Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-6Alnp-k9eqzI2E0JakYuLPdFdQ.roa
File: 1-6Alnp-k9eqzI2E0JakYuLPdFdQ.roa (raw, json)
Hash identifier: AYI6rg5bcdRKKVb/FOJrTVitak/pz73PLnlW7KCrGss=
Subject key identifier: FB:A0:25:9E:9F:A4:F5:EA:B3:23:61:34:25:A9:18:B8:B3:DD:15:D4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018741767361FD1A72E13A26F3306D4E4A13
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-6Alnp-k9eqzI2E0JakYuLPdFdQ.roa
Signing time: Sun 02 Apr 2023 10:14:54 +0000
ROA not before: Sun 02 Apr 2023 10:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:41:76:73:61:fd:1a:72:e1:3a:26:f3:30:6d:4e:4a:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 2 10:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fba0259e9fa4f5eab323613425a918b8b3dd15d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:70:d6:be:5c:1d:82:bb:38:42:83:d8:d8:89:
47:6e:08:6b:45:09:39:cd:97:bc:f8:43:be:b2:c4:
20:26:b0:60:38:79:4a:63:5b:9f:9a:16:09:a3:56:
99:39:17:ae:99:70:05:84:3d:86:30:ac:bc:ba:25:
10:56:e1:65:77:0d:f1:b7:a5:53:74:80:c5:b0:91:
68:74:e6:17:ec:ec:be:bc:35:3c:b6:c8:17:f1:f3:
3a:61:df:9c:0f:37:a6:09:cc:4a:92:99:93:94:ee:
29:60:ea:57:6e:73:f3:45:d5:40:90:0a:d7:73:cc:
fb:70:77:bf:c0:23:7b:0a:01:20:e1:fb:9d:a8:cb:
e3:94:c3:5f:d7:bc:04:f2:56:06:90:ed:25:5c:a5:
4d:c7:ff:54:82:d1:1e:55:8d:21:13:7c:76:b2:e8:
ca:e0:e5:98:92:44:8d:60:45:45:49:98:b0:a9:03:
1f:57:bf:2a:18:22:9d:5c:c8:ae:c4:e7:d6:57:a8:
58:75:97:cf:16:7f:d3:1a:73:df:29:f2:3d:14:8d:
66:0b:51:e0:57:de:a4:90:69:b1:37:57:27:7a:7a:
a8:2e:9a:cc:ee:ce:41:63:1e:f9:a5:70:70:0e:22:
35:7e:fd:a0:31:07:ba:57:fc:d4:53:68:c3:2a:8c:
0b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:A0:25:9E:9F:A4:F5:EA:B3:23:61:34:25:A9:18:B8:B3:DD:15:D4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-6Alnp-k9eqzI2E0JakYuLPdFdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
60:b1:4a:33:43:68:54:db:bd:b6:9c:f2:40:a8:16:7d:16:ae:
99:df:81:e4:a1:46:06:d0:7a:d7:2b:37:a6:0e:d8:05:14:2f:
f5:5d:d1:2f:4a:60:8c:87:a8:14:5b:f6:0f:54:5d:24:81:bf:
5f:73:86:bf:34:0d:ac:12:ca:a9:ab:9e:f8:b8:33:c9:62:16:
c3:0c:a9:bb:3c:98:ac:bc:bc:39:db:b7:fb:7d:3e:77:2c:09:
55:d7:51:51:88:95:81:ec:14:55:c3:cb:80:e9:16:ef:85:82:
02:56:fd:32:38:f1:61:20:c0:8d:e2:1c:71:2a:98:6a:20:ec:
42:43:18:44:a5:75:e4:93:35:16:18:7d:5a:86:9d:9c:2f:f7:
6c:a2:4b:f6:30:8a:99:5e:bb:1c:45:95:c7:93:d2:22:d6:b6:
df:d2:da:5b:b2:43:96:13:84:f5:c0:fb:52:4a:64:00:00:35:
35:b4:d7:95:59:a5:07:bb:50:ef:96:e5:1e:8f:da:1d:49:0e:
47:13:34:2f:2c:c2:e9:b4:45:ab:49:00:37:e7:f1:a5:af:ba:
d3:6a:6f:bb:29:d5:57:12:d7:7d:6a:8b:ab:4a:b1:6e:93:f9:
cb:aa:2f:73:9d:d6:92:d9:fe:ee:59:90:9d:ee:d2:95:26:3d:
3f:de:fe:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:48:37 2025 by rpki-client