Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sSUxdJmT_Gq-gA0rZSkPZghuaEc.roa
File: sSUxdJmT_Gq-gA0rZSkPZghuaEc.roa (raw, json)
Hash identifier: 6idEdUEC0jxciGFRKKL00I8wdOGwEbBcEiqYKSXtuwc=
Subject key identifier: B1:25:31:74:99:93:FC:6A:BE:80:0D:2B:65:29:0F:66:08:6E:68:47
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186D287FEF1AC27E291ECE08D622D7B2F95
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sSUxdJmT_Gq-gA0rZSkPZghuaEc.roa
Signing time: Sat 11 Mar 2023 21:16:13 +0000
ROA not before: Sat 11 Mar 2023 21:16:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:d2:87:fe:f1:ac:27:e2:91:ec:e0:8d:62:2d:7b:2f:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 11 21:16:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b12531749993fc6abe800d2b65290f66086e6847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ad:fc:5d:25:ee:5b:62:3e:e4:cb:4d:ae:32:
bc:13:53:af:5a:b9:e7:09:09:78:b5:b5:8f:a4:15:
29:aa:a1:ba:1c:df:39:50:1f:2e:08:1c:20:6d:06:
d3:80:96:f4:0c:43:56:3d:23:b9:da:4e:30:78:d9:
53:44:a1:d0:e1:6f:88:ed:c3:4e:cf:17:a9:8b:ba:
c7:b8:38:78:a4:07:6c:a7:eb:e5:0e:ae:9f:77:ff:
f9:76:6b:ca:97:03:b9:1d:29:a3:48:ae:34:4a:8f:
97:2e:a8:e9:dc:62:5f:35:1f:91:da:a3:51:cf:40:
86:36:e8:80:eb:83:17:7d:9b:52:a4:a8:d2:46:14:
81:37:5b:a4:a3:c1:42:ca:2e:7b:e1:25:6e:f5:08:
79:f5:4e:bc:ac:90:bd:f8:1a:7d:69:b0:ef:aa:f4:
78:a4:3d:7e:6c:42:e8:18:90:ed:67:9c:a7:15:78:
d5:db:62:b1:42:52:2f:91:ad:8c:79:48:4a:c9:7e:
55:32:02:4d:3d:10:05:eb:7c:e7:b3:15:97:79:ef:
77:1c:0c:f4:7b:f1:d3:b6:f7:56:1e:94:bb:a3:85:
54:ea:da:7d:ef:a3:23:71:87:76:64:47:87:fa:28:
c8:b6:10:c7:d9:10:f1:12:fe:a8:27:b1:07:a4:b2:
8a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:25:31:74:99:93:FC:6A:BE:80:0D:2B:65:29:0F:66:08:6E:68:47
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sSUxdJmT_Gq-gA0rZSkPZghuaEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6a:a2:16:b7:67:21:a3:22:ec:cc:b1:a6:7d:41:a0:df:41:bf:
c4:78:65:65:5b:f2:fe:bc:8b:d6:63:52:b1:c4:a3:60:35:32:
bf:0d:b4:65:af:48:09:99:32:49:2a:63:d2:46:c8:c9:60:4e:
d7:fb:47:93:1b:35:3f:56:7b:ad:21:da:73:7c:05:35:df:d6:
52:7c:5b:df:9e:0b:e3:93:bb:05:4a:55:33:16:e8:fa:4d:2f:
76:2a:2d:49:16:9a:5c:5f:8b:24:28:69:3f:13:c9:13:a1:71:
d1:b5:fc:7a:c9:61:8a:32:3c:e2:ff:37:13:cc:4f:67:14:96:
e2:9c:f8:d6:ae:9f:da:61:97:0d:37:c7:5a:47:33:03:e7:ee:
67:50:74:3a:9d:b9:dc:0b:ea:22:24:fc:bf:47:16:f2:7e:68:
df:b7:c2:6a:a3:fb:27:50:4c:e1:4f:a0:c6:6f:62:9a:c0:6b:
d0:8f:d2:0a:4f:71:81:d2:92:2f:00:18:e6:9a:09:10:60:f6:
58:f9:e7:2d:55:ca:4a:03:c6:c8:49:f2:6a:31:f9:03:a8:07:
37:98:b1:56:cd:82:87:73:ae:a7:b9:9e:58:29:cc:8c:49:8e:
ac:14:21:19:73:1c:34:03:81:34:19:05:17:db:e7:81:8c:70:
15:39:57:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 01:56:56 2025 by rpki-client