Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9nPXVIOetuLi9v-wDZLfn3F0KuQ.roa
File: 9nPXVIOetuLi9v-wDZLfn3F0KuQ.roa (raw, json)
Hash identifier: 0191/LA6XpmcFRwM7jNL/FTP51FMZWEwgg0yKwnvjVI=
Subject key identifier: F6:73:D7:54:83:9E:B6:E2:E2:F6:FF:B0:0D:92:DF:9F:71:74:2A:E4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01881919542900A0EC59E820C8CC940A0725
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9nPXVIOetuLi9v-wDZLfn3F0KuQ.roa
Signing time: Sun 14 May 2023 07:11:10 +0000
ROA not before: Sun 14 May 2023 07:11:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:19:19:54:29:00:a0:ec:59:e8:20:c8:cc:94:0a:07:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 14 07:11:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f673d754839eb6e2e2f6ffb00d92df9f71742ae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:35:82:c6:ff:5a:46:07:25:3f:10:4b:9e:5f:
d1:b6:be:55:50:16:9f:c0:72:d6:25:d0:98:93:ef:
d8:bb:fa:75:65:e3:d0:f5:3d:08:23:1e:e9:2d:d9:
85:77:19:e0:cd:2c:5f:95:ba:2d:3f:68:cd:0f:b1:
5c:4d:64:9c:70:4c:59:a8:ba:21:1a:23:e1:f9:f3:
8d:dd:d5:2e:85:54:ab:ff:86:ce:10:fa:d8:09:25:
77:2a:68:f5:eb:44:b3:83:fc:48:fc:ca:cc:6a:b8:
87:f9:20:1d:25:c3:f7:d4:14:bd:5f:ee:df:e7:63:
5c:75:e1:fc:51:7e:c0:05:53:43:4a:cb:37:4b:ad:
2b:a5:aa:25:84:b1:06:41:0b:c7:ce:0c:1c:b1:44:
ce:20:99:5d:69:21:f4:26:18:cb:71:91:87:6a:15:
60:96:6e:d6:7e:3a:94:b7:dc:43:6b:c2:be:26:cb:
c4:c9:f4:ea:a1:10:0a:23:2e:c3:74:bc:87:dd:fc:
ef:16:da:82:75:0e:46:b9:52:92:11:8d:55:f5:00:
cc:a9:99:23:21:7f:aa:19:d3:52:a4:9c:cb:b2:b1:
3d:ca:12:b1:b0:9d:d2:a1:c7:26:d9:ca:61:4a:43:
00:de:82:bf:9f:98:3c:dc:d8:94:70:de:d2:15:e9:
ba:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:73:D7:54:83:9E:B6:E2:E2:F6:FF:B0:0D:92:DF:9F:71:74:2A:E4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9nPXVIOetuLi9v-wDZLfn3F0KuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8a:10:0f:ac:0a:08:2f:6a:33:84:98:a3:0f:e0:e3:a6:d6:fd:
ae:4f:aa:56:c0:8a:e4:f8:b2:2d:fe:f9:cd:a2:25:70:cc:9a:
c1:3f:3f:4e:17:64:6f:cc:ee:ee:4d:21:c5:b6:d3:28:b5:6f:
84:e2:9d:bb:2d:5c:8c:6b:3a:71:04:17:40:31:f6:dd:78:62:
21:82:ae:cc:ce:39:a6:25:24:5d:9e:98:89:c0:36:d0:82:b9:
c4:d3:72:fd:20:8c:b4:a0:ab:2b:76:fd:14:e6:64:97:02:99:
94:7b:e7:ed:72:3f:34:5d:31:93:76:a8:7a:9b:2c:d2:bf:71:
ff:eb:24:b2:83:73:2f:bc:fb:e3:de:93:f0:41:58:61:e9:71:
68:3d:6d:c3:d0:fe:b5:9d:d5:ea:60:96:69:1e:68:1f:43:fb:
c9:51:da:b5:4a:95:76:51:b7:0a:df:11:f5:77:45:68:0f:8e:
70:e1:59:ef:f2:48:2b:29:4c:c6:f7:54:55:5b:06:3d:24:42:
e4:3a:ec:91:e4:4e:74:35:71:9d:f3:3a:4f:db:18:6a:d3:5a:
d1:a2:0e:52:94:29:d7:cd:8c:fd:4d:8c:cb:ea:f5:5a:07:e1:
ea:8f:bb:43:f4:6b:e5:7b:e2:e5:81:58:9e:c2:9e:55:0c:3c:
42:75:01:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 11:14:57 2025 by rpki-client