Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4FnDukuSGagjqvqlGJ4OqEw6pFc.roa
File: 4FnDukuSGagjqvqlGJ4OqEw6pFc.roa (raw, json)
Hash identifier: Im8sPCsW1OXFyKuPm3U/DJ1kVlgrn4yWv2hC8TCgdsI=
Subject key identifier: E0:59:C3:BA:4B:92:19:A8:23:AA:FA:A5:18:9E:0E:A8:4C:3A:A4:57
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01870C3626BA57D70F7AE47CB38F6AA4C81A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4FnDukuSGagjqvqlGJ4OqEw6pFc.roa
Signing time: Thu 23 Mar 2023 02:04:48 +0000
ROA not before: Thu 23 Mar 2023 02:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:187:c35:aa86/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0c:36:26:ba:57:d7:0f:7a:e4:7c:b3:8f:6a:a4:c8:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 23 02:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e059c3ba4b9219a823aafaa5189e0ea84c3aa457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:87:39:41:dd:33:48:af:d9:92:7b:e6:77:88:
0b:40:12:fb:d4:24:22:f8:24:cf:1d:4d:3f:64:92:
c3:85:fa:6d:ba:28:35:1b:ba:b7:b8:3f:63:b6:6f:
4e:c1:20:d4:aa:b7:17:26:f5:f7:59:0d:d9:3f:e6:
b2:00:2b:9f:99:8b:34:9f:8b:c5:87:57:81:22:8d:
73:e0:55:60:15:18:51:a2:13:57:bb:93:d5:6a:19:
0d:89:fc:e1:95:f2:b0:dd:b3:72:4b:04:0b:d5:6c:
c3:2b:1f:da:43:96:ba:f7:ee:5c:92:5f:57:0f:83:
c7:4a:1a:b9:6e:6b:65:b0:9b:33:70:b5:d4:9a:ce:
f4:bb:f9:b3:b4:c8:80:97:3f:a8:c9:48:62:36:79:
9b:27:e2:f3:fe:b7:70:6f:9b:aa:8b:01:91:1d:9c:
57:17:fc:1b:c6:9d:f0:58:26:72:04:23:f0:bb:c6:
aa:6b:b1:be:df:b9:8d:99:91:a2:4e:2c:55:91:a9:
c5:6e:c0:c8:6e:5b:cf:ce:a1:f0:d4:34:12:f0:77:
36:cb:3e:2b:1d:47:eb:bc:f3:a2:4f:84:3d:11:32:
51:01:5f:28:63:50:0e:dc:35:2b:e5:c3:55:6d:0e:
e8:71:54:86:18:cd:b3:63:bf:e8:b9:4a:a6:9c:d5:
72:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:59:C3:BA:4B:92:19:A8:23:AA:FA:A5:18:9E:0E:A8:4C:3A:A4:57
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4FnDukuSGagjqvqlGJ4OqEw6pFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
af:39:5a:41:5f:98:2e:8f:ff:f2:d6:c4:3f:54:46:93:5f:a3:
fb:2f:87:33:28:62:c0:5a:54:fa:48:6f:79:ae:3a:6c:76:8e:
64:83:48:52:69:8c:33:18:08:4b:c1:b5:d9:3b:e6:90:8f:97:
7a:7a:75:cc:ac:69:37:da:5c:cd:e3:ec:e1:9b:a6:6c:38:69:
85:9e:b8:6a:a8:d5:76:e6:40:40:0c:c9:c5:c2:9f:08:c8:32:
5d:4a:47:6a:9b:db:57:f9:5a:ed:6b:d0:fb:23:48:62:2f:e3:
bd:4e:b9:ab:8c:d4:80:17:0b:64:71:03:06:8e:7e:d6:29:5c:
49:1b:8e:d4:9d:9f:c7:be:71:3c:4e:62:2b:a0:7a:91:23:e1:
f1:f8:07:00:ae:10:7c:05:1a:9f:bb:1e:f8:cb:c9:47:7a:21:
90:f5:f5:9a:70:25:4a:02:ed:47:3a:b0:c8:2c:7f:fc:a5:55:
58:46:73:cc:a7:4a:e2:99:78:2a:92:d5:ae:58:3f:e8:e6:5d:
e2:83:0c:80:bc:75:03:2e:f9:37:09:e9:c8:16:18:0c:90:36:
b6:8a:a0:89:64:3c:9b:95:85:0b:90:75:fb:fd:fb:8b:b6:5d:
41:66:a4:67:4b:d2:8d:34:d3:f7:0c:24:b4:c0:1b:64:0a:c1:
ca:a7:df:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:25:02 2025 by rpki-client