Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/C3dQ4JZF9gcfrlULuzklmrMtL3I.roa
File: C3dQ4JZF9gcfrlULuzklmrMtL3I.roa (raw, json)
Hash identifier: iedlhrpjl3I3Wlgc26S93tsnNspQINSZ4VAovDaJ8Co=
Subject key identifier: 0B:77:50:E0:96:45:F6:07:1F:AE:55:0B:BB:39:25:9A:B3:2D:2F:72
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018891413DBC0AA5A1A945960F6692A66267
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/C3dQ4JZF9gcfrlULuzklmrMtL3I.roa
Signing time: Tue 06 Jun 2023 15:09:11 +0000
ROA not before: Tue 06 Jun 2023 15:09:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:91:41:3d:bc:0a:a5:a1:a9:45:96:0f:66:92:a6:62:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 6 15:09:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b7750e09645f6071fae550bbb39259ab32d2f72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8b:42:f5:c5:60:c5:ec:57:36:59:7e:c7:c5:
41:cc:4d:00:00:78:f1:54:d1:07:a3:37:80:50:19:
34:31:9a:6d:f1:3d:31:79:47:12:2f:82:8d:1b:3a:
f7:3b:d5:a1:ae:1d:78:f4:1f:c7:7e:22:37:38:b5:
d3:7b:bf:4c:42:bf:cb:bd:b5:ba:05:54:63:b0:c5:
71:48:ea:7b:ea:b9:f4:7f:d1:5b:d1:2d:1a:59:d3:
49:cf:80:43:e7:1e:54:4d:9e:ed:8b:af:9e:3e:d5:
f9:dc:08:73:42:20:fe:f8:db:9f:e4:da:b5:b9:ef:
b6:58:fc:2d:04:bd:39:86:62:02:cd:fb:46:79:16:
74:b1:5b:49:73:84:7c:b2:21:c1:00:5c:21:0a:a4:
0c:e2:66:28:3f:75:73:d2:6c:f4:de:62:75:6c:35:
20:b3:d2:9b:e5:ce:f7:ff:c0:ac:54:c5:b7:5d:8a:
33:32:f0:5a:3e:b8:e5:e0:ce:8e:44:e5:54:b6:3b:
81:61:9f:80:25:84:81:77:06:5f:89:bd:75:95:0d:
2a:cc:a0:62:f2:7d:0d:77:bb:67:4d:f2:6e:9b:73:
b5:89:8e:4f:9f:a3:e8:85:57:2e:b7:2a:f1:a5:96:
e9:ca:4a:e4:28:1a:ae:8f:b9:0d:64:22:4a:21:f0:
da:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:77:50:E0:96:45:F6:07:1F:AE:55:0B:BB:39:25:9A:B3:2D:2F:72
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/C3dQ4JZF9gcfrlULuzklmrMtL3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
15:16:06:93:67:3b:dc:6c:01:6a:e0:f9:b7:dc:a5:5e:64:b5:
48:d6:96:cd:f0:97:aa:0a:59:ae:98:ce:4d:78:bf:8f:85:e7:
d7:e1:02:4d:2b:b9:87:7d:8d:16:3d:5a:a5:d5:60:ca:b4:8f:
72:35:1c:bf:98:b4:5d:41:67:34:3f:d0:45:7e:67:34:ac:ea:
bd:28:54:df:71:98:27:6f:b1:47:f2:a5:77:bc:1c:b2:c8:fd:
3a:c7:87:f6:a5:23:90:88:dd:d1:24:49:2d:c3:f1:f1:a0:70:
77:11:91:f5:68:98:9a:6e:0c:78:e5:16:9b:71:18:79:34:2c:
cf:6d:68:af:6a:8f:0c:41:58:98:e6:48:26:f8:cd:36:20:55:
56:e0:74:ff:bc:ad:68:9b:1e:22:ee:7f:2f:bc:0e:09:cf:9a:
6f:c4:58:8e:ed:75:5e:40:a8:49:12:04:b4:bf:8d:e6:5a:78:
11:a2:82:a0:1f:c7:1a:7a:a7:2d:93:28:06:d3:cb:ca:62:6d:
8d:95:02:0d:ce:71:6e:de:f6:58:c9:ea:ab:29:a2:2a:91:22:
49:dd:5d:2a:bf:34:36:58:40:2d:23:bf:15:0b:9c:dc:a4:64:
57:ae:76:85:d8:f6:05:01:a8:81:70:6a:c0:da:61:63:00:28:
d1:25:98:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:44:20 2025 by rpki-client