Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-ouXQluM9WG5U6BAxCJlupOh8yk.roa
File: 1-ouXQluM9WG5U6BAxCJlupOh8yk.roa (raw, json)
Hash identifier: bCYyFSvu2xUoVU1msZ9IYrK613XgSU3QzLz78CxoPjU=
Subject key identifier: FA:8B:97:42:5B:8C:F5:61:B9:53:A0:40:C4:22:65:BA:93:A1:F3:29
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018778C97552E1B60DA142FD3F39BB8959CA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-ouXQluM9WG5U6BAxCJlupOh8yk.roa
Signing time: Thu 13 Apr 2023 04:04:41 +0000
ROA not before: Thu 13 Apr 2023 04:04:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:187:78c9:7068/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:78:c9:75:52:e1:b6:0d:a1:42:fd:3f:39:bb:89:59:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 13 04:04:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa8b97425b8cf561b953a040c42265ba93a1f329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f1:d8:68:04:37:27:2b:2c:54:95:5c:5c:1f:
d2:e5:d5:bc:e0:db:21:19:42:7b:4e:2a:38:25:59:
94:83:76:ea:90:11:d5:a9:70:e6:05:da:aa:d5:85:
26:75:0c:6e:71:47:8d:23:bf:b2:6f:50:c4:7f:28:
8c:02:ba:b3:11:d1:a3:20:a6:af:e2:fb:19:83:d2:
44:85:37:4c:a5:db:b2:8b:c7:2c:9a:d7:28:f4:44:
aa:45:00:ba:ac:1e:89:74:b7:17:a2:33:e3:2a:8c:
5f:80:76:42:eb:fb:99:40:25:d7:e4:2f:39:bb:cf:
88:99:42:ba:9c:83:b9:11:96:62:c7:f3:75:f7:e9:
f0:e9:fc:c4:20:80:e2:f2:79:0b:1b:ea:01:f0:06:
e3:85:b8:87:da:c2:ff:50:ce:70:4d:70:c8:3d:df:
bc:9a:0d:77:f0:b8:94:d9:bf:9e:30:b0:95:5a:3b:
3e:82:5d:ab:0b:61:4a:1b:b2:f6:99:d1:af:ec:c4:
6f:72:14:7e:cb:b7:1d:7e:33:32:e4:7a:7c:7e:ee:
15:bf:44:14:60:12:64:dd:1c:7a:f0:ac:39:48:8b:
23:45:99:9c:28:6f:f0:a6:a3:c3:ac:eb:85:2d:e0:
cf:c4:60:20:a0:34:47:7c:32:34:ee:42:ec:9a:97:
bb:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:8B:97:42:5B:8C:F5:61:B9:53:A0:40:C4:22:65:BA:93:A1:F3:29
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-ouXQluM9WG5U6BAxCJlupOh8yk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b5:03:6c:2b:22:d6:5c:cf:b2:e2:27:a2:27:b7:1c:83:fa:78:
bd:db:5b:63:2d:ec:e9:3e:81:84:5e:c6:df:b6:9c:af:82:25:
2e:79:85:9d:17:cc:3f:51:0d:e0:cd:d8:59:c0:11:7c:dd:3a:
89:92:3b:a3:b9:34:80:c8:4a:c0:36:95:ec:c3:f1:00:0d:42:
75:7e:36:ca:e7:d2:95:00:2b:1f:51:e9:e6:6a:78:4c:59:a0:
11:bc:fc:ad:f5:09:e0:ce:50:95:a7:9e:d5:46:a5:02:31:98:
5f:3c:3a:db:0a:ca:b2:e4:86:01:72:5f:1e:4a:16:a7:0f:a4:
f9:40:52:36:31:b6:09:23:55:ad:76:40:07:18:f6:7c:55:ce:
dd:a6:2c:9c:93:e1:46:06:46:cd:34:97:3a:0d:75:f7:b5:2f:
a8:fa:90:be:c4:bc:03:59:21:0e:6d:f6:c6:7d:49:23:bb:83:
c7:d0:14:79:5a:d4:5f:fa:72:f8:44:65:dc:9d:79:79:0a:e5:
1b:6a:8b:18:04:9a:b7:a6:85:09:d5:58:5a:51:43:99:0d:f0:
e5:84:dd:d2:bf:e6:20:10:2e:b9:cc:2e:c4:c6:2c:9a:99:39:
ba:f9:c0:e6:f7:cf:87:8d:af:54:67:b2:26:05:db:6d:0a:fd:
d0:29:0a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:12:26 2025 by rpki-client