:a3:f3:3f:a2:f4:c6:c1:38:60:f9:d2:d0:41:e3:74:c7:
9c:a3:94:97:83:81:a3:f3:08:ef:76:8a:b7:d4:2e:cf:23:7f:
ac:c5:26:67:48:93:a8:a8:e8:07:c3:b2:00:a9:93:4b:8d:e5:
b3:1e:db:da:4b:e6:92:c7:7e:ab:1b:97:74:d4:6c:da:61:64:
6c:5f:2d:2d:b6:cb:94:fd:79:9f:9f:cd:26:da:97:38:a9:a1:
cb:79:e4:ee:a4:70:e5:44:bc:8d:f9:11:27:57:f3:7a:b3:f4:
44:87:07:06:db:b4:86:7b:0a:30:32:86:74:3d:32:50:ce:f0:
9f:a3:52:5e:04:8c:0f:2f:14:e9:8d:72:91:d4:c8:6f:1c:cd:
5b:13:5d:c3:e6:cc:1a:9b:53:35:89:a0:e7:a7:d2:d2:f3:61:
af:a6:81:50:23:b2:ea:02:b4:72:51:16:b6:5e:dd:bb:75:55:
16:9b:44:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 21:31:23 2025 by rpki-client