Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1jaqSphsnTAbngnuAu4M-0bftgY.roa
File: 1jaqSphsnTAbngnuAu4M-0bftgY.roa (raw, json)
Hash identifier: XqMeB19MUnpGbIHlt1Xym4bC2IdFde3bU45KCd4r3Fc=
Subject key identifier: D6:36:AA:4A:98:6C:9D:30:1B:9E:09:EE:02:EE:0C:FB:46:DF:B6:06
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01896FFE5820B2B2FA70DD04309B8B77F0A3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1jaqSphsnTAbngnuAu4M-0bftgY.roa
Signing time: Wed 19 Jul 2023 21:11:26 +0000
ROA not before: Wed 19 Jul 2023 21:11:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:6f:fe:58:20:b2:b2:fa:70:dd:04:30:9b:8b:77:f0:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 19 21:11:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d636aa4a986c9d301b9e09ee02ee0cfb46dfb606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:40:74:0b:19:2e:80:f6:84:fc:fd:e0:91:1e:
e3:6e:97:8d:38:36:1d:e7:7f:fe:81:54:51:4b:dd:
d0:d1:b1:2e:ea:38:2a:13:a3:c0:3e:46:bf:87:0a:
b9:62:41:ee:98:ca:ae:a8:46:06:7b:f1:5b:ca:24:
63:71:40:fe:2d:30:bd:53:71:14:52:18:8c:be:d5:
1a:d3:fa:54:eb:60:16:86:fd:75:a1:8d:41:6a:b5:
99:5e:78:9c:95:3c:03:57:9f:01:a4:f4:2a:c7:b9:
79:96:58:09:ac:12:97:3d:bb:c6:19:df:58:3f:a0:
0b:84:87:d4:93:2e:dc:0f:54:2a:cd:72:80:0a:ca:
28:36:b8:a6:f1:18:fe:cf:1a:bc:6c:cf:19:44:80:
41:0b:d9:56:d3:b7:a4:b7:96:ab:e2:bc:2c:08:c2:
43:76:e5:b4:b9:85:70:bb:06:e6:51:a2:10:b9:2c:
d5:c6:1d:aa:5d:44:b2:cf:b1:50:2b:0d:f5:e4:80:
b5:ed:e7:80:28:30:9b:d4:87:19:91:f7:50:6e:1e:
22:51:c9:54:01:fc:15:9b:b1:b5:e2:0a:a6:9b:31:
7d:ee:3b:1b:4e:3c:27:91:96:5c:ed:9d:fd:c4:d5:
e7:08:d5:ef:98:ce:b7:d5:b9:e3:eb:2b:e1:e7:06:
01:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:36:AA:4A:98:6C:9D:30:1B:9E:09:EE:02:EE:0C:FB:46:DF:B6:06
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1jaqSphsnTAbngnuAu4M-0bftgY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a2:ab:46:fd:45:c1:ed:c9:f4:80:a8:09:87:37:79:11:04:98:
f1:1f:83:2a:1b:a7:25:ae:1e:29:ff:9d:5f:6a:12:d8:77:5a:
89:ef:16:20:91:39:f7:44:80:67:32:35:0f:09:fe:9b:db:a9:
e3:59:81:d7:8c:b2:9f:eb:ef:a7:d5:b5:16:9b:64:c4:7b:80:
20:73:b6:f0:2b:5d:22:e3:41:30:37:6d:67:4b:e8:1d:7f:75:
f5:af:50:e7:6d:66:48:1f:da:77:c7:a5:c1:4d:a5:64:97:ef:
d5:1a:6a:d7:13:43:67:bd:d5:9d:a3:7f:6a:46:e8:fe:d2:87:
f0:29:0c:69:de:fd:f3:68:e8:c5:a8:8b:97:98:55:c9:04:01:
f9:75:78:ca:f0:b1:31:1c:58:db:61:c7:97:9e:08:40:4f:84:
be:8c:81:33:57:f7:08:fd:1b:75:30:49:78:c2:f2:44:96:59:
69:66:93:a5:5d:31:82:25:b8:7f:d3:19:44:dd:21:c5:b9:b2:
f0:31:e8:c2:d4:14:22:e1:4f:1e:b3:5c:1f:96:56:82:90:fe:
c7:fd:37:e1:74:72:2c:79:d6:a0:49:d7:0a:70:f0:47:2d:8d:
16:74:3f:f3:4e:19:53:d7:67:12:38:8a:5a:43:db:68:d0:c4:
27:a0:e3:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 14:56:24 2025 by rpki-client