Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-f9s4cj54EM3PzCF8D3YQVSRI7s.roa
File: 1-f9s4cj54EM3PzCF8D3YQVSRI7s.roa (raw, json)
Hash identifier: jRt04N0L5nf/WebpCdPVmNVcNvamIbNq0upIf9aA1mQ=
Subject key identifier: F9:FF:6C:E1:C8:F9:E0:43:37:3F:30:85:F0:3D:D8:41:54:91:23:BB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01894695D7778105CEC9EEAD9E80D4F56E23
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-f9s4cj54EM3PzCF8D3YQVSRI7s.roa
Signing time: Tue 11 Jul 2023 20:12:52 +0000
ROA not before: Tue 11 Jul 2023 20:12:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:46:95:d7:77:81:05:ce:c9:ee:ad:9e:80:d4:f5:6e:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 11 20:12:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f9ff6ce1c8f9e043373f3085f03dd841549123bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:61:ea:f1:18:3a:3f:a4:a4:56:89:48:34:4b:
e6:ac:bf:bf:5e:95:7c:dd:a5:9d:56:8f:e3:aa:38:
c3:5b:77:71:e2:f7:7f:4d:34:61:96:dc:28:94:00:
6b:5a:85:39:b0:da:7f:2c:a0:02:26:a9:f3:a4:24:
a0:70:77:74:7d:0a:b2:1c:b4:0c:cf:f8:50:8c:3e:
9b:2c:b4:6e:15:73:67:44:21:72:28:93:82:61:5c:
ec:2a:da:2b:74:29:e5:63:39:bd:87:1a:d2:59:69:
67:fe:f9:df:bf:1f:8f:e7:7f:dc:be:c7:1a:82:d8:
45:1a:57:2f:05:df:81:33:8a:7c:21:46:d3:78:8e:
45:9f:04:fc:d3:81:c4:fe:be:0d:62:02:0d:5f:c3:
4b:de:c0:a6:98:aa:dd:df:f4:96:7a:b1:53:75:7d:
ff:d4:f7:92:70:95:d9:9b:de:77:c4:b6:f8:92:e6:
fb:eb:cb:58:45:99:f7:ff:df:27:b3:9c:8b:87:e8:
db:3b:7c:86:8e:fc:6b:96:39:41:b7:96:b7:bf:2d:
1a:78:ba:98:95:f7:46:59:8f:5a:3b:a2:87:94:94:
c9:c2:ec:0d:21:c3:ef:6d:e8:75:7a:fb:24:1b:1f:
14:8c:6d:4c:f4:05:af:8f:93:59:e9:24:ef:11:af:
3c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:FF:6C:E1:C8:F9:E0:43:37:3F:30:85:F0:3D:D8:41:54:91:23:BB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-f9s4cj54EM3PzCF8D3YQVSRI7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ab:50:71:87:f5:e4:45:bd:3d:a1:02:39:2e:d9:36:75:33:39:
fc:6a:09:62:1d:76:0b:8c:b3:b2:63:54:e7:c0:b4:2d:45:37:
04:b7:c3:03:34:5a:c1:c2:cc:dd:3e:93:bc:f8:02:57:84:66:
76:32:b7:76:de:9d:f0:e6:7e:cb:3b:64:f3:08:f7:51:e8:ec:
5b:f2:ab:d4:62:55:c1:bb:43:6b:21:7e:61:2b:80:a2:be:f5:
8f:4a:4d:a5:d3:ab:3e:43:86:36:18:5b:e7:9f:bc:cc:cb:07:
b6:b1:43:97:65:d8:60:1c:d8:8f:68:57:11:2a:fd:08:75:6a:
90:3c:e4:ce:39:3f:db:e0:55:17:e4:d7:35:4b:09:ff:dd:d1:
21:b8:de:4e:4c:d9:ad:9e:80:45:c8:b6:0d:51:8b:e5:e4:e6:
89:3e:91:88:58:28:4b:e7:40:52:79:85:a8:48:8c:2d:23:71:
ea:6a:58:b1:69:ca:9a:ed:25:9a:ed:08:f1:1b:0e:38:8b:23:
d7:4f:ca:7a:41:96:cc:ab:e6:88:e0:c8:99:d2:72:99:88:ba:
9e:be:5a:9b:3d:f3:90:08:fd:15:56:34:d1:17:d6:ae:9e:58:
88:17:aa:ef:2d:ac:9d:ae:9b:6a:1a:3d:35:d3:57:e6:c1:98:
82:17:a3:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 04:33:46 2025 by rpki-client