Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/60gmTsWXB1jb3DVU56mMdrcBia8.roa
File: 60gmTsWXB1jb3DVU56mMdrcBia8.roa (raw, json)
Hash identifier: OfTW0X2UN4BkaTL5J87JyN9ibtf5qpJVxJCsrflhenE=
Subject key identifier: EB:48:26:4E:C5:97:07:58:DB:DC:35:54:E7:A9:8C:76:B7:01:89:AF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018762EB09BD21BDB83CC1B4AEA25B6E38D5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/60gmTsWXB1jb3DVU56mMdrcBia8.roa
Signing time: Sat 08 Apr 2023 22:09:43 +0000
ROA not before: Sat 08 Apr 2023 22:09:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:62:eb:09:bd:21:bd:b8:3c:c1:b4:ae:a2:5b:6e:38:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 8 22:09:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb48264ec5970758dbdc3554e7a98c76b70189af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c1:25:d9:27:71:71:72:8e:b4:36:61:16:ac:
5e:b5:c6:31:ff:86:67:07:34:a4:4b:93:b8:44:f2:
e3:42:1e:1a:b4:54:58:7b:96:aa:33:e1:11:68:0f:
ef:aa:b1:ba:f8:66:7e:6f:f4:9a:9e:ce:72:56:fd:
2e:3b:c1:18:88:68:2f:26:b5:db:7b:37:70:17:01:
21:7a:dc:9d:96:c2:da:7e:e1:92:11:d3:74:8f:9c:
d2:27:8f:23:d4:f6:98:c3:c4:b9:26:f1:1d:b7:bb:
19:35:97:35:70:cf:7c:a6:7e:0f:8e:69:d3:e9:3d:
93:fa:d5:89:0f:59:ea:a8:8d:93:f3:07:6b:ed:e2:
c9:77:c1:9c:ef:93:e5:d6:3b:76:a2:35:b9:e5:d6:
cf:4c:19:73:c1:e2:03:ee:ac:82:2e:6c:21:14:b5:
ae:43:a7:a9:59:71:9f:f4:3d:45:2b:ae:87:db:16:
ae:9b:05:20:f8:0c:2a:ad:f9:73:f1:cf:39:f7:a8:
45:79:44:14:ff:91:f8:24:49:42:78:95:c1:99:09:
20:17:7d:b1:a6:55:48:6f:2c:9b:05:8d:db:4f:11:
c6:ca:64:7e:3a:1b:7b:b5:6b:aa:5c:ff:4f:ee:fa:
ca:18:b1:c9:78:e0:ab:0f:fc:f6:ee:be:64:0d:19:
5c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:48:26:4E:C5:97:07:58:DB:DC:35:54:E7:A9:8C:76:B7:01:89:AF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/60gmTsWXB1jb3DVU56mMdrcBia8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
34:15:7e:d1:46:50:31:89:ae:c2:44:1e:f3:e2:9f:31:5a:eb:
81:b8:4d:9a:f7:d1:0d:33:25:0f:6f:ac:9a:8f:ac:a4:f5:4c:
55:da:94:cb:a1:e8:7f:fa:bc:15:cf:e9:f3:38:7a:f7:ce:0f:
c3:95:99:cf:6c:ba:ff:9d:b8:ce:05:cc:91:ff:5d:0b:a6:ba:
7b:77:10:fa:03:0d:0b:42:59:60:47:61:e8:d4:c9:cc:b6:7c:
b6:45:3a:04:f6:4c:4a:92:fe:94:88:b1:aa:84:f8:d8:eb:35:
39:de:8a:c6:b5:34:c5:f9:c0:49:f1:5f:6e:29:b0:7a:02:af:
56:66:da:7a:57:e5:0b:52:c1:c7:9e:1f:b4:b4:4f:d2:c5:a1:
2d:61:86:cc:2c:61:34:88:ab:60:11:9d:06:d5:d2:16:d4:85:
8b:42:73:2a:92:3b:14:e4:a8:91:a6:84:34:fd:c5:69:ba:59:
de:67:da:98:54:a4:b9:eb:32:d4:c4:33:a2:4e:29:89:e7:41:
0c:54:02:84:45:5e:44:e0:ac:db:92:44:0b:19:07:d8:ad:82:
3a:f6:4a:eb:23:cc:0b:c4:ee:de:63:92:fa:5a:6f:bd:5f:b5:
25:89:2a:c8:bd:16:94:f6:5e:d6:b0:ca:2e:3d:51:69:b9:e8:
2b:79:80:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 01:55:39 2025 by rpki-client