Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ruCj9Vs3x7E4dWUe-mZtWAnOwaA.roa
File: ruCj9Vs3x7E4dWUe-mZtWAnOwaA.roa (raw, json)
Hash identifier: zSrUdGvRSO7R1cRBeYFTJvmrgvpAFNLcohacuXuNWes=
Subject key identifier: AE:E0:A3:F5:5B:37:C7:B1:38:75:65:1E:FA:66:6D:58:09:CE:C1:A0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188B392838788773441AD30BBCF6A52F2AE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ruCj9Vs3x7E4dWUe-mZtWAnOwaA.roa
Signing time: Tue 13 Jun 2023 07:05:03 +0000
ROA not before: Tue 13 Jun 2023 07:05:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:188:b391:f209/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b3:92:83:87:88:77:34:41:ad:30:bb:cf:6a:52:f2:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 13 07:05:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aee0a3f55b37c7b13875651efa666d5809cec1a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a0:44:51:19:c3:a4:26:27:29:17:de:a1:07:
89:01:37:b2:db:a3:66:aa:19:94:ac:62:c6:2c:9a:
1c:83:cb:f0:84:ad:53:85:54:a1:b9:31:72:26:c9:
82:c6:f2:eb:45:be:8e:36:f9:eb:f3:b4:3f:9c:27:
08:80:e6:3f:86:71:e5:ae:44:8c:32:f9:56:97:fa:
6e:0f:48:d0:15:48:5e:e8:3f:20:20:87:49:c7:04:
3b:10:1e:dd:db:71:d9:73:97:15:ef:5f:9b:91:3c:
64:51:34:8a:4b:a4:ff:a1:cc:e4:43:51:a1:eb:29:
ff:8f:d1:a0:c4:af:59:4f:f9:e6:78:d8:f3:3f:79:
62:71:f6:8f:96:f8:c5:68:03:ab:9b:88:b0:d2:ef:
14:17:50:4d:f8:f3:5d:ed:55:fa:ee:d7:b9:9b:45:
08:42:d4:bc:e4:35:9a:55:81:29:74:74:e8:fc:f3:
ba:20:4d:46:61:99:4e:f9:e8:0c:b9:96:92:b1:f0:
fb:43:64:94:10:34:39:7f:96:80:44:2a:a5:40:af:
99:44:a1:40:42:bf:5d:5f:55:fa:6c:77:69:30:a8:
ab:65:c7:64:36:1e:01:f1:6e:16:0d:9b:78:99:ae:
92:1d:04:64:24:63:3f:c2:51:d8:ee:db:c3:23:ac:
ef:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:E0:A3:F5:5B:37:C7:B1:38:75:65:1E:FA:66:6D:58:09:CE:C1:A0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ruCj9Vs3x7E4dWUe-mZtWAnOwaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b4:76:22:27:5b:4e:48:19:33:25:ba:99:12:db:42:c5:00:e3:
99:61:c8:54:0d:3f:ed:28:fb:60:20:3d:a1:e9:af:b2:85:83:
87:20:be:cf:47:93:aa:4c:5e:6b:ca:c8:4e:85:de:72:d9:17:
9c:e6:da:21:7d:27:03:8d:30:76:0a:05:ef:f6:bb:30:f2:75:
4f:fb:83:4d:cb:94:84:70:3c:0a:52:79:62:48:7f:53:11:12:
7e:ee:18:74:e8:ac:b1:d1:34:53:e2:ea:1f:4e:46:7b:bb:b1:
f7:37:cb:5e:93:ff:c7:64:47:73:4d:4a:4e:46:a8:59:fe:ec:
b5:1b:85:e7:94:5c:54:16:49:a1:20:e6:05:74:21:2b:aa:ef:
c1:c3:ee:5e:8b:c9:37:00:d1:80:f1:cc:6a:83:19:eb:02:b8:
bb:7b:18:dd:0d:95:88:45:1c:1f:58:fd:f0:7b:f0:12:09:2c:
a0:47:0f:88:8c:75:7e:21:3a:8b:36:b5:6e:a2:ed:fa:46:39:
1f:ba:30:c1:5c:7f:dc:d5:ff:2f:9c:3a:5e:09:f2:d4:44:5e:
5b:7d:72:ca:fc:f8:e7:5b:12:74:94:59:19:58:11:9b:7c:00:
18:7c:06:9e:1f:8f:eb:f2:7d:33:f0:95:05:0c:d9:58:46:1d:
c0:09:d5:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 16:06:09 2025 by rpki-client