Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-YclZdU5C94ZUZkSR7Y-6SFxzGk.roa
File: 1-YclZdU5C94ZUZkSR7Y-6SFxzGk.roa (raw, json)
Hash identifier: TcTzfUiAX/iCTxI/tKn/7FJJ7lXndX4N2wsxPrClSUs=
Subject key identifier: F9:87:25:65:D5:39:0B:DE:19:51:99:12:47:B6:3E:E9:21:71:CC:69
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189FE41FC8794A5F7C3E7AB207BB44A2703
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-YclZdU5C94ZUZkSR7Y-6SFxzGk.roa
Signing time: Wed 16 Aug 2023 12:11:24 +0000
ROA not before: Wed 16 Aug 2023 12:11:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:fe:41:fc:87:94:a5:f7:c3:e7:ab:20:7b:b4:4a:27:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 16 12:11:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f9872565d5390bde1951991247b63ee92171cc69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:be:df:af:e4:c5:9c:d0:85:cb:24:3b:bd:49:
c8:46:52:3e:b0:c9:af:b7:86:6c:d6:d3:b5:5a:c9:
69:7e:9a:7b:8e:a7:bb:7c:35:8d:af:3b:23:e8:65:
a7:82:7c:2b:57:4f:de:fc:3c:bf:96:ef:76:29:b2:
80:92:6f:e6:c6:be:1b:16:2a:27:b5:93:37:9c:ee:
77:d8:86:54:dd:bc:64:76:00:a6:fa:93:b9:b3:1e:
d3:48:15:de:36:bd:f3:bd:04:dc:3d:68:7b:40:0e:
de:ea:1a:fb:c4:74:f9:7e:14:82:98:10:ac:01:6d:
28:cc:cb:d6:c9:5d:d0:e2:d2:d4:33:68:5f:f9:95:
f7:63:e8:82:21:6a:40:76:70:ef:94:da:79:98:fb:
ef:b4:0c:69:5f:81:0f:11:46:52:d1:18:97:f1:4a:
4a:a8:2a:b2:66:65:4d:7a:ef:2d:83:70:c5:f8:6c:
5a:68:16:92:fe:fe:79:79:51:7b:b4:df:79:7a:29:
8f:fc:f6:88:50:ab:47:78:07:7d:bb:45:23:b9:3f:
f2:ec:4e:e4:5f:14:1a:51:9b:a7:d7:54:d4:de:67:
00:17:87:38:4c:3c:fa:e1:df:64:8b:73:eb:a7:57:
f8:87:81:98:c8:20:8e:de:e4:80:e3:2f:ae:ab:be:
18:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:87:25:65:D5:39:0B:DE:19:51:99:12:47:B6:3E:E9:21:71:CC:69
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-YclZdU5C94ZUZkSR7Y-6SFxzGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
98:a2:1f:03:90:4d:e6:ae:94:42:e3:5d:be:e0:c0:59:59:6c:
02:7d:80:3c:18:9e:17:67:d0:bc:f7:fb:f0:be:42:5a:47:4a:
1e:ca:3e:c0:d9:4d:ac:7a:89:5d:d8:0c:ae:c4:a5:9f:db:4a:
ca:36:02:3d:c1:69:d9:61:8d:1a:ff:31:70:e6:52:62:06:ed:
30:b1:04:29:7d:c1:ff:3a:7b:3c:53:e0:51:76:96:39:49:ea:
22:e4:12:8a:64:b9:78:54:01:30:d1:a3:34:e6:7f:df:f9:2c:
ca:da:e3:91:b9:81:f1:cb:29:f6:31:b8:14:1e:7d:3d:df:b1:
1c:e5:7f:08:04:18:fc:7b:85:b4:05:84:6f:e9:81:66:b8:ea:
d6:9d:31:42:27:b5:82:96:90:1a:32:b8:d4:40:a7:37:05:94:
1d:65:a9:35:8f:4c:06:b1:1f:6c:54:b5:1a:70:2c:89:14:23:
1c:0d:4c:fd:52:53:8f:71:c0:c3:c3:4f:87:31:2d:a9:28:ff:
35:04:f9:8d:65:44:84:17:9a:4b:8a:2b:bf:7d:41:30:ae:99:
fa:b5:59:15:b6:45:8f:72:cf:9e:c2:be:a3:d4:63:89:60:84:
f6:5b:50:6f:68:ec:e3:89:b7:3d:20:70:47:a9:d7:0f:b1:b2:
5f:cd:ad:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 06:52:28 2025 by rpki-client