Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1VmPSVQfTz1qFkpBA2i2V6idlJA.roa
File: 1VmPSVQfTz1qFkpBA2i2V6idlJA.roa (raw, json)
Hash identifier: 8M/3vhlj//qVpiiJXLkLc3EaVFWLbWBX0LRGkBY+8XE=
Subject key identifier: D5:59:8F:49:54:1F:4F:3D:6A:16:4A:41:03:68:B6:57:A8:9D:94:90
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01897B9851C46F8F7C20F042B2C93FF57A53
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1VmPSVQfTz1qFkpBA2i2V6idlJA.roa
Signing time: Sat 22 Jul 2023 03:15:27 +0000
ROA not before: Sat 22 Jul 2023 03:15:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:7b:98:51:c4:6f:8f:7c:20:f0:42:b2:c9:3f:f5:7a:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 22 03:15:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d5598f49541f4f3d6a164a410368b657a89d9490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:3b:44:7e:c2:d3:09:9a:19:3e:9c:e4:d8:8c:
a0:ed:be:1a:35:4d:c6:40:5f:2e:b4:ec:4e:6f:d8:
2c:af:72:bc:08:21:b2:2c:0a:3b:97:74:25:ce:40:
ce:5b:c7:ac:7f:76:5a:9b:71:be:26:31:0f:f1:50:
f2:9f:fc:0a:28:2c:23:a7:96:1e:08:87:78:4c:4d:
2d:00:d9:79:80:a5:67:1a:58:22:2e:86:44:14:66:
bb:4a:c8:86:c9:a0:da:91:0d:06:d7:a9:23:c8:ce:
d1:73:cc:bb:d4:10:db:f0:1c:b6:3a:79:ff:b8:57:
f1:86:09:5c:a6:3e:1c:ae:43:72:25:e6:b7:73:47:
a4:47:71:41:bd:a9:d1:d1:5d:23:ef:eb:21:4a:86:
51:27:20:6f:c8:a6:8a:4a:29:ac:5f:15:38:9b:ef:
9d:b6:49:93:01:9c:6c:1a:ae:74:d7:28:ba:0c:e4:
56:ea:1c:10:11:10:9d:dc:21:29:40:05:51:78:b5:
9e:8f:b3:dc:6e:b0:ac:ce:2a:9f:5e:89:9c:51:a3:
67:15:b5:ab:f7:e8:2f:7a:e2:79:18:63:76:b1:62:
b0:e1:69:19:90:c4:88:b0:dc:b4:88:1e:f6:bb:54:
67:59:55:5f:c9:2e:37:f0:dd:dd:a4:88:5c:da:80:
f8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:59:8F:49:54:1F:4F:3D:6A:16:4A:41:03:68:B6:57:A8:9D:94:90
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1VmPSVQfTz1qFkpBA2i2V6idlJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
19:f9:e8:43:93:c6:f4:39:8e:fc:ed:29:e5:34:45:55:03:43:
ad:5a:c7:ff:1d:8b:d8:79:c2:31:bf:c6:ab:b7:40:bc:6d:aa:
ee:f3:b1:98:8d:04:b7:4f:29:ee:be:d9:f3:e2:06:fa:88:b0:
6f:b9:a2:82:62:37:ef:08:d6:b1:b2:55:39:b8:ea:ce:cb:3b:
e6:14:29:57:a9:5a:42:c1:b0:11:b4:5e:fc:70:49:a4:1e:02:
68:72:d6:29:06:29:13:54:a4:96:33:9b:56:d0:16:0a:18:d3:
75:f4:01:e1:88:fc:e0:a5:f2:cf:f6:43:99:26:35:e8:f2:49:
89:37:9d:3f:54:56:a2:8b:0d:f7:de:66:cf:80:53:7e:df:9d:
70:45:16:79:da:4e:12:57:8a:d2:e2:86:ac:13:60:4a:26:c5:
bb:c3:d6:ab:fe:cf:87:7a:55:8a:84:d4:8a:20:7a:1d:d7:bd:
40:38:67:84:e6:50:df:3c:e1:34:ac:48:63:96:51:88:63:88:
ab:66:cc:00:3b:03:08:64:ae:fe:ea:a5:12:6e:66:8c:e7:82:
72:eb:da:e2:f3:5b:64:8b:24:d6:a4:e6:18:e0:b7:af:72:9e:
5a:45:84:49:73:a5:29:c7:b1:84:9c:f5:3b:c6:b6:a7:99:d9:
d1:d1:e9:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:24:37 2025 by rpki-client