Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/u_pKo9GgM_Wwua6kSutCH_rwBms.roa
File: u_pKo9GgM_Wwua6kSutCH_rwBms.roa (raw, json)
Hash identifier: 8dbT69wKWzvQwKUtj4fFxrW5RbDpMKx4KRlO2E36T7g=
Subject key identifier: BB:FA:4A:A3:D1:A0:33:F5:B0:B9:AE:A4:4A:EB:42:1F:FA:F0:06:6B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188909C72BC4CD994A6069C069352D4A3BD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/u_pKo9GgM_Wwua6kSutCH_rwBms.roa
Signing time: Tue 06 Jun 2023 12:09:12 +0000
ROA not before: Tue 06 Jun 2023 12:09:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:90:9c:72:bc:4c:d9:94:a6:06:9c:06:93:52:d4:a3:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 6 12:09:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bbfa4aa3d1a033f5b0b9aea44aeb421ffaf0066b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:61:0c:8d:9c:15:2a:ed:c7:e1:d8:ca:61:1f:
66:7a:99:9d:c2:9b:bc:14:3a:3f:8f:f5:5b:3f:71:
97:b5:3c:8e:df:48:62:22:da:be:05:bd:61:f1:4c:
fd:95:03:a6:88:f3:a6:96:57:cc:c2:77:1e:b3:28:
4d:fa:1e:c3:52:a2:a7:c6:8d:d4:6e:a4:bb:1b:44:
90:fb:b8:e2:1a:a2:bb:40:e4:33:c1:36:74:eb:e6:
e9:c5:4e:44:ee:9b:05:eb:ee:ec:f3:8a:9f:aa:04:
ae:5f:94:a4:dc:32:c0:51:57:19:c3:ce:42:1e:3f:
57:89:e1:2c:9c:fd:41:0c:b1:c4:c3:84:81:48:f2:
88:7f:ca:ad:35:8f:20:28:06:cc:f9:38:64:22:ad:
3d:e4:23:68:e7:92:f0:1d:20:f8:05:9a:cc:f4:3f:
9e:a5:89:f3:8e:f8:0c:ab:8b:23:7c:03:67:fc:8c:
9f:b0:b4:bc:68:fb:2f:f5:97:cb:2f:34:ae:1d:dd:
2f:07:16:95:e9:cc:3c:fa:bb:20:0e:86:29:f8:97:
4c:64:0c:34:5f:84:9b:eb:9a:8f:6e:f9:9f:b3:aa:
47:0b:86:1c:e7:58:e9:a7:48:f3:b6:a3:1d:6a:2a:
31:3a:ad:93:9e:75:dd:92:fc:87:c0:14:ce:d7:cc:
b9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:FA:4A:A3:D1:A0:33:F5:B0:B9:AE:A4:4A:EB:42:1F:FA:F0:06:6B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/u_pKo9GgM_Wwua6kSutCH_rwBms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
68:11:e4:1c:69:02:79:30:10:d8:d7:82:fd:da:d8:c3:d9:99:
c0:47:7d:3f:5a:33:78:da:5f:e8:1f:b6:8d:ca:1b:4d:ab:89:
23:8a:31:75:ba:5e:61:55:9c:a0:5a:d8:b5:89:43:ad:f7:fb:
0c:d2:87:fa:6d:f5:e5:2c:5b:31:3b:e5:d1:15:aa:e5:38:ba:
b3:4f:09:f8:3a:27:b3:0f:09:c6:f0:c7:e6:a1:3e:1d:5d:51:
e6:20:56:90:09:7f:b2:b5:b6:06:28:dd:5d:23:d5:74:3e:8c:
c7:9d:10:a3:9e:11:8f:38:05:6c:e0:06:a9:8f:87:8d:38:64:
42:20:b8:17:f9:17:ed:98:ae:06:20:34:35:f1:76:13:ca:8a:
a6:bc:fe:9e:cd:01:af:ac:22:fa:5a:a1:a8:de:fa:20:2c:8e:
06:a7:8d:a2:00:c0:2d:f0:39:a1:cd:e8:41:99:3e:a7:85:ee:
24:f0:83:1f:40:fe:55:61:e5:ef:53:df:b6:7a:12:e8:15:c3:
07:49:76:46:9c:1a:50:81:3d:6b:ec:20:a8:58:e8:67:ff:6a:
6f:0f:de:6d:e8:6e:72:be:8b:c0:46:56:2f:48:bd:16:11:e2:
89:24:41:fd:a7:9e:1d:da:5f:c2:d4:3a:dc:a8:59:f1:51:cf:
ff:d7:8d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 21:57:56 2025 by rpki-client