Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AIfug15ZmXMbtr0rMSaAYU0XFJ0.roa
File: AIfug15ZmXMbtr0rMSaAYU0XFJ0.roa (raw, json)
Hash identifier: 7lYGv+uYK4PrxmXBu5eW+d6XEiFnijF+1MoyVWWwCyk=
Subject key identifier: 00:87:EE:83:5E:59:99:73:1B:B6:BD:2B:31:26:80:61:4D:17:14:9D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01896D6B2C2A414CED22A2CD01B7F9E060E1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AIfug15ZmXMbtr0rMSaAYU0XFJ0.roa
Signing time: Wed 19 Jul 2023 09:11:27 +0000
ROA not before: Wed 19 Jul 2023 09:11:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:6d:6b:2c:2a:41:4c:ed:22:a2:cd:01:b7:f9:e0:60:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 19 09:11:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0087ee835e5999731bb6bd2b312680614d17149d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bb:d7:bf:70:39:46:be:2b:0d:65:6b:76:d8:
3c:f9:0b:69:3b:63:52:27:e7:d3:a0:10:e7:bc:e0:
14:ce:c9:d6:e3:6e:e7:4a:46:9a:11:20:e2:9c:c2:
23:64:16:8a:ba:54:dd:d8:31:39:8b:0c:23:a9:ad:
17:9b:fe:dd:6c:59:09:35:a4:b1:ca:d9:45:d7:1b:
2d:e5:20:e3:49:e3:51:e4:3a:0e:f0:7f:bb:5e:38:
8e:e5:2e:69:b9:a6:e2:7b:59:bd:50:9c:2a:b9:71:
93:07:c6:8e:b9:73:a0:b4:2d:81:29:62:45:cb:ba:
8a:7c:5e:0e:a2:dd:55:58:4b:87:54:b8:55:5d:9e:
9e:18:00:ac:6f:0c:33:91:6a:91:31:45:f9:83:dd:
14:51:a1:a3:94:a4:bd:a2:aa:6f:ed:06:1b:58:5e:
62:36:54:00:dc:20:bd:fb:fe:57:e0:55:c2:fa:81:
ab:06:a1:3c:01:90:75:36:ed:9a:0f:cf:c7:53:7e:
62:a7:fd:1e:72:46:39:7d:f7:20:79:d6:e6:f4:6e:
30:60:09:45:a3:54:3a:cf:4d:35:2f:8e:bb:cc:b5:
2a:c4:03:31:05:85:56:48:78:aa:2d:11:69:0d:69:
60:e1:a0:d3:ee:7b:b4:65:76:3a:1c:ab:05:4d:cc:
e6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:87:EE:83:5E:59:99:73:1B:B6:BD:2B:31:26:80:61:4D:17:14:9D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AIfug15ZmXMbtr0rMSaAYU0XFJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
09:45:dc:10:f2:85:d9:a6:64:0b:c5:24:20:0c:cd:5f:77:bf:
3c:b4:eb:06:81:00:39:df:55:4c:07:91:f3:e8:ca:fe:0e:ea:
59:9d:ea:84:88:30:fe:7d:af:39:d2:7a:8e:78:db:b2:74:8e:
5e:29:5f:e5:a9:85:41:7e:26:76:94:b5:c9:9c:72:59:3f:be:
54:d6:98:99:e4:16:bc:87:d8:c8:41:89:9b:e8:f5:de:71:3b:
9d:59:d0:b9:9c:d9:18:30:a0:b7:99:94:fe:26:b1:db:e0:a3:
61:77:6c:ea:18:d2:34:b2:65:98:50:9c:9f:c4:b8:ae:57:f1:
b3:39:36:ee:b7:7b:34:65:be:2f:de:49:e5:af:9c:58:e1:83:
60:5f:10:6d:9e:42:74:a4:48:82:47:4d:cf:82:ec:b7:f7:de:
95:51:8e:06:d5:9a:e5:8d:60:ea:ef:de:b4:aa:0c:ba:a3:19:
31:49:4f:3c:5f:98:0c:aa:2a:d8:0d:f0:28:22:e4:b9:0d:98:
8f:4a:e8:9c:64:6b:c5:af:d0:01:b0:e8:41:6e:5d:6d:8a:45:
58:aa:4c:ed:5f:e4:96:df:8d:87:6c:47:f2:62:a5:5c:a1:31:
c4:fe:81:f0:ae:0e:16:80:50:94:68:d6:a3:34:81:58:88:70:
18:d9:66:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:08:09 2025 by rpki-client