Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/92-6dDyG7e5ne7OSpsYC7l3O5B4.roa
File: 92-6dDyG7e5ne7OSpsYC7l3O5B4.roa (raw, json)
Hash identifier: VWLEprvzW6JF2kSYhm0ay/SOLYaInzYoa55eqhBXBOc=
Subject key identifier: F7:6F:BA:74:3C:86:ED:EE:67:7B:B3:92:A6:C6:02:EE:5D:CE:E4:1E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018966C67F2A2192B531DCFE97EE147D6FFA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/92-6dDyG7e5ne7OSpsYC7l3O5B4.roa
Signing time: Tue 18 Jul 2023 02:13:51 +0000
ROA not before: Tue 18 Jul 2023 02:13:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:66:c6:7f:2a:21:92:b5:31:dc:fe:97:ee:14:7d:6f:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 18 02:13:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f76fba743c86edee677bb392a6c602ee5dcee41e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a7:a4:cd:04:44:8c:b8:67:dc:9f:5f:cb:57:
97:c4:dd:78:92:78:e4:44:b4:fe:18:a6:94:87:9a:
47:39:17:15:91:71:67:83:00:52:8b:52:05:06:6e:
f0:98:ce:a8:7e:97:78:8a:35:19:04:79:3a:13:07:
95:09:c4:9c:09:f8:78:7f:dc:bb:af:f3:37:da:75:
92:53:9a:90:1f:98:b9:ac:51:87:96:25:7a:98:f3:
27:a8:ee:60:de:3b:8e:bc:a7:72:85:33:01:c3:9f:
e4:35:ea:bf:05:95:ba:7a:2f:75:5e:51:33:63:01:
ee:49:8a:4d:19:22:5e:d4:a7:06:c5:05:f7:0d:98:
49:f6:02:6b:74:52:80:1f:62:c5:6b:b7:95:93:b9:
00:fa:47:95:c3:a3:d9:74:17:4b:c7:c0:96:f6:c5:
8b:1d:64:99:77:c4:79:c8:82:3e:2d:35:57:42:62:
20:72:4e:c6:2d:09:1c:a0:77:5b:3f:a9:13:49:4e:
02:2b:0f:c7:94:09:4f:46:fc:63:ce:e1:e1:3e:00:
1c:e3:fc:bc:ad:1a:39:c0:ff:ef:a5:f5:a3:5f:17:
f0:6c:2d:ba:71:50:9d:06:6c:e0:75:0f:65:15:06:
98:17:92:f9:86:4e:98:13:f3:7d:2f:53:e6:16:7b:
1f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:6F:BA:74:3C:86:ED:EE:67:7B:B3:92:A6:C6:02:EE:5D:CE:E4:1E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/92-6dDyG7e5ne7OSpsYC7l3O5B4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
66:83:6c:21:85:d9:1d:8d:97:c2:58:b9:0c:95:70:c0:c2:17:
ec:a1:8c:f9:92:b0:6a:da:b9:ca:a1:57:0c:e4:18:50:ba:db:
62:d6:7a:7c:e9:24:ad:af:30:81:18:91:af:95:df:9c:6d:2a:
6b:68:2d:57:aa:06:52:6a:0f:96:3b:cc:9a:08:2e:7b:50:3d:
ec:88:8c:44:34:b9:1d:62:6a:dd:da:2d:80:65:9b:ab:f4:d5:
cc:1f:4c:d0:24:ee:6a:d8:6a:7a:02:cf:e7:48:4f:f5:ed:3c:
2e:86:3d:d3:6c:0b:49:58:dc:44:d7:8e:24:68:da:6d:3e:b3:
e1:4e:24:c2:6b:d1:7b:08:7f:b8:ed:bb:eb:88:8c:3d:1d:e8:
c0:3f:b4:69:c1:ef:7f:f4:9f:c1:5d:3b:99:79:4f:0d:a0:0b:
5f:ed:db:9a:fc:e2:ea:c7:b0:3f:41:6a:6a:6c:35:e0:6b:af:
05:c1:b8:02:05:f6:78:83:f9:e4:71:aa:58:70:e7:39:b4:b9:
b7:39:21:f7:07:28:73:42:a7:7d:ec:c8:58:31:7b:50:40:54:
36:bb:e2:fe:ef:84:6c:7f:3d:7c:66:f1:4b:8b:99:2f:c6:3f:
55:82:0b:16:56:42:80:21:3f:74:a4:a8:43:4d:cf:4d:cc:e5:
dd:22:40:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 03:19:39 2025 by rpki-client