Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sG11Ucld4laC6s06fjW_piLoqhQ.roa
File: sG11Ucld4laC6s06fjW_piLoqhQ.roa (raw, json)
Hash identifier: C59DNWJ4pTpnb9+79fb65Jx2j1IHZ6uNVUIagqL56S4=
Subject key identifier: B0:6D:75:51:C9:5D:E2:56:82:EA:CD:3A:7E:35:BF:A6:22:E8:AA:14
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187409BA4FBBE858BFFEBEEBFBC2DCBCC8C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sG11Ucld4laC6s06fjW_piLoqhQ.roa
Signing time: Sun 02 Apr 2023 06:15:54 +0000
ROA not before: Sun 02 Apr 2023 06:15:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:40:9b:a4:fb:be:85:8b:ff:eb:ee:bf:bc:2d:cb:cc:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 2 06:15:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b06d7551c95de25682eacd3a7e35bfa622e8aa14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ef:90:f8:ec:43:56:ab:9c:76:e6:05:d8:fa:
2a:55:50:84:93:64:7d:94:64:61:53:f6:c9:68:7b:
41:78:41:8d:ab:1a:c0:a2:4e:ea:57:f8:5c:dd:3e:
e2:97:64:c5:c9:b4:4f:d0:38:5c:cb:fb:4f:5b:1f:
19:ed:2e:d1:14:8c:20:f3:fe:66:35:8f:ba:0a:93:
d7:88:64:6c:ea:54:f1:1e:e5:04:bb:b7:11:93:74:
20:89:18:01:dd:2c:5e:fd:e4:d7:0e:50:22:d7:2e:
aa:2b:99:58:04:48:5f:a8:fa:0c:4f:93:d1:dd:13:
3c:f9:09:3b:e8:d2:0a:d1:86:89:36:8b:16:0b:ef:
70:cb:a6:40:f4:90:31:09:07:22:bc:27:69:67:0d:
e3:0e:6c:b6:5e:b7:f7:61:cd:1e:f2:1a:16:01:1d:
f1:91:b2:a5:2d:c5:c9:45:d6:73:44:b1:b2:9f:91:
84:6d:3e:b2:b5:39:4d:a7:2c:c1:6a:88:8d:41:2b:
d9:43:5e:be:43:9f:79:4a:bd:2a:cc:20:45:aa:8e:
2c:e7:f5:38:8e:78:9c:37:46:e9:05:fe:ec:de:2b:
bb:8a:de:58:36:b1:b0:e2:b4:df:20:62:d9:d3:fa:
da:fe:d0:f3:94:61:42:6d:79:88:b0:76:20:08:06:
f2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:6D:75:51:C9:5D:E2:56:82:EA:CD:3A:7E:35:BF:A6:22:E8:AA:14
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sG11Ucld4laC6s06fjW_piLoqhQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9f:4e:df:ae:24:9b:09:9f:2c:5c:e6:40:7d:c7:fd:f9:9b:03:
be:fa:8c:27:38:77:df:ab:4c:71:cd:3d:00:da:84:cc:7a:37:
46:48:73:69:5e:82:2f:8b:f4:26:57:ef:ae:6c:2d:70:ef:f7:
eb:34:a3:27:25:f9:8c:79:8a:fc:ed:17:e5:d4:fe:bf:9b:b3:
64:44:63:2f:fc:dd:ed:84:67:f3:46:d4:a9:76:48:35:d7:47:
db:c9:7c:f8:26:cc:64:18:f6:80:bb:01:ab:1c:bf:2e:b7:1d:
6c:33:fc:20:a1:b8:48:47:02:1b:65:4d:3c:2f:b9:fc:64:d8:
e1:c6:b4:2c:d5:26:29:f1:37:b1:34:8a:98:fb:9c:01:d5:d1:
e4:76:98:9f:87:93:11:fb:9d:eb:7d:59:d3:80:aa:19:f5:73:
4b:ac:8b:8c:66:45:c6:64:5a:59:c9:b2:5c:b0:6c:12:fa:cb:
da:be:bf:26:cd:1e:10:76:03:2c:da:5c:f0:4a:83:68:b5:16:
6e:98:08:80:f3:94:f5:72:9e:74:2b:8a:d0:76:17:8b:a0:56:
51:a6:af:95:62:5e:c2:95:19:36:33:0e:f8:12:06:cb:bc:08:
17:34:15:77:41:f0:26:c7:a2:71:5b:c4:44:a3:3a:4e:2e:7e:
02:a0:6e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 22:51:47 2025 by rpki-client