Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/A1EUoRRJw_tumRRn9g7dtGuxrK8.roa
File: A1EUoRRJw_tumRRn9g7dtGuxrK8.roa (raw, json)
Hash identifier: XlJpGDOUQRpyKsaSPPqUIzxsU211hTfFZCgnPqlnB9A=
Subject key identifier: 03:51:14:A1:14:49:C3:FB:6E:99:14:67:F6:0E:DD:B4:6B:B1:AC:AF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187455338C6E14E54E3DA22C69C1525B1D0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/A1EUoRRJw_tumRRn9g7dtGuxrK8.roa
Signing time: Mon 03 Apr 2023 04:14:54 +0000
ROA not before: Mon 03 Apr 2023 04:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:45:53:38:c6:e1:4e:54:e3:da:22:c6:9c:15:25:b1:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 3 04:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=035114a11449c3fb6e991467f60eddb46bb1acaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:09:73:12:63:d7:66:60:9c:58:e1:22:9b:c8:
88:47:4b:94:07:18:c0:b5:ee:ae:e9:e7:18:ee:35:
cb:8c:64:fb:25:5d:de:4c:e3:a0:c6:e1:60:0e:68:
7d:70:83:c5:e2:ee:d3:8a:d3:7a:a2:96:bb:b2:c2:
a1:2d:3d:ca:fc:89:89:38:c8:8b:f3:62:4a:9e:16:
a7:3f:03:d0:df:d7:08:65:68:c4:7a:be:ca:13:67:
e4:81:ba:ee:87:e1:43:52:2d:0e:b4:ef:7a:0e:5d:
d6:b2:e3:5b:c5:a6:7a:07:d2:71:5d:3b:d9:28:44:
3e:22:3a:28:23:cf:c8:c4:27:04:48:30:61:6b:17:
0e:3d:62:3a:bd:ab:e7:61:f6:3d:ab:89:5a:4f:74:
12:d4:2a:67:3a:7e:42:5b:b1:eb:67:fe:6c:72:e1:
18:6b:b6:92:aa:c0:73:1b:eb:d2:e6:6a:53:fb:fa:
cf:7e:b7:48:9a:66:c5:6c:3a:4e:77:37:0f:b1:e1:
2f:8b:d6:56:d9:cf:8c:67:3c:19:e9:9c:3f:19:d4:
38:d9:0c:99:4f:aa:45:51:43:d1:ad:50:2b:b0:35:
a1:f6:cb:32:d4:64:0f:f8:4a:3c:fa:0a:9a:45:66:
da:dd:01:7a:5d:aa:04:f6:ad:9f:cd:d0:c5:c3:c3:
50:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:51:14:A1:14:49:C3:FB:6E:99:14:67:F6:0E:DD:B4:6B:B1:AC:AF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/A1EUoRRJw_tumRRn9g7dtGuxrK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
75:4b:6b:0f:bf:39:8e:62:5f:f7:37:70:11:59:aa:b8:18:8d:
66:49:75:5c:b8:01:f1:81:2e:81:06:98:a3:ff:1a:5a:bc:2c:
0a:8b:43:33:77:f1:cd:31:88:0d:c3:be:10:48:83:b7:f5:79:
a0:25:c5:c5:e5:96:93:e2:08:76:95:f7:6e:ff:52:7d:9e:a7:
15:b4:75:7a:33:fd:84:46:b9:dd:c2:87:41:0e:1a:62:58:c2:
45:66:a6:92:e1:9e:71:9f:20:8c:30:37:a9:2b:4d:bb:bd:33:
7c:34:63:b8:e8:f0:ae:2a:8e:a0:35:14:24:17:c4:29:01:3c:
ee:d3:56:55:c7:01:c4:4d:b8:6e:48:bc:1b:c6:bf:42:bf:e2:
c5:68:49:67:c7:83:18:58:4c:64:5d:31:f0:33:7e:d3:a0:b6:
86:db:f1:e4:8f:65:83:ce:27:2d:3c:d1:97:38:c7:d5:21:a5:
24:ea:c8:c5:cf:04:ee:79:8d:0e:2e:97:3c:40:b7:9e:17:ce:
b6:5f:0c:c9:a0:08:21:c3:24:18:87:66:47:7c:be:46:61:38:
62:2d:8f:7a:5b:21:5f:e5:5f:f9:4b:12:37:46:9e:95:61:82:
91:2e:16:ec:71:d4:be:09:71:78:05:1f:c9:46:e4:ec:1a:36:
87:28:35:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 09:13:53 2025 by rpki-client