Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4jj6-s6d-6AXRx-sB3Pb0Hby32M.roa
File: 4jj6-s6d-6AXRx-sB3Pb0Hby32M.roa (raw, json)
Hash identifier: lbp815ZRY4yXbl6/QjuOZQ0nlz1qV2aNMWoq+QJGBI4=
Subject key identifier: E2:38:FA:FA:CE:9D:FB:A0:17:47:1F:AC:07:73:DB:D0:76:F2:DF:63
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187C90AD010100A1AF2BFA10115BDDB44E6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4jj6-s6d-6AXRx-sB3Pb0Hby32M.roa
Signing time: Fri 28 Apr 2023 18:05:41 +0000
ROA not before: Fri 28 Apr 2023 18:05:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:187:c90a:967/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c9:0a:d0:10:10:0a:1a:f2:bf:a1:01:15:bd:db:44:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 28 18:05:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e238faface9dfba017471fac0773dbd076f2df63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:7f:34:a7:f9:8e:4b:e8:e6:50:94:ee:cd:9e:
51:8f:4b:f6:ef:13:84:af:ee:2f:c4:f1:ef:30:6a:
72:5e:e4:19:0c:d2:69:33:55:0a:e8:6b:fd:28:d4:
10:3d:42:a3:0b:fa:8d:8b:6f:25:6d:b2:a9:fe:51:
63:c4:92:2f:6f:3c:29:f4:a5:ca:c0:28:3e:af:ae:
53:09:c7:fe:76:97:5b:db:37:93:07:cd:cf:9b:ea:
9b:2b:7c:01:ad:1e:eb:ed:30:55:54:1d:27:ef:9c:
6c:51:27:e1:8b:33:27:4c:1c:4a:71:9c:a5:a3:64:
88:df:33:a5:45:09:23:83:25:4b:f3:82:d8:d1:af:
1f:85:0d:59:28:e4:85:cb:89:1f:4c:a1:1a:52:f9:
69:8f:fa:54:c5:d9:3b:11:6e:cf:4b:5a:1d:79:8d:
c7:eb:5f:d1:95:d4:dd:26:19:04:d4:15:46:8e:46:
89:29:f0:9a:dd:a0:32:88:97:ca:66:39:0d:4b:09:
16:1e:35:77:37:1a:89:56:13:b6:c6:70:9f:f2:61:
8a:31:b3:08:d3:57:9a:8b:ef:a4:c8:20:cf:6e:1a:
1a:84:fe:e9:25:8f:42:96:a7:37:a5:16:fb:84:28:
81:28:e5:e1:1d:05:58:04:9f:99:02:ee:1c:a5:6e:
0c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:38:FA:FA:CE:9D:FB:A0:17:47:1F:AC:07:73:DB:D0:76:F2:DF:63
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4jj6-s6d-6AXRx-sB3Pb0Hby32M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
93:f3:51:0e:5a:b5:25:52:d0:94:e7:f0:b8:2f:0a:cc:8b:ce:
6b:09:95:06:8c:fd:9b:89:bf:25:a3:fa:f5:bf:83:28:a6:f5:
d6:42:eb:30:60:61:db:42:80:43:ef:c2:47:8e:83:1e:e1:0d:
46:08:20:0c:0e:0a:50:0c:f8:07:72:37:fb:7c:bd:52:87:2f:
ea:99:f4:b8:b8:ed:22:ff:fd:eb:c2:8a:c5:d8:14:ac:26:5a:
09:a8:24:04:70:f7:98:4d:7b:a6:0a:74:bb:06:6a:64:a7:44:
08:2f:d3:a2:eb:5a:4d:d0:01:e2:1f:45:d9:49:ad:43:02:dd:
e3:e1:4f:8c:8f:77:2c:7b:61:b6:62:ea:d2:a2:51:bc:f1:2b:
26:92:0a:e8:e2:e5:c7:23:97:7a:ac:7c:fd:c4:a6:27:31:49:
c9:56:5e:c9:b0:df:52:1a:f6:ba:e3:ed:c8:f9:ae:2d:4b:00:
a6:cb:cc:21:c8:d3:8b:45:c2:30:d9:cf:1e:4e:d4:1c:c4:5a:
63:c0:cc:4f:8c:9f:a9:29:f0:7d:bc:be:aa:85:e8:04:86:76:
b3:d5:87:d3:73:3d:fa:56:0f:b2:06:c2:70:9c:54:72:ac:15:
1b:f1:ad:c0:26:84:a3:ec:cc:95:1c:3b:5b:96:ee:97:e8:25:
60:5b:b3:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 12:55:49 2025 by rpki-client