Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/s1ER-Hs4isSb8KJrU5at303Gfck.roa
File: s1ER-Hs4isSb8KJrU5at303Gfck.roa (raw, json)
Hash identifier: CV2kT8BOigz/JvTpwIZ04/Og51duiqAAZv61x3/ledQ=
Subject key identifier: B3:51:11:F8:7B:38:8A:C4:9B:F0:A2:6B:53:96:AD:DF:4D:C6:7D:C9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188E25D2A98D4EE601CA9D25D4A9956972E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/s1ER-Hs4isSb8KJrU5at303Gfck.roa
Signing time: Thu 22 Jun 2023 09:08:56 +0000
ROA not before: Thu 22 Jun 2023 09:08:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e2:5d:2a:98:d4:ee:60:1c:a9:d2:5d:4a:99:56:97:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 22 09:08:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b35111f87b388ac49bf0a26b5396addf4dc67dc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b5:a5:54:33:1e:90:e3:12:fe:2e:68:51:af:
3f:d6:09:c7:5c:28:d7:5c:5d:31:b4:03:50:29:a2:
39:6b:77:fe:50:d1:f8:1b:ac:0f:1b:9b:28:67:99:
f7:00:44:25:a8:d3:52:ab:dd:61:bb:12:93:79:4c:
fc:b5:2e:40:ef:0a:07:c4:c6:a9:9d:3d:d8:44:47:
ef:7d:c3:29:32:02:d7:33:3b:50:7d:bf:92:55:52:
48:7a:cd:b6:99:de:18:fa:07:ff:52:e3:4a:41:13:
34:f2:8b:14:19:01:ed:9d:a0:ac:82:70:d2:1a:be:
20:45:83:98:f7:79:61:ec:e3:24:26:8d:11:1e:3c:
85:f7:68:9f:7d:f7:ee:43:c0:16:35:a4:09:a8:20:
40:05:73:b0:10:40:6b:87:83:0c:0c:fa:f1:8b:1a:
44:c0:f6:6a:c1:55:fe:f7:24:33:54:3d:5c:c4:aa:
a5:78:37:03:31:3c:9a:a2:ed:81:8e:a3:07:cc:87:
5e:71:d5:b6:94:3a:cc:2e:72:74:11:39:cc:4f:64:
1e:6a:c2:2b:49:29:60:aa:32:5a:c2:2e:46:7e:7b:
44:69:89:f8:8a:1b:71:58:98:4e:f2:56:80:c5:63:
cd:5b:13:a2:b3:59:e2:9c:11:f8:cf:5a:2f:27:6d:
d5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:51:11:F8:7B:38:8A:C4:9B:F0:A2:6B:53:96:AD:DF:4D:C6:7D:C9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/s1ER-Hs4isSb8KJrU5at303Gfck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
86:a6:dd:c8:be:01:41:71:27:50:57:8c:04:f5:fe:d1:a3:ab:
e1:3e:b1:b0:67:f6:b1:c3:9a:74:d7:40:a3:9d:4a:21:9e:96:
31:2f:2d:69:9e:79:e6:ed:93:5e:26:ba:74:37:5f:4f:ce:4b:
6a:9a:79:06:5d:74:1f:03:03:fd:3e:3b:82:ea:2d:a1:30:e9:
09:db:9b:e9:2e:d0:87:4b:fd:8e:48:62:04:e1:ae:50:10:8f:
ac:21:9b:6e:64:e7:44:ed:b5:f8:dc:ec:c2:91:39:ef:be:36:
8a:46:61:93:4b:56:e7:5d:c1:57:df:4c:6a:af:88:93:41:f5:
51:64:45:00:01:ff:fc:d8:4e:8f:39:33:e2:6d:89:89:f0:e8:
8c:0b:f8:21:89:17:2b:cf:2a:b7:e6:7c:fe:c6:59:fc:82:9e:
10:bf:a6:56:01:cd:86:99:f8:4c:cc:f5:32:b0:68:77:f5:bc:
b8:50:6a:4a:75:a4:29:d9:d8:be:cb:a4:3b:fe:de:50:85:49:
b0:12:a4:8f:7b:04:c5:1e:a6:98:6f:fc:89:31:99:3d:4e:54:
52:27:ad:80:14:f4:72:40:d6:b9:12:dc:35:9b:0a:a1:0e:70:
58:f2:d7:f1:24:bb:f0:c4:de:e7:05:ae:21:df:b6:c8:d2:88:
73:1b:5c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:43:29 2025 by rpki-client