Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0Rg8ngIXR2MZ5YUUytVoJHbgYh0.roa
File: 0Rg8ngIXR2MZ5YUUytVoJHbgYh0.roa (raw, json)
Hash identifier: tR5hmzwIBlpMgARhj7uNB7pZotStHY6GFvhAFR3lQBc=
Subject key identifier: D1:18:3C:9E:02:17:47:63:19:E5:85:14:CA:D5:68:24:76:E0:62:1D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A1D9CF694E51AB21374D958A408859AE2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0Rg8ngIXR2MZ5YUUytVoJHbgYh0.roa
Signing time: Tue 22 Aug 2023 14:19:00 +0000
ROA not before: Tue 22 Aug 2023 14:19:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:178d:7ed9/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:1d:9c:f6:94:e5:1a:b2:13:74:d9:58:a4:08:85:9a:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 22 14:19:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d1183c9e0217476319e58514cad5682476e0621d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a5:cd:cf:fe:aa:45:55:9a:7b:d7:8b:e4:82:
e6:bb:70:d8:97:64:a5:f4:c1:ae:c1:1d:66:bf:0c:
33:e7:88:43:91:a4:76:05:3b:0f:d7:66:32:69:65:
e1:0a:b0:5b:93:f9:4c:1a:83:db:a9:5f:9d:d1:74:
bb:fa:01:f4:23:9e:07:6f:c9:96:c8:db:bd:0a:4a:
d9:ae:ac:29:9c:4e:a4:72:7d:d7:fd:03:00:bc:30:
8a:11:bd:3a:87:e9:e4:41:a2:dd:d1:9c:79:a3:20:
53:82:23:14:b7:3c:0f:79:1c:0c:2a:e3:e4:3b:b1:
3c:7d:52:e2:e8:54:ba:53:4d:a0:f0:1d:73:0c:51:
1a:91:cc:57:6a:48:49:33:ea:77:d1:85:f2:bd:ac:
ca:83:2a:24:29:f9:46:14:f6:81:17:af:cb:79:2c:
93:e4:70:79:92:8e:e3:b5:d4:7a:cf:95:41:f6:6f:
7b:2d:ec:1c:99:3f:fb:4f:ae:69:47:f8:07:08:04:
fe:1a:f1:4b:19:35:d5:13:c1:ea:45:8f:16:2f:fd:
e9:fd:ea:42:93:a3:c5:5c:33:57:7a:da:e4:a9:32:
59:64:ef:07:6f:99:c5:5f:eb:8d:4f:df:58:b1:ba:
37:1f:8f:70:9e:46:cf:37:ed:2b:d5:be:dd:7f:63:
ed:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:18:3C:9E:02:17:47:63:19:E5:85:14:CA:D5:68:24:76:E0:62:1D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0Rg8ngIXR2MZ5YUUytVoJHbgYh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
52:82:fc:50:56:44:03:54:37:70:2c:49:bd:6a:9e:6b:fa:a6:
8c:e2:e2:67:50:1d:fc:ad:11:02:84:cd:4e:1c:c5:9e:6c:ea:
23:6e:c1:c7:d4:af:29:a3:e6:2c:97:b8:1c:59:8a:9b:c2:af:
99:23:fe:d4:6b:d7:3a:37:58:74:85:9a:12:53:fb:4f:90:af:
56:fb:df:26:a9:1e:99:a4:79:82:0f:de:00:66:3b:05:2c:36:
ff:fa:cc:ba:53:fd:99:a2:0c:e9:8b:d7:db:1e:4f:fb:e0:1d:
75:b6:20:16:5d:52:7b:06:58:15:e0:83:bb:06:ea:43:b8:54:
83:6d:b1:56:20:10:4a:3e:d6:da:07:2b:cc:14:7c:3a:dd:5f:
3b:7a:53:3d:c1:58:3f:5f:b1:25:6a:c5:5f:ef:ae:8e:95:a9:
4d:12:8a:f6:5b:cf:20:91:e4:c4:02:7c:33:4b:1c:72:b4:c8:
56:32:f7:88:b7:11:d3:a2:a1:6e:68:3f:39:df:5e:51:28:aa:
5d:42:b5:de:b7:eb:9b:57:ed:7b:b6:0d:4f:9d:fe:e8:61:d4:
bf:9d:41:53:ae:e4:24:4f:fd:a7:57:f5:81:53:df:3d:9c:0c:
8b:d6:c2:77:ba:9e:c6:4a:aa:3b:f3:41:cb:2b:23:eb:2e:ac:
c6:be:a8:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 09:43:13 2025 by rpki-client