Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-gIY_Oh-86b3RQStLM4ZUZBa1r8.roa
File: 1-gIY_Oh-86b3RQStLM4ZUZBa1r8.roa (raw, json)
Hash identifier: ys7turFX0vkhc0YeXz+yoHLiL6HkK1TD9g2BD807v2M=
Subject key identifier: FA:02:18:FC:E8:7E:F3:A6:F7:45:04:AD:2C:CE:19:51:90:5A:D6:BF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188AC13B2971140D1A37D791FD2FD5EB596
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-gIY_Oh-86b3RQStLM4ZUZBa1r8.roa
Signing time: Sun 11 Jun 2023 20:09:12 +0000
ROA not before: Sun 11 Jun 2023 20:09:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:ac:13:b2:97:11:40:d1:a3:7d:79:1f:d2:fd:5e:b5:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 11 20:09:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa0218fce87ef3a6f74504ad2cce1951905ad6bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ab:68:89:60:4e:b7:a0:99:d2:2b:c5:94:7c:
24:b8:1f:0e:76:3a:69:f4:d4:2d:55:77:b2:53:83:
52:bc:f9:07:b1:24:b6:47:ab:47:16:a4:4e:1c:8e:
4e:7f:98:e7:06:58:42:c2:c2:b7:59:61:b1:b1:89:
e0:a5:10:31:21:b3:45:43:fa:7e:5a:b9:c8:5d:20:
7e:e5:92:78:d7:8c:64:ad:1f:d8:30:b7:cd:d4:5c:
3b:fd:7f:24:4f:c5:64:4b:fe:48:38:47:32:90:28:
fc:ad:7a:dc:31:85:cb:28:a9:52:ee:d8:68:be:c7:
b4:cd:02:4e:ee:4d:30:80:b9:cc:b6:15:01:f0:75:
7a:0f:30:e5:4f:25:3f:e0:7a:59:f7:c1:d6:77:76:
f4:bc:50:0d:ea:51:3d:d0:05:4b:ec:9a:f4:9e:66:
9a:37:1d:c3:91:57:ae:e0:6d:3b:43:60:92:8d:26:
32:ac:96:81:ce:a6:39:65:8d:10:c4:15:14:70:fe:
28:6c:5f:95:9f:8a:77:b9:3a:fb:4d:d0:b2:2f:80:
a9:a7:24:0f:6d:48:d0:19:25:28:86:27:f7:9b:c4:
bf:7f:38:23:02:70:61:1c:eb:5a:2e:73:ef:70:28:
91:b0:9d:7a:ee:69:f0:40:cd:8b:b5:a0:16:92:c1:
ff:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:02:18:FC:E8:7E:F3:A6:F7:45:04:AD:2C:CE:19:51:90:5A:D6:BF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-gIY_Oh-86b3RQStLM4ZUZBa1r8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
95:3e:77:bc:d1:73:f4:da:65:38:a3:d1:c4:ba:4f:bc:95:87:
37:ed:56:d8:07:d6:11:b9:ad:61:61:f2:84:9f:7e:a5:c4:0c:
08:80:f3:3f:03:bb:e2:b5:d7:a5:7a:f2:76:7a:cf:d8:1f:69:
83:5c:45:87:c8:92:7a:f4:7a:f0:90:39:88:7e:0c:31:60:65:
82:74:2d:05:0b:67:60:c3:c9:39:74:27:94:08:1a:80:2f:ff:
fc:20:da:e5:57:9d:ee:a5:bf:cd:7b:ca:47:23:8a:1a:ce:30:
3f:90:75:80:f8:ec:86:c0:eb:14:55:81:e9:3d:71:18:19:fc:
3a:5a:6a:10:1c:3b:43:c2:ab:d0:6a:35:fe:29:b8:24:c2:83:
67:ea:f1:41:c8:a8:12:b8:7b:22:30:7c:02:48:57:f5:cf:57:
16:fd:5a:c0:69:4b:40:12:5e:ba:ec:f5:15:06:f9:89:c7:3e:
3e:a3:e2:37:a3:e6:5e:24:b8:00:01:bd:c5:83:da:33:0e:09:
65:1b:06:80:9b:ef:2d:77:52:46:c3:38:eb:41:13:82:89:7e:
45:eb:45:a4:f4:b9:7b:25:eb:20:34:a3:29:fc:1f:35:08:c4:
1c:51:2e:1b:22:4f:26:78:76:8f:26:5b:4c:c7:1d:ef:0a:f6:
36:e2:ed:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 09:31:53 2025 by rpki-client