Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sLs7oVQ-mq4wjpnY66D6HEUilgA.roa
File: sLs7oVQ-mq4wjpnY66D6HEUilgA.roa (raw, json)
Hash identifier: CFCsdg7ozsmuttADXumlpWlKgSlEBzIRzU9h95Qmvd8=
Subject key identifier: B0:BB:3B:A1:54:3E:9A:AE:30:8E:99:D8:EB:A0:FA:1C:45:22:96:00
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01880932E154B227A861DF8187DFD7457C20
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sLs7oVQ-mq4wjpnY66D6HEUilgA.roa
Signing time: Thu 11 May 2023 05:05:09 +0000
ROA not before: Thu 11 May 2023 05:05:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:932:4b9d/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:09:32:e1:54:b2:27:a8:61:df:81:87:df:d7:45:7c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 11 05:05:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b0bb3ba1543e9aae308e99d8eba0fa1c45229600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cc:04:d3:87:c5:1e:94:e2:4a:09:77:f7:e9:
84:5a:cb:49:b0:9e:93:56:c9:60:ad:74:18:e1:30:
f4:4b:e3:a8:a3:bf:6e:92:f4:46:80:a9:fc:44:56:
89:d7:e3:9b:41:fc:93:65:a9:d9:c2:d7:3d:bb:eb:
7d:90:7d:e4:61:a9:4f:02:e9:67:e6:79:67:ef:f0:
b2:f3:eb:55:ab:34:20:b0:f2:c9:a5:4e:2d:a4:fa:
49:77:6a:d8:80:50:d3:de:26:4c:3d:50:d4:91:fb:
fb:bc:4a:00:dc:62:b0:1c:61:b6:3a:77:c4:7e:cd:
a8:c7:88:55:1f:d7:3b:05:3b:b5:91:d4:98:23:13:
70:a5:7a:d3:61:29:f4:2a:66:cf:8b:d7:ef:ec:09:
2c:cf:1f:31:81:43:f2:5f:25:56:7f:49:7a:cc:78:
11:87:6c:82:e5:bc:9f:77:b3:ce:06:74:84:56:ae:
59:e5:c2:d5:45:05:e4:03:8b:5e:8e:53:68:a2:7c:
2f:c4:e5:83:ae:51:32:a4:03:2d:42:5e:57:f8:7e:
1f:a4:80:a9:fd:85:0f:24:07:6e:54:de:bf:23:3e:
b2:d1:b3:a1:7d:f1:83:27:22:74:b6:9c:9b:49:66:
1a:cc:63:96:b6:5c:8b:87:99:55:a3:e5:d3:02:0b:
5b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:BB:3B:A1:54:3E:9A:AE:30:8E:99:D8:EB:A0:FA:1C:45:22:96:00
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sLs7oVQ-mq4wjpnY66D6HEUilgA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
aa:1c:75:44:aa:e7:6a:88:bd:f8:07:41:44:78:60:42:3c:86:
37:19:2b:0c:90:c2:7f:d4:57:f6:2d:9d:69:27:75:16:f0:e7:
de:29:71:b4:2c:b1:db:8d:4a:19:e4:80:59:5e:35:08:5d:19:
7c:a8:9e:36:9b:d6:30:d6:fc:1c:75:d3:eb:74:80:70:db:7f:
a5:5f:91:1d:3b:a0:d6:88:c0:42:79:85:52:a9:26:ba:0b:5e:
d5:89:b2:34:3d:74:12:bb:a4:df:0e:85:53:e4:0c:0b:cf:f1:
d4:f0:ef:e7:e2:fb:b7:36:56:b6:14:28:cb:9a:1a:51:9e:92:
73:70:9e:61:ff:4a:7b:f1:de:6e:d8:bb:06:c2:61:3c:dd:ef:
10:e7:fb:f0:26:5d:79:18:0e:aa:22:46:04:4d:03:3f:32:75:
62:ec:70:7d:11:06:5b:f7:a9:47:c6:26:98:3b:fe:97:3a:51:
f2:85:dc:8f:65:d4:bb:16:69:ce:1c:c0:5e:1d:ce:18:a1:c4:
a7:9c:2f:ee:1e:fb:a7:7e:41:79:e0:78:84:e9:65:c1:05:84:
06:1b:4f:68:11:0a:f2:74:20:72:eb:44:58:f1:58:ad:43:26:
58:8c:f5:27:8a:a7:57:e9:19:f3:f3:9f:78:58:c3:16:d5:75:
22:bb:c4:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 21:37:13 2025 by rpki-client