Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6p36if8S_poDbmRcNWB1dw1KomA.roa
File: 6p36if8S_poDbmRcNWB1dw1KomA.roa (raw, json)
Hash identifier: ERePJfMJO9evq+Pqj/86SdfiBJfOZKPFm5PjOoERJ40=
Subject key identifier: EA:9D:FA:89:FF:12:FE:9A:03:6E:64:5C:35:60:75:77:0D:4A:A2:60
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188951FD9689925E61AB24C1A667142518B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6p36if8S_poDbmRcNWB1dw1KomA.roa
Signing time: Wed 07 Jun 2023 09:11:12 +0000
ROA not before: Wed 07 Jun 2023 09:11:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:95:1f:d9:68:99:25:e6:1a:b2:4c:1a:66:71:42:51:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 7 09:11:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea9dfa89ff12fe9a036e645c356075770d4aa260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8d:19:db:52:75:99:ef:85:bd:96:e0:7e:26:
9a:19:fe:bf:d2:74:e5:1c:32:a6:48:8c:ce:d8:41:
2b:32:34:0b:cb:e6:2f:e4:51:07:8d:c7:de:0a:f6:
28:59:37:9e:75:18:0c:48:b2:f3:aa:72:54:b5:69:
66:8d:4f:10:54:86:73:c6:3b:25:1e:59:dd:0b:af:
83:54:0b:33:77:e2:a1:6c:67:f2:95:25:31:54:23:
89:1b:a9:25:72:5f:8f:6d:da:7e:f6:eb:28:f9:a5:
64:5f:b5:55:17:cc:04:d0:d2:98:a7:4c:b8:fb:79:
75:8b:20:7f:22:98:21:e4:e8:36:8c:45:ef:b8:c6:
c1:2e:61:24:4b:e5:82:88:ed:07:eb:16:4b:8a:67:
b3:16:31:2b:52:76:0e:ef:35:98:15:c2:4e:c5:d6:
2a:40:d2:36:f9:98:3e:14:47:86:63:54:93:42:e3:
5b:a0:36:a4:ff:b2:db:d3:26:78:eb:05:df:fc:3d:
53:84:bf:46:af:e0:1b:cd:c9:18:92:f7:e5:69:03:
50:ec:d8:52:b8:3d:bd:ea:ad:ef:b6:8c:0e:0b:8b:
bd:9d:49:63:26:9d:63:27:51:fb:6f:19:ac:22:86:
b3:1e:55:dc:ea:21:36:b0:e8:99:b9:a8:79:00:ce:
04:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:9D:FA:89:FF:12:FE:9A:03:6E:64:5C:35:60:75:77:0D:4A:A2:60
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6p36if8S_poDbmRcNWB1dw1KomA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5b:ee:fb:cb:18:ad:c3:0e:e5:32:95:d0:dd:ad:a7:0a:81:75:
b5:54:9c:f3:6f:2c:7e:a2:5f:80:02:21:cd:da:4a:86:e5:14:
94:f0:c2:50:86:4f:46:65:b1:4d:9c:5b:f7:22:7c:75:87:f1:
60:af:d9:c8:50:44:b5:7d:18:41:64:85:7e:1d:16:4b:03:fe:
0d:3b:66:d7:26:2c:95:0f:b2:18:b3:57:16:0a:45:b7:b7:b1:
11:64:66:0c:71:9e:50:8d:2f:75:63:79:6b:79:89:68:9f:4f:
e7:ed:3d:64:9e:14:2c:78:90:df:b0:cb:af:21:bc:99:f2:33:
ba:95:22:f4:fb:6a:2a:d4:13:fd:e1:73:1e:c4:f5:11:04:5b:
f8:bc:5d:43:73:1a:33:56:9b:ca:78:c8:40:96:ec:bf:1d:f6:
52:85:2a:bd:bd:9e:6b:a4:09:2b:94:48:94:4b:e3:c8:64:19:
30:03:ac:dc:99:41:16:f8:63:c2:87:d6:8e:34:db:22:4e:03:
28:d9:6d:49:b3:bc:4d:15:74:bc:42:46:fc:59:f5:49:8b:34:
bb:c9:43:71:f3:93:dc:5a:4e:2e:97:32:0d:c6:30:e1:ec:18:
13:f5:52:e3:f4:2e:a6:42:05:aa:0c:ec:37:0a:99:35:cd:31:
50:13:40:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 20:15:22 2025 by rpki-client