Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9yJFC5_GVtmX7_0pFlEwldw4OAg.roa
File: 9yJFC5_GVtmX7_0pFlEwldw4OAg.roa (raw, json)
Hash identifier: iLOxnuCncrei2fkkNpjV8cbOCkfs4zRKyQz+OW8+2kA=
Subject key identifier: F7:22:45:0B:9F:C6:56:D9:97:EF:FD:29:16:51:30:95:DC:38:38:08
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188E48365C517F90D0B2C86A95E117F75E9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9yJFC5_GVtmX7_0pFlEwldw4OAg.roa
Signing time: Thu 22 Jun 2023 19:09:56 +0000
ROA not before: Thu 22 Jun 2023 19:09:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e4:83:65:c5:17:f9:0d:0b:2c:86:a9:5e:11:7f:75:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 22 19:09:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f722450b9fc656d997effd2916513095dc383808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:17:1a:7f:d5:70:39:d2:fb:53:71:4b:eb:68:
ac:60:0d:73:7f:fe:7b:4d:32:79:47:18:05:f0:df:
23:66:29:2f:e8:33:e2:27:4a:bd:c6:cc:58:40:b9:
8c:d7:d2:7e:a0:94:cf:5b:87:71:32:1a:ef:13:6d:
b1:7e:d4:ce:82:cf:8d:83:96:56:27:ba:12:98:cd:
24:d3:a8:39:db:c0:8c:21:5a:79:51:f5:bf:1e:9e:
e4:db:d6:15:a3:29:09:0c:ce:dc:36:08:4c:4f:90:
fd:ac:9a:29:31:3f:db:5f:27:71:1e:39:2a:86:e3:
83:62:0e:74:b3:f5:64:34:10:a7:73:c6:cc:fd:92:
7f:89:c3:68:d5:d4:8d:4a:da:39:9d:92:ca:ed:12:
30:70:20:64:6a:b0:69:66:e4:bb:d0:db:16:99:88:
28:24:19:16:b4:46:58:d4:17:5a:9b:be:80:10:d5:
5c:9f:35:5b:24:a7:c6:eb:65:11:86:4d:b9:78:ce:
9a:d2:23:60:3d:ef:b7:a9:fa:16:00:62:13:d7:74:
0d:9f:7a:3a:98:35:c2:a7:a6:3f:00:96:f5:31:ce:
1e:0b:7b:ec:2c:9c:06:f2:54:1f:98:cd:09:43:da:
03:c3:d4:a5:ba:74:ce:f9:21:ac:e2:16:2c:b5:58:
ec:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:22:45:0B:9F:C6:56:D9:97:EF:FD:29:16:51:30:95:DC:38:38:08
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9yJFC5_GVtmX7_0pFlEwldw4OAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
94:ef:3f:46:39:ad:b2:bf:f3:97:d1:72:bb:cd:19:b4:89:3e:
14:84:0e:f3:03:87:23:fe:31:36:05:4f:f8:22:47:a4:ff:97:
1d:f3:5d:03:ff:ea:7e:de:67:da:ef:ab:38:31:51:de:4c:20:
57:ec:f8:f7:23:07:5d:7b:b6:5e:c3:b1:94:7f:7b:48:60:3a:
9f:a7:cc:21:7d:f8:82:6e:c3:02:88:5b:ea:45:32:7f:c7:d5:
8e:48:f2:9d:df:bd:f4:43:a8:80:85:30:59:fc:7b:3c:82:32:
98:f3:58:b7:92:49:36:b0:ea:53:9a:f1:73:3a:e7:e5:63:de:
0f:01:50:19:ca:6a:fe:91:fc:72:17:63:35:67:51:f8:bf:1a:
d0:53:ea:d8:a8:c0:69:26:ce:3e:8c:a5:be:52:d9:cf:f2:25:
6d:0e:63:9c:00:63:8b:b6:50:e2:8d:54:54:86:c7:22:7d:74:
9a:c7:ce:8c:11:87:a8:9a:0e:75:17:41:65:3c:62:d6:80:9d:
ea:3a:1b:42:45:b7:96:42:15:22:96:c6:55:32:2e:03:95:d7:
3a:d4:6b:a0:51:12:4b:a6:f7:68:1d:43:a2:bf:36:a1:07:07:
0d:41:7e:5d:b6:63:81:9f:09:ce:01:f3:b9:6b:ea:bc:bf:1e:
4b:84:93:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 10:11:29 2025 by rpki-client