Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/89FGZeJgMZ8tZcoLV1CES4VvnUQ.roa
File: 89FGZeJgMZ8tZcoLV1CES4VvnUQ.roa (raw, json)
Hash identifier: o9tLg87kkyzPC3OQ7knK30nQGUDyVhJBpf2IZT/U9Do=
Subject key identifier: F3:D1:46:65:E2:60:31:9F:2D:65:CA:0B:57:50:84:4B:85:6F:9D:44
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187AE0087981B72011063F7FD01252E1DE0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/89FGZeJgMZ8tZcoLV1CES4VvnUQ.roa
Signing time: Sun 23 Apr 2023 12:04:42 +0000
ROA not before: Sun 23 Apr 2023 12:04:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
2001:67c:64:ffff:0:187:ae00:294c/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ae:00:87:98:1b:72:01:10:63:f7:fd:01:25:2e:1d:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 23 12:04:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f3d14665e260319f2d65ca0b5750844b856f9d44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:69:30:f9:39:8e:aa:e2:4f:09:72:56:9f:05:
5c:88:d4:63:4d:97:8d:97:b2:6b:24:b2:82:54:88:
01:19:63:02:45:51:81:c6:70:59:d0:09:35:03:0c:
ad:14:3c:6b:4f:fb:aa:7d:61:a9:ef:01:4e:cc:9c:
6f:38:64:0c:86:77:6c:cc:a5:11:38:a3:75:82:f0:
5e:a2:7d:39:e4:b0:d8:87:da:2a:f7:3a:15:85:3d:
37:40:32:41:ef:50:dd:be:fb:cd:0d:87:f8:47:5f:
11:ca:ef:f0:95:e7:06:2e:e6:65:4a:b5:55:28:f2:
b8:7d:3f:7b:e9:e6:3f:da:f0:ca:d9:1c:af:f9:48:
f1:35:d5:93:12:cc:50:89:15:cf:9a:a5:6f:26:40:
89:c3:81:62:93:2f:58:79:f1:85:7f:ea:ad:c4:00:
9a:ae:1b:3a:08:96:78:e8:4d:20:d3:ad:50:68:bc:
08:9f:0f:1d:3a:64:29:64:5f:db:31:7b:6f:58:49:
83:ca:e0:e1:77:31:79:ab:bb:65:d7:e1:69:1d:89:
66:6f:08:ee:fd:2f:6b:8c:fc:db:02:b8:0a:b3:9c:
d5:ef:d1:79:66:16:e8:fb:47:3f:8f:f3:8b:c5:8f:
ad:fa:af:74:42:b8:9b:9d:8a:22:d5:24:6e:cc:c1:
2e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:D1:46:65:E2:60:31:9F:2D:65:CA:0B:57:50:84:4B:85:6F:9D:44
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/89FGZeJgMZ8tZcoLV1CES4VvnUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3e:ec:2f:0a:48:a2:03:6c:80:c2:48:f4:8b:0d:c9:22:30:cc:
bd:6a:59:6c:37:50:a4:29:6f:1e:05:02:d7:eb:73:25:ef:6d:
d5:cf:dd:88:73:35:6f:93:5b:8c:a6:f8:e1:b3:df:9e:9e:b0:
ca:54:ec:6a:16:5d:64:a0:94:4c:72:62:2b:5e:ab:00:3f:6c:
1b:03:53:9d:83:db:ae:3b:4f:28:f1:af:5e:58:db:0b:e5:ce:
57:2a:c0:5d:63:8b:14:53:ea:75:85:b0:c3:e9:3c:ef:0b:26:
93:2a:97:8e:58:a2:e6:9b:37:01:60:c3:14:4f:2e:81:97:df:
94:ca:2d:ac:4c:64:c5:8c:6b:c1:06:bf:75:49:68:dd:14:50:
01:21:9b:84:fc:85:77:f7:8e:9f:db:47:9c:e9:e2:38:a1:bb:
fb:21:9f:43:5d:3d:7b:72:75:67:a8:66:09:97:ea:6c:9a:a5:
0b:aa:48:34:8f:72:91:3d:2f:38:ab:74:b0:96:17:1a:6c:c3:
92:66:c1:9e:a5:80:e8:e7:33:47:4a:48:46:08:7d:3c:d5:1e:
06:94:e5:96:3c:d2:a5:3b:a1:af:56:02:b0:d4:d7:47:d9:b2:
fd:87:b7:75:38:93:b1:57:3d:43:0d:1f:3c:a5:8d:27:17:05:
02:31:af:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 06:49:29 2025 by rpki-client