Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1ThAOi5j_2ulA4FXrFCMIo1-t64.roa
File: 1ThAOi5j_2ulA4FXrFCMIo1-t64.roa (raw, json)
Hash identifier: mP7SCisnU/zGCb0zRDMXk0jXgFIp/eSaWy6s7Wz6cx4=
Subject key identifier: D5:38:40:3A:2E:63:FF:6B:A5:03:81:57:AC:50:8C:22:8D:7E:B7:AE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188804E8F64D762D5A1D86A39A9B47501D6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1ThAOi5j_2ulA4FXrFCMIo1-t64.roa
Signing time: Sat 03 Jun 2023 08:10:12 +0000
ROA not before: Sat 03 Jun 2023 08:10:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:80:4e:8f:64:d7:62:d5:a1:d8:6a:39:a9:b4:75:01:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 3 08:10:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d538403a2e63ff6ba5038157ac508c228d7eb7ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7e:b8:67:b7:b8:c5:87:32:b7:ca:4e:20:c8:
e6:ec:18:32:4d:8c:bc:ce:b7:6e:0b:b1:05:c7:6b:
d2:9b:54:b6:77:c6:f9:28:8f:f6:e9:f7:4a:65:b7:
59:fc:8b:12:7c:52:0a:00:6f:ea:9f:fc:0e:06:2b:
5e:88:ac:8c:1d:09:6f:9b:64:c2:c0:51:39:7b:7e:
37:61:69:0e:54:f7:8c:18:89:ca:98:bd:32:44:e4:
30:0b:46:ef:55:73:5b:75:5e:5d:75:3a:91:ac:1a:
98:c1:fb:4e:a8:6b:e2:57:46:a6:a0:be:73:86:fe:
0e:c3:de:1e:48:00:e1:15:a3:5e:1c:b9:4a:bc:fc:
27:89:96:e6:1c:db:f0:cc:d3:de:7f:a3:47:3c:2a:
ad:f3:05:67:6a:41:d1:8d:a3:f5:43:ca:58:f3:7e:
21:65:94:5c:6f:97:60:16:51:f6:63:66:04:5c:34:
4e:85:1f:1f:54:64:7d:7c:cd:08:3c:52:11:1f:b2:
fe:92:1b:30:c2:ee:3d:e8:86:97:de:e3:0e:ac:9f:
0c:f5:26:c4:27:c6:a6:18:c9:16:f2:0a:69:91:4d:
b3:e0:71:cf:07:f7:4d:eb:d0:52:e3:d7:73:20:71:
39:b0:09:11:04:1d:1d:2f:96:d5:ed:d5:ed:6c:15:
8e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:38:40:3A:2E:63:FF:6B:A5:03:81:57:AC:50:8C:22:8D:7E:B7:AE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1ThAOi5j_2ulA4FXrFCMIo1-t64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
22:8d:7f:9b:9a:ad:81:3b:ca:c2:e1:1a:ef:c7:40:1c:50:43:
f6:52:62:79:87:3c:80:2e:2c:54:08:fc:23:18:38:be:aa:ef:
ac:a8:82:5c:9a:9a:c7:e0:11:3d:13:45:3b:36:58:c6:67:54:
7f:98:ed:01:38:c5:cb:a2:9a:37:bc:2c:c6:2e:c3:b8:14:b2:
c2:b8:ee:bd:4d:4a:12:2e:d6:c8:7e:f1:1a:dc:c4:59:2a:16:
b4:42:86:56:9d:3f:63:de:4e:42:7b:1f:e3:9c:21:12:73:9f:
78:d9:60:69:f8:1b:3e:1c:d7:16:07:85:28:7e:ce:98:b9:8f:
b8:72:9f:d2:62:a0:cc:fc:00:73:99:e7:b1:e6:5f:26:f3:d9:
59:2a:f1:be:28:4a:8b:25:03:44:cb:82:e2:9f:9c:95:3b:90:
6d:12:14:3b:b3:4f:ae:10:ed:59:2f:0a:fa:7f:d4:56:1c:6e:
de:35:75:32:c7:c8:8f:aa:31:0c:33:c3:be:82:41:ca:b2:de:
a9:84:73:68:db:12:ab:18:7f:ce:6f:56:b7:50:16:34:de:eb:
ca:23:dc:c7:ef:7d:de:c1:09:00:ca:85:48:55:39:01:e8:13:
3c:4f:90:c4:b3:83:b1:dd:d4:df:49:29:81:eb:aa:9c:b1:6e:
21:e9:6a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 01:47:21 2025 by rpki-client