Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/u6zLp4NWK8Tw2sV1SVQyPHhLECM.roa
File: u6zLp4NWK8Tw2sV1SVQyPHhLECM.roa (raw, json)
Hash identifier: 5RSxk/xTmv2AmhzszZxkzhIzYDXTWlXbaxnE7oOsykw=
Subject key identifier: BB:AC:CB:A7:83:56:2B:C4:F0:DA:C5:75:49:54:32:3C:78:4B:10:23
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188A7C9FBCD3A7E17E9CACED73F607BFA18
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/u6zLp4NWK8Tw2sV1SVQyPHhLECM.roa
Signing time: Sun 11 Jun 2023 00:10:12 +0000
ROA not before: Sun 11 Jun 2023 00:10:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:a7:c9:fb:cd:3a:7e:17:e9:ca:ce:d7:3f:60:7b:fa:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 11 00:10:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bbaccba783562bc4f0dac5754954323c784b1023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:85:9c:42:c8:1c:a5:38:6d:69:a1:99:58:3f:
b7:be:0e:91:5d:f3:e5:6b:e2:e9:7d:d6:1c:d1:b8:
f0:8b:06:99:26:5e:d9:76:b1:f9:30:11:7d:71:3b:
0d:ca:3a:1a:48:57:52:76:45:87:b5:9f:2d:22:73:
63:66:de:c2:e8:c3:ac:4c:9b:58:2a:2b:f3:a9:35:
1c:0e:e1:47:c3:72:dd:97:85:37:72:da:6b:22:63:
9b:d3:60:d8:44:84:0b:6c:05:fc:da:49:70:ca:15:
57:44:e9:ea:02:97:39:2c:07:02:9f:50:29:c4:8b:
06:29:ef:4f:86:cd:9b:a6:9c:e6:e3:91:29:8a:7f:
b4:9d:68:7c:06:a1:d4:bb:2e:12:b2:ce:b1:5b:53:
b7:f0:b9:52:c4:58:01:b8:3a:5f:09:4b:2c:c7:99:
3f:34:3c:2c:68:eb:29:68:e8:21:3b:f6:d2:2a:80:
92:5c:82:14:28:1d:04:78:9d:e7:cd:1d:eb:da:1e:
bf:e1:bd:8a:66:45:ce:3a:f1:fc:0a:3b:1e:68:40:
9e:63:d2:3f:b6:0a:24:73:56:bc:22:c8:16:61:d6:
1a:b6:df:9d:78:1d:2b:0c:51:d6:06:40:ac:ee:c5:
28:c4:77:a1:52:d4:9f:75:2b:d6:d1:c0:74:c9:6d:
5b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:AC:CB:A7:83:56:2B:C4:F0:DA:C5:75:49:54:32:3C:78:4B:10:23
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/u6zLp4NWK8Tw2sV1SVQyPHhLECM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5c:02:e6:7e:24:8f:c3:a1:5e:18:3f:87:76:1b:5a:9a:f8:65:
56:ad:89:e6:43:93:87:c0:57:9a:69:ae:f4:bd:9e:85:af:0c:
8b:9a:f2:ab:bd:7b:52:28:e3:55:cd:69:16:06:72:d4:ef:13:
88:0d:70:22:f5:6f:72:00:66:c8:21:91:6e:07:de:15:9e:b4:
e2:d2:6a:07:b2:4d:7f:6d:7a:d2:8e:38:fc:ac:e9:cd:69:70:
9c:85:fc:ec:4b:d7:b2:c2:19:32:02:0f:e6:bb:6c:f0:b1:b1:
95:05:fe:0b:86:14:03:9f:28:81:b3:ea:80:07:aa:94:2f:f2:
62:20:bd:a3:df:3e:09:48:e6:7e:0a:ab:1e:ee:07:14:6f:6b:
60:a4:8c:8e:06:d1:f5:f9:1b:f9:77:a8:fe:f4:10:67:35:5b:
d6:1f:91:47:2b:b5:b8:1b:9e:9a:d1:6a:6e:05:ca:a4:f1:3e:
5f:f4:bf:f4:53:24:e4:db:65:38:8d:35:f1:52:b6:56:18:c3:
d3:d4:8b:fb:33:d1:aa:69:50:8d:01:81:32:5d:b0:18:f9:67:
02:7b:c9:60:80:e4:08:f3:16:f8:08:49:00:8c:06:bb:f0:77:
08:c1:a1:67:e4:c7:94:94:d8:a3:b0:a9:59:d9:ef:a8:c3:63:
bd:fd:13:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:12:54 2025 by rpki-client