Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/94NrE9dWRpmMoB9kB5mtAb8qz6Y.roa
File: 94NrE9dWRpmMoB9kB5mtAb8qz6Y.roa (raw, json)
Hash identifier: 5hXhRBVX3IvaESi7jIUN7drU8w/+HKcYh13H0zVqinA=
Subject key identifier: F7:83:6B:13:D7:56:46:99:8C:A0:1F:64:07:99:AD:01:BF:2A:CF:A6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01873E06A1EB1E0AE4CC97CB00C42B28598B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/94NrE9dWRpmMoB9kB5mtAb8qz6Y.roa
Signing time: Sat 01 Apr 2023 18:13:54 +0000
ROA not before: Sat 01 Apr 2023 18:13:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:3e:06:a1:eb:1e:0a:e4:cc:97:cb:00:c4:2b:28:59:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 1 18:13:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f7836b13d75646998ca01f640799ad01bf2acfa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d8:60:41:b4:4d:4b:67:97:c6:cf:b9:d4:0c:
1c:93:9f:3d:e9:20:de:d3:44:a4:5a:cb:81:41:61:
a4:b1:34:e7:23:4a:6e:b7:d7:3d:df:60:1a:24:98:
54:0e:cc:23:57:62:8c:18:8f:cf:6e:ce:3f:c8:04:
64:79:be:5a:f3:fc:0a:f3:03:b7:92:1c:3a:5f:ab:
21:b4:74:b7:65:6a:be:49:07:0b:69:7e:29:69:47:
d9:a7:06:8d:93:be:04:0d:64:aa:0e:df:62:d4:79:
1e:28:d1:28:e5:9c:81:4b:78:0e:1d:dc:08:37:60:
76:75:44:1e:e1:41:7e:6e:e5:86:9a:ad:72:4c:5a:
c2:38:13:de:61:2d:4d:e0:c7:e0:68:e8:df:3a:48:
9d:4e:e0:75:a4:69:31:98:3f:22:0e:9e:20:14:55:
29:ed:11:f6:c2:90:34:4e:92:a8:1c:51:1e:54:58:
b9:bb:97:a1:7f:35:e4:23:58:6d:4c:8d:cb:a2:ff:
11:88:e0:34:96:5b:4a:49:78:fd:2d:11:46:68:d6:
9c:22:d7:58:11:73:a2:89:12:89:26:95:e7:13:39:
23:3a:95:0b:72:75:d8:b8:1a:f5:28:f0:9a:20:23:
54:5f:60:4b:45:2a:7d:6e:05:63:f1:90:2e:85:d8:
16:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:83:6B:13:D7:56:46:99:8C:A0:1F:64:07:99:AD:01:BF:2A:CF:A6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/94NrE9dWRpmMoB9kB5mtAb8qz6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
78:a9:d0:0f:b0:7e:45:aa:84:b7:e5:25:ea:c4:f4:de:64:4a:
5e:96:df:0e:60:f9:33:9f:e9:ed:56:40:26:00:db:b0:7b:e5:
11:37:34:be:3a:fd:9b:60:64:4f:d1:8c:65:83:91:ce:c3:64:
5e:d2:98:63:65:47:d8:12:97:85:ae:c7:ae:90:40:4d:20:aa:
9d:90:f9:5a:31:74:9a:43:0e:c3:a3:b9:bd:7a:62:80:9e:81:
4f:8f:dc:74:d1:45:9a:01:89:00:4b:52:5b:64:ad:8b:f0:15:
a6:cf:aa:85:ac:51:1a:54:83:bd:77:02:c5:20:14:cc:f4:b1:
61:e5:dc:c9:94:e0:9d:54:1e:58:2f:b8:f0:b5:ac:92:b2:da:
a2:59:05:8d:d3:65:15:89:40:d9:77:28:39:ed:17:8f:15:a8:
12:ef:e4:87:44:9a:e3:22:f0:48:a4:3f:38:34:03:33:38:f7:
1b:a6:f0:87:73:b2:01:b8:e7:60:a3:64:24:a6:3c:35:2f:70:
4d:e5:f3:03:47:c6:32:aa:a1:79:c7:d3:e1:d3:13:5f:fc:0f:
aa:4c:1f:aa:5c:99:55:e9:b4:a8:ca:2a:8a:68:c8:31:0e:2c:
77:51:0e:61:0c:a7:67:e8:3d:18:1c:63:1c:e7:aa:bb:83:ed:
45:23:73:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 09:36:15 2025 by rpki-client