Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9cA88BZxu98bGh_7s82Zl0zTZlY.roa
File: 9cA88BZxu98bGh_7s82Zl0zTZlY.roa (raw, json)
Hash identifier: 1gj03GQDrI5jPDg3nM66S+iSYsTBOEsvXotmmtCNsSE=
Subject key identifier: F5:C0:3C:F0:16:71:BB:DF:1B:1A:1F:FB:B3:CD:99:97:4C:D3:66:56
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187D08F3F6492B4738FF993E1BF84C4F26A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9cA88BZxu98bGh_7s82Zl0zTZlY.roa
Signing time: Sun 30 Apr 2023 05:07:41 +0000
ROA not before: Sun 30 Apr 2023 05:07:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:d0:8f:3f:64:92:b4:73:8f:f9:93:e1:bf:84:c4:f2:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 30 05:07:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f5c03cf01671bbdf1b1a1ffbb3cd99974cd36656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b5:a2:4a:79:e3:23:33:67:04:3a:08:1e:54:
3d:ba:92:87:e7:54:83:bd:47:a3:45:bc:3c:a3:15:
94:0c:8a:b7:49:4b:16:cb:7f:40:30:0b:27:17:29:
5c:89:d7:c5:8f:78:9f:b5:f0:2a:87:dc:94:70:60:
66:ec:df:82:89:fc:2a:8f:f2:fb:fa:be:49:ad:3e:
47:6e:d1:c2:8c:c9:e5:62:fa:38:81:3f:da:69:64:
42:fa:8d:03:a6:04:1d:62:bd:f0:fe:ff:7c:39:1c:
e2:7a:b1:bc:80:85:98:b6:32:54:e5:a4:2f:96:6c:
07:ce:99:ad:74:aa:1d:59:71:20:b2:b0:40:a9:69:
9d:73:cd:54:65:57:70:f7:63:f0:35:79:c1:3e:b5:
ca:04:20:18:34:00:e4:a6:5c:17:07:0b:5f:b6:60:
e5:b5:18:cd:4e:0a:37:18:43:d7:fa:95:0d:9e:11:
28:0a:e2:a2:dd:45:f7:23:8c:72:42:4d:b6:0d:f5:
19:c7:8d:6a:fc:2d:ec:e4:b4:16:58:0c:a2:8f:21:
eb:e1:2e:09:a4:0c:46:b0:f7:e3:73:70:14:19:84:
a7:a7:32:d1:a5:ef:4f:28:9d:61:7d:6c:6f:21:77:
22:ee:30:5a:9b:db:fa:df:9a:c0:95:ff:59:2e:e3:
78:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C0:3C:F0:16:71:BB:DF:1B:1A:1F:FB:B3:CD:99:97:4C:D3:66:56
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9cA88BZxu98bGh_7s82Zl0zTZlY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3d:e8:06:70:08:14:37:51:cc:cd:44:f9:4e:47:b2:fc:77:87:
b7:55:08:d5:b0:37:21:3c:1a:3d:e0:19:79:08:44:33:95:f8:
35:29:62:d6:df:1b:18:7d:32:cb:e1:3f:79:fb:71:18:ea:04:
ec:35:f6:ef:72:c7:d0:0c:51:12:a9:f4:49:b6:b6:19:a1:7e:
e8:11:c5:7b:f1:bd:e3:57:a1:f0:c2:db:63:f7:73:5e:1e:d2:
64:06:a5:b3:f1:52:d3:4b:74:ac:2a:0a:27:03:c7:3c:1a:a4:
51:94:7b:1c:43:92:25:4e:25:52:a5:6a:2e:1e:eb:a0:ba:3f:
32:cb:e6:7f:09:89:cd:00:e3:ad:1f:3a:2d:3b:5d:05:ae:06:
9d:f5:08:ae:95:1e:c6:b8:2a:3e:21:55:37:6c:83:31:5b:43:
19:bc:0d:90:c0:ae:5e:06:72:ff:4e:b2:5c:34:d4:5f:2f:c1:
b9:29:ec:1c:80:2a:8d:30:de:e5:2f:48:a0:e5:2c:84:d9:76:
06:de:e0:eb:e4:92:95:39:86:18:b3:c5:46:25:ae:ba:07:ae:
b5:7e:cb:cc:28:18:31:ed:64:ad:ad:b0:db:80:f6:8e:9d:9c:
d0:12:0d:24:7e:9e:ee:4e:a9:38:dd:7a:d4:78:da:e3:80:e0:
8c:54:34:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 09:45:10 2025 by rpki-client