Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/v_s6Ve1FjyRPiWhNSWdCzPQEjM8.roa
File: v_s6Ve1FjyRPiWhNSWdCzPQEjM8.roa (raw, json)
Hash identifier: 9d1feBMgZn+0Uj5LFgFqmBoRNSC4RunrS4MM7AIPhOw=
Subject key identifier: BF:FB:3A:55:ED:45:8F:24:4F:89:68:4D:49:67:42:CC:F4:04:8C:CF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018878CBF42AB498D283C4ACBD761A903F4A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/v_s6Ve1FjyRPiWhNSWdCzPQEjM8.roa
Signing time: Thu 01 Jun 2023 21:10:12 +0000
ROA not before: Thu 01 Jun 2023 21:10:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:78:cb:f4:2a:b4:98:d2:83:c4:ac:bd:76:1a:90:3f:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 1 21:10:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bffb3a55ed458f244f89684d496742ccf4048ccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cb:98:87:fd:63:53:3b:40:ab:33:b0:56:43:
08:40:2c:e9:3c:d1:bb:fe:8f:a3:60:f8:84:53:dc:
08:62:24:1c:87:0b:1c:ff:9c:07:2b:9d:69:be:61:
7a:09:bf:08:6c:8b:86:f4:c7:9a:d6:38:80:7f:c9:
55:88:9b:d5:49:7e:08:a3:7f:8c:2c:e9:a2:f7:22:
dc:89:52:ab:72:95:3a:75:0e:b6:2f:fa:6e:9b:0b:
66:1c:14:20:0d:25:2c:d1:12:37:73:2b:22:b2:ea:
f2:62:a1:7a:9a:e7:60:cb:d7:2d:b3:da:73:08:d3:
f3:4b:d7:ca:19:e0:54:53:1e:28:7a:67:0b:9d:aa:
0b:12:a6:a5:3f:36:20:87:99:3a:bc:31:80:60:5e:
f5:0a:3f:fa:e7:5e:42:12:ab:8f:cc:88:8e:93:7a:
a8:3e:e8:f7:91:bd:b0:6d:d3:5c:93:55:ef:c2:65:
aa:05:b6:ab:9f:b2:3c:46:02:11:58:5a:21:5d:c5:
2f:a8:80:ba:9b:ca:bf:89:cc:c9:da:f4:3d:c9:9e:
3f:ce:b7:16:05:ef:a2:50:1f:b7:1b:4e:46:66:de:
86:b7:cb:23:7c:5c:3e:14:e6:0d:e0:7e:d9:52:34:
de:a9:f9:01:ed:e7:59:80:36:0f:1e:7e:76:c8:3b:
f6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:FB:3A:55:ED:45:8F:24:4F:89:68:4D:49:67:42:CC:F4:04:8C:CF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/v_s6Ve1FjyRPiWhNSWdCzPQEjM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a5:63:27:ee:db:bd:7e:e0:7a:9c:2b:4b:28:be:60:67:7f:d8:
32:74:63:c1:eb:a3:d1:6a:48:53:8f:37:e0:58:b9:e1:17:3e:
5a:eb:e0:60:00:07:98:83:10:ad:34:ae:51:cf:50:ce:5d:22:
35:c8:19:b3:8b:e5:4c:38:1e:fb:a1:66:fb:51:13:ff:81:c4:
b0:b9:fd:90:6f:b1:ab:42:ee:ba:18:07:1e:6c:aa:43:f0:f6:
cd:f5:e8:c6:bb:9f:11:e5:6f:be:fc:8e:1e:79:55:b9:19:4c:
a7:a3:d6:3a:ac:93:e0:15:11:e9:79:06:bb:d3:4e:87:cc:14:
6d:ef:9d:5d:02:2a:41:60:ff:d9:09:57:c3:7e:6d:20:34:e0:
ca:79:1c:c8:33:c1:c6:42:f2:01:dd:51:fd:9a:e0:8f:a7:51:
e9:78:e7:3b:ee:c3:5f:7c:e7:7e:32:0a:07:2b:d7:7c:57:32:
66:09:c6:c8:71:b5:20:0d:e8:2b:6c:00:f0:04:43:26:00:f7:
64:e5:ec:b2:65:65:88:b9:e6:0c:85:2d:97:14:3e:33:ad:ca:
fe:10:78:92:a2:5c:b0:21:b4:e9:b6:49:03:c6:78:b8:9d:80:
3e:90:79:84:df:e4:15:c0:0e:d5:fd:6a:aa:3b:17:66:86:d0:
c1:6e:87:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 20:25:26 2025 by rpki-client