Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/54oSbr19y9NiQC8ubyYED8d1scs.roa
File: 54oSbr19y9NiQC8ubyYED8d1scs.roa (raw, json)
Hash identifier: Keapfak6p5I/uTe8gOdGFmcyqmDv0gPw0qoBTFl37X0=
Subject key identifier: E7:8A:12:6E:BD:7D:CB:D3:62:40:2F:2E:6F:26:04:0F:C7:75:B1:CB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01880892A973B18C0EC792677BA816035998
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/54oSbr19y9NiQC8ubyYED8d1scs.roa
Signing time: Thu 11 May 2023 02:10:09 +0000
ROA not before: Thu 11 May 2023 02:10:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:08:92:a9:73:b1:8c:0e:c7:92:67:7b:a8:16:03:59:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 11 02:10:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e78a126ebd7dcbd362402f2e6f26040fc775b1cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:31:a3:b9:97:c7:e6:87:0c:a3:05:86:8e:b1:
5c:c9:fc:08:8a:b5:f8:e4:19:36:2b:ca:74:60:86:
24:99:db:99:44:4f:05:69:4a:a6:54:d1:68:e6:a0:
9a:6b:1c:2b:04:08:95:07:ee:57:3c:de:1e:26:1f:
b8:c1:4c:b2:2a:a0:1a:e8:dc:09:7a:69:02:e8:ef:
cd:e7:a9:98:c3:b9:b7:b4:9d:e4:6d:db:ad:6e:2c:
fa:dd:59:dd:29:d6:5b:e6:66:ec:5a:88:d8:89:26:
ff:c9:99:fa:d3:54:e2:41:60:af:87:35:a7:43:a6:
ac:99:27:5a:20:ec:72:d9:8a:45:8d:39:de:a9:97:
5f:16:6b:3b:9a:b1:fe:f0:57:70:d8:46:3c:b9:c8:
bc:51:70:53:69:e1:39:a7:e4:ec:47:40:ed:6a:f4:
c8:9f:87:50:70:26:40:41:cf:ea:ae:d9:b6:08:e6:
c8:5c:6a:89:67:c8:44:79:ab:42:ac:55:86:a8:42:
6b:f3:23:bf:2d:30:e7:ab:ff:22:c4:48:e4:91:48:
d3:c0:be:8a:c2:e2:59:18:84:c9:31:ee:7b:19:39:
01:3c:d9:43:99:d8:c4:bd:2f:03:d3:f3:f6:79:d3:
e3:14:bd:63:35:29:4a:8c:97:af:dc:bf:e2:e8:db:
07:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:8A:12:6E:BD:7D:CB:D3:62:40:2F:2E:6F:26:04:0F:C7:75:B1:CB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/54oSbr19y9NiQC8ubyYED8d1scs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
97:26:ee:e4:8a:08:48:91:5d:a8:02:28:03:e8:a7:6d:0a:74:
98:f1:33:d0:fd:df:29:10:50:8a:3f:3a:75:69:de:4b:6c:b6:
34:1b:fb:af:69:6c:30:17:d2:3a:5b:ae:e7:77:e3:15:40:87:
44:6c:ac:a0:52:6c:e4:d4:6d:c1:ad:ca:37:e9:f6:24:aa:99:
64:78:cd:5e:ed:eb:68:4d:cc:b3:ad:02:6d:e4:28:8b:b8:53:
f8:fa:2f:a7:8b:5b:62:a8:a5:7f:da:5f:5f:90:69:3e:81:24:
9f:85:c9:a5:2e:56:a3:14:b5:37:c0:a7:28:87:73:1e:1c:9a:
fc:b8:5b:dc:94:26:18:ff:4b:d9:8a:ca:e6:00:2c:19:d8:e3:
d9:41:4b:1a:ca:22:a7:72:d4:a8:53:08:16:f6:21:74:0a:5a:
04:90:35:40:46:70:d8:5b:71:a1:81:17:a1:9d:27:9d:d1:82:
f1:b8:05:47:df:0b:a7:f0:a6:05:fc:d4:26:3e:b3:c3:2b:64:
49:98:24:fd:dc:5a:7a:11:32:67:1d:cd:c3:ac:57:69:2a:ef:
09:74:2b:f7:38:b6:a0:fd:ef:da:9f:9a:42:03:e8:48:66:45:
56:ea:61:f7:75:3f:79:f0:5c:12:a6:e7:b5:d3:fb:14:7f:47:
46:78:b7:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:07:51 2025 by rpki-client