Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/88ZaDlKvViQPhCdIMBJ8IE9W__c.roa
File: 88ZaDlKvViQPhCdIMBJ8IE9W__c.roa (raw, json)
Hash identifier: PZiCfW0WhmBOUAkcxjXpvpZvVjiYs9Nl37Sjqmpl02Y=
Subject key identifier: F3:C6:5A:0E:52:AF:56:24:0F:84:27:48:30:12:7C:20:4F:56:FF:F7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01871840B6D0B92B8890C9F039829EDB0BC1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/88ZaDlKvViQPhCdIMBJ8IE9W__c.roa
Signing time: Sat 25 Mar 2023 10:11:46 +0000
ROA not before: Sat 25 Mar 2023 10:11:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:18:40:b6:d0:b9:2b:88:90:c9:f0:39:82:9e:db:0b:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 25 10:11:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f3c65a0e52af56240f84274830127c204f56fff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:62:f6:c3:95:76:e8:b1:a1:24:9a:e6:48:a7:
5b:e8:46:85:07:7c:c4:da:45:39:4a:9e:cb:2c:98:
c0:2b:c7:d8:52:1b:e4:30:09:53:fd:1a:ea:88:6f:
7c:28:c5:08:7d:c4:93:18:7d:06:84:3e:5f:29:6a:
3d:89:25:10:bc:0c:3c:ba:6c:ad:3b:ba:e4:05:23:
a7:60:4c:f7:55:9c:65:21:9e:4b:1b:50:34:e0:0f:
52:8f:54:05:9c:5c:e0:a5:60:1f:d9:5a:d4:db:9e:
06:fd:1e:2f:c1:45:fe:93:79:16:c5:cd:d1:17:5e:
2b:e4:15:6d:27:53:2e:72:ba:ac:c0:2d:60:58:6f:
1d:63:63:72:80:4c:4f:50:bd:b3:ff:f3:ae:6f:e4:
50:b3:d4:bb:ca:fd:47:74:ee:69:45:35:d9:73:ed:
a1:ad:87:0c:57:a9:a7:36:bb:f9:4d:ba:6f:86:21:
f4:8a:ff:30:0d:50:12:cd:2f:14:52:d3:cb:ae:74:
30:18:e4:21:4f:80:3b:a4:4e:53:15:7e:c7:04:7e:
5f:44:76:5b:bf:fc:58:92:14:39:cf:8d:27:28:73:
e4:3d:47:69:0a:76:57:87:00:95:78:88:83:df:88:
e6:f8:b0:56:30:d7:a9:04:51:3b:c2:b3:46:d0:be:
25:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C6:5A:0E:52:AF:56:24:0F:84:27:48:30:12:7C:20:4F:56:FF:F7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/88ZaDlKvViQPhCdIMBJ8IE9W__c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
16:63:7d:e6:ee:3d:c0:8c:21:2f:0f:ea:3e:0c:c2:a3:36:09:
3d:0f:99:ae:2d:c7:8f:6d:5b:b5:6e:b2:f3:ea:f9:78:59:72:
59:54:f7:3c:f7:3d:e5:18:c1:26:b1:5f:62:4c:75:f1:27:2f:
a1:c6:f0:29:cc:5d:7f:40:c7:59:c1:8e:38:28:47:cd:e8:d5:
7b:6f:f1:e5:d0:af:4b:df:64:0b:31:2c:89:b1:5f:c0:fe:d7:
fa:76:52:48:3e:b6:9e:dd:70:14:ac:6f:52:af:da:32:07:5d:
23:55:ea:33:54:b0:db:ec:d2:ac:6a:bf:ef:b4:69:76:2b:03:
c8:42:fa:71:e2:34:0e:65:73:af:73:ef:63:cd:38:46:e4:a7:
6a:e1:05:d3:e7:46:cd:c6:68:eb:3c:fa:15:f6:2f:f1:f9:2d:
89:6b:d9:ee:4e:6d:0e:cf:e7:92:ec:16:af:a6:02:b3:d6:52:
88:a2:07:7b:70:8e:ea:6c:f0:bd:4f:b4:76:98:e3:cc:49:65:
90:5a:6a:16:ff:02:9f:02:ab:cc:24:02:3a:8b:b5:93:e2:8f:
8a:56:ce:52:97:82:88:76:c0:3f:9c:55:b5:56:d3:9a:08:fc:
9c:8b:1d:62:b6:5b:e2:ce:2c:55:87:69:fe:0a:c7:14:ed:f0:
96:3a:32:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 03:05:37 2025 by rpki-client