Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/r89UVfu8_XUIpPsEVr-UgIzEnDE.roa
File: r89UVfu8_XUIpPsEVr-UgIzEnDE.roa (raw, json)
Hash identifier: uy0+CVUfM+HpbkvWamGasr1qUUXjdOIBN42Bsvp/a/A=
Subject key identifier: AF:CF:54:55:FB:BC:FD:75:08:A4:FB:04:56:BF:94:80:8C:C4:9C:31
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188DF5DF526AD92653632BCF5FF723959DA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/r89UVfu8_XUIpPsEVr-UgIzEnDE.roa
Signing time: Wed 21 Jun 2023 19:10:56 +0000
ROA not before: Wed 21 Jun 2023 19:10:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:df:5d:f5:26:ad:92:65:36:32:bc:f5:ff:72:39:59:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 21 19:10:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=afcf5455fbbcfd7508a4fb0456bf94808cc49c31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fa:63:f1:14:2e:88:8b:f9:21:1b:3f:94:2a:
d8:f6:78:fa:f2:a0:35:43:3f:56:4e:cd:10:42:75:
80:4b:4a:6b:7d:3e:c3:b7:15:25:11:86:8f:19:b9:
f3:62:a0:7c:e4:65:70:16:61:0b:ee:4f:6b:f1:51:
8b:c1:ce:5b:6c:93:10:ea:61:73:75:b3:0c:cd:a4:
f3:cb:28:6f:8d:b1:46:ff:81:51:03:a7:82:e6:41:
08:ad:5f:46:0b:fd:09:a0:69:c4:26:d5:41:3f:cc:
99:21:1a:26:61:14:9e:bd:1b:c8:ac:3c:3a:62:1d:
55:4f:4e:2e:39:ee:81:e2:b6:33:c0:4e:22:7f:46:
34:5d:3a:89:4d:2e:6c:a6:a2:50:90:3d:48:8e:a7:
be:13:32:be:8a:1e:9a:c1:87:d9:3b:05:e5:d0:f6:
85:4f:6d:85:6a:35:c6:59:c2:02:4f:8f:7c:50:b7:
3b:94:ba:31:50:02:b0:c0:bf:04:8a:de:49:f7:f6:
40:6f:73:b1:6e:e6:cc:fc:00:8a:5d:50:df:11:8b:
cc:65:5e:2d:15:07:8d:e7:76:ce:08:16:58:f2:21:
6d:90:03:7d:99:65:2c:f6:b4:12:6e:9a:3a:ad:fd:
08:c2:d9:96:c0:f7:e1:27:b0:9f:aa:3e:d8:1b:65:
83:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:CF:54:55:FB:BC:FD:75:08:A4:FB:04:56:BF:94:80:8C:C4:9C:31
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/r89UVfu8_XUIpPsEVr-UgIzEnDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0c:e6:87:bc:93:e2:4a:de:f8:39:3c:ec:26:f0:0d:e4:43:ad:
d8:57:5e:ee:8f:d9:65:f5:c6:75:cc:eb:3b:db:96:70:56:20:
d3:7b:4f:7b:ad:7f:cc:31:27:09:41:fe:b3:58:a7:0a:8d:2b:
31:45:af:82:e9:d5:87:73:3b:4f:19:db:01:0e:e6:1f:10:2f:
65:21:5f:dd:f5:df:95:41:16:01:e8:d3:dd:43:88:a4:0b:23:
00:62:70:e8:01:03:c3:db:91:85:f1:19:b5:33:38:9b:96:b9:
46:ad:e7:12:6f:71:5c:b7:c4:f0:9d:84:7c:42:a0:00:cc:74:
2d:be:83:24:8f:8c:d4:e6:31:03:0e:cf:bd:a1:07:b6:81:41:
b1:6d:20:68:96:5f:14:60:de:0e:4f:29:45:25:76:0e:d8:40:
c8:cb:97:ad:90:0a:84:33:8e:f0:6e:cd:6f:2c:2d:1f:4d:2b:
97:d0:14:eb:8b:e1:da:5d:cc:9b:d5:8f:aa:d3:83:e4:94:3b:
07:3c:30:ca:b9:d6:6a:f5:c5:b9:cc:b8:49:09:18:ed:5d:89:
37:44:a3:23:26:7f:7b:2c:d0:5e:07:0d:ad:8e:04:68:ec:c9:
0d:68:98:cc:26:c9:94:88:2a:b1:23:61:a7:fa:fa:fc:c1:50:
67:08:6d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:12:25 2025 by rpki-client