Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/41dKAcgV5bOBO9Ur3Fst913d3N0.roa
File: 41dKAcgV5bOBO9Ur3Fst913d3N0.roa (raw, json)
Hash identifier: 1GMXaR5sTY7QTTHQnB5HdM988fCXzF/nUJsot8l7U64=
Subject key identifier: E3:57:4A:01:C8:15:E5:B3:81:3B:D5:2B:DC:5B:2D:F7:5D:DD:DC:DD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186876C568E65A78B9788C4AA6992818A44
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/41dKAcgV5bOBO9Ur3Fst913d3N0.roa
Signing time: Sat 25 Feb 2023 07:14:29 +0000
ROA not before: Sat 25 Feb 2023 07:14:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:87:6c:56:8e:65:a7:8b:97:88:c4:aa:69:92:81:8a:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 25 07:14:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e3574a01c815e5b3813bd52bdc5b2df75ddddcdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:14:a3:96:f9:aa:17:a3:be:23:eb:f2:cc:79:
75:a3:da:60:f2:3c:b5:8e:b6:2f:77:50:74:6a:1b:
24:a3:59:11:1f:69:62:4c:8c:d6:26:4d:cb:e6:cf:
94:5d:4d:60:e9:02:ae:05:4c:dc:c1:3e:5d:94:e4:
dd:9d:0a:a1:66:67:0d:db:90:95:86:2c:0e:81:8e:
f5:fe:2e:2a:d3:fe:7e:89:69:88:a1:ee:ff:91:36:
4c:b5:6e:d1:de:ea:50:ba:8e:08:3c:d9:51:47:da:
e6:3d:0f:2c:61:5e:d5:1a:97:e1:8e:e9:39:a8:58:
b8:37:fe:a2:18:c3:f1:37:2f:71:6a:2b:d2:08:d6:
05:22:88:1e:01:aa:3e:28:aa:f7:65:95:17:f5:97:
79:8e:9b:94:3b:38:ac:9b:e9:e5:97:01:16:8c:3d:
9f:8d:e6:95:57:3c:99:e5:45:ba:66:a8:ad:83:c7:
1c:6e:0e:95:20:3c:5f:31:e7:a3:c5:8b:74:50:52:
00:19:84:98:f3:9b:fc:e6:c9:e9:cd:4c:f1:64:e8:
c4:e0:e1:1d:68:b4:96:16:31:d8:8b:fe:88:c9:47:
9e:d4:dc:51:c2:0a:09:6e:82:3b:42:a7:1d:34:0d:
45:ef:90:49:a2:3b:25:38:24:5a:4f:6e:db:3a:91:
cc:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:57:4A:01:C8:15:E5:B3:81:3B:D5:2B:DC:5B:2D:F7:5D:DD:DC:DD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/41dKAcgV5bOBO9Ur3Fst913d3N0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
04:34:79:b5:d7:ca:af:83:ae:9b:cb:ad:16:05:ec:b1:a0:2f:
e3:91:99:62:66:77:ad:cb:18:c6:1c:3e:d2:a3:76:82:bc:0c:
6a:c3:aa:a1:59:34:1a:ff:ea:18:fd:a0:81:1e:53:80:14:e2:
0e:da:42:e0:f5:00:e9:f1:cb:00:86:d7:6b:a1:d1:fe:51:40:
de:b8:7e:1a:a7:25:ef:b9:1d:95:59:08:32:c0:ec:80:5c:0c:
65:22:b0:6a:9b:ab:d5:26:74:3b:64:bd:d4:f6:70:db:11:e6:
98:ac:ff:dd:9a:40:c0:1c:d4:e2:e3:a2:59:5a:1a:29:4b:df:
7e:3a:73:3c:e5:fc:9e:20:a5:5a:1a:96:04:91:b8:33:96:a2:
75:fb:00:7a:9b:f3:da:35:fa:7f:ac:1d:46:a1:c3:a5:4d:78:
09:c3:ee:e3:8f:46:3a:07:0b:c9:04:7b:59:9e:63:c9:c2:0d:
51:58:05:06:00:b9:90:50:95:d4:ec:bb:61:b4:db:eb:55:1f:
95:7d:7e:97:b0:4d:04:49:c1:e7:ee:e5:01:b1:02:ed:70:61:
85:a3:a9:da:cd:21:05:39:8a:b8:f3:d9:df:dd:40:75:31:d9:
44:b9:23:54:3f:5d:ac:6e:99:35:83:a7:44:9b:a7:d1:8d:a2:
8b:01:1e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:20:28 2025 by rpki-client