Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-5lQrnNWICoG60xdK707I1sN2i8.roa
File: 1-5lQrnNWICoG60xdK707I1sN2i8.roa (raw, json)
Hash identifier: vVb7+orBcJa14TcMpATIemni6955E/NlivXEKM3SzDE=
Subject key identifier: FB:99:50:AE:73:56:20:2A:06:EB:4C:5D:2B:BD:3B:23:5B:0D:DA:2F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01887B2A08ACEC2F9A56B8A16120D81B3A86
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-5lQrnNWICoG60xdK707I1sN2i8.roa
Signing time: Fri 02 Jun 2023 08:12:12 +0000
ROA not before: Fri 02 Jun 2023 08:12:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:7b:2a:08:ac:ec:2f:9a:56:b8:a1:61:20:d8:1b:3a:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 2 08:12:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb9950ae7356202a06eb4c5d2bbd3b235b0dda2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:d0:ad:d9:6c:33:5d:73:76:6d:00:d0:6d:e5:
f7:d6:a7:a5:0e:36:e8:69:ec:bd:ba:ae:49:0e:8d:
e1:bb:87:e8:8b:d2:3a:39:18:f4:45:7a:36:35:7c:
f7:23:e1:11:44:74:32:e1:89:3a:39:8a:60:46:fc:
0f:63:7a:f1:33:a8:83:5b:62:ff:aa:d8:7f:40:b0:
40:4a:c7:ff:80:a3:5c:9f:42:ed:f8:45:03:74:0d:
3f:72:48:ea:b3:2d:67:7b:92:a2:fa:85:44:08:f0:
95:2d:67:21:35:68:b8:7f:ee:e3:06:ab:0b:2b:7e:
2a:50:f4:5e:cc:24:d3:42:b7:46:32:e3:8d:4b:10:
48:63:39:86:57:f7:b1:0c:e2:e5:11:af:28:14:9e:
a3:e7:22:17:af:8b:2a:1a:57:f0:84:b5:78:5b:5d:
1b:8c:85:03:d1:b7:d7:bd:4d:5c:5c:2b:c8:e1:1f:
f9:c8:bf:0e:a5:e7:b4:f3:50:fc:dd:c4:6a:22:6a:
ee:55:7e:84:8c:05:9c:b5:bb:f2:c7:e9:ff:9a:f4:
1b:cf:06:e4:d2:3a:97:43:ad:d1:7f:17:63:e8:d7:
cc:f2:5b:d0:62:fa:4e:c9:45:75:87:49:f4:3a:0a:
e3:75:45:61:6a:03:3f:21:e8:83:d5:49:7c:f1:f7:
29:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:99:50:AE:73:56:20:2A:06:EB:4C:5D:2B:BD:3B:23:5B:0D:DA:2F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-5lQrnNWICoG60xdK707I1sN2i8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5a:a0:d6:63:38:62:5e:53:61:ce:41:92:eb:c5:1c:9f:53:7a:
83:dd:6c:57:dd:7f:89:ca:ed:17:29:d2:2f:e6:8c:d2:ae:c1:
03:f8:5e:38:e1:35:f5:b5:d5:ef:9d:58:49:49:f7:44:39:cf:
c7:b7:88:46:dd:36:2c:c8:31:e1:98:af:e0:65:96:2b:36:35:
86:9f:53:52:79:e6:89:70:e8:62:77:bd:7d:5a:4f:35:95:6d:
cd:91:0f:6e:06:e0:dc:b6:ef:c1:a9:7c:3f:4f:08:d8:1c:79:
64:0c:69:90:26:84:6a:b6:69:d9:ba:13:63:0e:5d:2d:66:61:
3a:62:f1:30:0b:af:c7:aa:37:ca:8e:b5:60:d3:96:e6:43:5b:
1e:9a:b6:9b:e0:6b:bb:0d:a5:cc:81:45:0a:cb:ee:be:f3:04:
68:58:49:0a:4d:e3:1f:3f:5b:68:6a:76:dc:0d:01:e2:6a:ce:
86:d5:94:34:fd:c5:c2:ac:90:ee:f6:a6:b9:20:52:bf:15:5b:
c2:07:92:53:0e:fb:d0:8c:6c:3e:e1:8e:5b:b9:ce:5a:92:a6:
66:fd:7a:28:75:71:73:cb:d8:04:a3:68:d1:f5:15:53:13:a9:
49:a9:64:b7:2f:ff:a0:d4:66:0b:1f:a3:f3:14:93:ca:68:78:
cd:12:3f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 04:04:59 2025 by rpki-client