Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/usleN7mNaoZ1IywFj53yEKQ74W0.roa
File: usleN7mNaoZ1IywFj53yEKQ74W0.roa (raw, json)
Hash identifier: +ivPPRAS1R1XhMeOJoEfE5u7F5MNXgJPNYyDr2Yzkro=
Subject key identifier: BA:C9:5E:37:B9:8D:6A:86:75:23:2C:05:8F:9D:F2:10:A4:3B:E1:6D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189661FDFEB3000FADCC879606095223AAD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/usleN7mNaoZ1IywFj53yEKQ74W0.roa
Signing time: Mon 17 Jul 2023 23:11:52 +0000
ROA not before: Mon 17 Jul 2023 23:11:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:66:1f:df:eb:30:00:fa:dc:c8:79:60:60:95:22:3a:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 17 23:11:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bac95e37b98d6a8675232c058f9df210a43be16d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b4:2c:91:a4:98:41:5f:05:45:6c:0e:f8:a4:
a9:f7:1c:f2:92:f9:39:3f:b9:ec:f4:0c:5e:35:6d:
f0:ae:e4:d2:77:43:e3:2c:81:17:b3:b6:08:12:92:
34:af:4d:e5:bf:aa:a8:4d:d1:c1:61:42:0f:bb:da:
55:94:a8:09:d2:da:26:e3:7e:b7:27:9a:b8:b2:db:
ef:23:de:a6:34:64:e9:dd:06:bc:9b:6e:c2:f8:7b:
59:19:43:36:2f:ed:e4:5e:3f:54:9a:70:53:8c:32:
a0:70:fd:ae:72:b4:15:29:e2:a4:ca:34:e3:67:6b:
94:aa:b7:ab:65:49:56:90:16:ce:70:7b:38:72:1b:
05:0f:d6:b1:30:be:8a:ba:ad:89:9e:e5:80:81:9e:
f3:1d:4a:89:7f:12:d4:98:52:fd:3a:c1:90:7e:92:
5c:89:37:ee:55:1d:5e:ea:74:50:85:b3:fa:4f:eb:
26:d1:f7:2a:b7:9a:98:c6:cd:a4:1c:36:95:06:73:
41:7b:1e:a1:11:5c:ce:c7:ce:f3:d2:5a:7f:30:f5:
f6:72:0e:58:ce:c2:f2:fd:be:ce:9f:03:79:cd:b9:
e0:63:43:d6:a3:09:11:c3:72:44:86:4f:6e:d4:54:
d4:f7:ff:7e:8f:f6:f0:98:ad:d2:86:b1:04:10:c4:
9b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:C9:5E:37:B9:8D:6A:86:75:23:2C:05:8F:9D:F2:10:A4:3B:E1:6D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/usleN7mNaoZ1IywFj53yEKQ74W0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
18:04:13:9f:3d:d2:66:80:90:c2:02:b6:d0:75:36:b3:c3:37:
f1:a1:d2:20:63:64:0b:b6:87:49:83:a0:83:77:6d:a1:ee:31:
39:e4:3e:55:7f:b7:df:2f:0c:8d:df:6c:48:14:7a:59:b1:1d:
74:55:79:90:60:4c:49:c5:b5:12:c9:3d:0f:bf:c8:12:a8:c8:
cf:ba:0b:fb:44:ca:4a:97:99:f7:50:68:58:d3:8c:7c:71:42:
1d:21:29:95:8f:17:53:98:49:9b:c5:c3:b5:a8:de:ee:58:6e:
46:d3:f2:76:35:71:9a:94:4b:5a:0c:55:4b:c9:17:09:68:80:
39:bd:e8:fb:ff:26:2d:da:c3:25:08:51:55:3e:85:c3:27:3d:
53:59:f4:24:e8:92:42:51:b3:2f:c7:12:bc:18:1a:df:23:31:
77:6c:b4:c9:7a:16:78:c0:16:37:b1:ac:d4:1b:8c:4c:63:3b:
93:c8:3e:a0:22:f3:a2:e3:8c:2e:f3:a4:99:65:41:09:89:40:
34:50:87:be:27:e3:b5:6c:4b:c1:18:27:b1:47:4c:ca:b1:1d:
ee:03:84:98:2a:84:17:b3:34:af:36:4b:3a:f1:d0:80:f4:52:
b9:74:bf:63:6f:96:70:3e:4d:f4:08:3c:25:5f:92:c2:de:48:
bc:a9:25:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 04:13:34 2025 by rpki-client