Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pOFdi2uD8BGLzklSz4SeQ4D6hGk.roa
File: pOFdi2uD8BGLzklSz4SeQ4D6hGk.roa (raw, json)
Hash identifier: PD+IcSr1rZx1sU1Ered4SPJK+qKuZlYoXtzUYEIwFQM=
Subject key identifier: A4:E1:5D:8B:6B:83:F0:11:8B:CE:49:52:CF:84:9E:43:80:FA:84:69
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188736F96BACF6D459AFF41A64B9BB72868
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pOFdi2uD8BGLzklSz4SeQ4D6hGk.roa
Signing time: Wed 31 May 2023 20:11:12 +0000
ROA not before: Wed 31 May 2023 20:11:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:73:6f:96:ba:cf:6d:45:9a:ff:41:a6:4b:9b:b7:28:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 31 20:11:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a4e15d8b6b83f0118bce4952cf849e4380fa8469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a6:64:0c:88:7f:fa:25:ad:c7:b5:45:8c:52:
85:29:51:df:dd:b6:e0:a5:74:1c:0b:d5:3e:06:bc:
c2:cb:e2:60:6e:9b:23:92:1d:bd:09:ac:a0:34:8f:
65:f0:42:3b:c4:b6:30:55:6d:fb:fe:cc:a6:50:21:
9e:28:41:da:6b:25:3e:65:60:5f:ea:c5:aa:86:c5:
51:7c:3f:99:73:b6:9b:0f:ed:5a:1a:89:46:78:b0:
fb:0b:d5:21:a2:f8:30:b3:1b:30:18:d0:e9:91:bc:
4f:b5:18:77:90:82:4d:2c:40:1b:aa:e2:35:99:29:
c4:f4:ba:a6:da:4f:09:db:4b:2d:d4:24:9e:39:c4:
e4:60:2b:df:48:99:55:ca:5a:13:79:83:b9:9e:4c:
25:a9:0c:65:59:49:8a:99:8a:70:60:e3:30:f4:15:
dd:59:22:d0:f1:13:02:bb:53:41:15:87:28:2e:0e:
33:b2:e0:f3:f9:2a:56:e1:c4:61:f3:3d:86:5f:a3:
8f:1b:b8:3a:5f:95:cb:14:ed:24:74:c1:4e:b5:b9:
00:e2:4f:d5:f0:67:92:d5:91:61:1a:29:68:10:ac:
48:08:4e:da:34:32:7a:4d:a8:bf:77:0d:d7:a6:0f:
10:d3:5c:ac:a0:c6:a1:84:ca:e4:5d:71:cd:75:6b:
43:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E1:5D:8B:6B:83:F0:11:8B:CE:49:52:CF:84:9E:43:80:FA:84:69
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pOFdi2uD8BGLzklSz4SeQ4D6hGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
86:0f:85:37:08:eb:3e:28:1c:63:43:89:d2:1c:82:73:f5:8e:
bc:32:fd:c9:24:7b:c7:1d:ac:fe:c3:c1:2f:8c:b8:cd:22:c9:
f2:1d:df:f2:40:ed:9e:78:1e:f0:b3:6f:73:55:bd:96:91:b3:
31:f1:64:56:6a:55:75:ae:4e:0a:ae:31:ed:6f:a5:46:e5:50:
29:d3:1e:c0:87:da:37:68:e8:a6:df:ea:fd:a1:42:db:6b:db:
6b:91:fa:8e:42:8c:07:9e:8e:ce:91:f2:92:ae:ad:3f:30:35:
70:be:c5:59:19:c4:82:da:08:3c:b9:b0:ee:95:d0:6d:25:29:
28:af:84:14:3c:53:c1:1e:37:a1:39:56:2a:c4:f4:81:4a:f7:
c9:72:c2:f3:7f:a9:1c:dc:69:1d:b4:2d:1c:a3:b1:37:be:5e:
6f:5b:29:dd:94:59:65:74:23:b3:05:2d:70:02:fb:c1:dc:c5:
16:55:52:d1:52:f3:f4:47:7f:c9:4d:0e:06:bc:41:50:30:64:
d9:73:9c:b3:ca:69:06:89:f6:1a:10:69:a6:ee:f3:81:23:39:
3e:30:a9:4f:70:fa:57:9c:9b:39:3d:34:4b:f8:ce:19:6f:8d:
12:de:0e:68:77:87:ac:1a:cb:79:94:28:61:7b:ff:66:13:4c:
5c:76:03:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:10:09 2025 by rpki-client