Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CU5k6TTHcObrYYQ8f0C4mxjC1I8.roa
File: CU5k6TTHcObrYYQ8f0C4mxjC1I8.roa (raw, json)
Hash identifier: cKSLF+t+JPdwm/+CHcjUPe5L+P1oOVin8C7Lr5PGSTY=
Subject key identifier: 09:4E:64:E9:34:C7:70:E6:EB:61:84:3C:7F:40:B8:9B:18:C2:D4:8F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186E344E017D985D2ADAFC10FBC66B901F8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CU5k6TTHcObrYYQ8f0C4mxjC1I8.roa
Signing time: Wed 15 Mar 2023 03:16:27 +0000
ROA not before: Wed 15 Mar 2023 03:16:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e3:44:e0:17:d9:85:d2:ad:af:c1:0f:bc:66:b9:01:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 15 03:16:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=094e64e934c770e6eb61843c7f40b89b18c2d48f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f1:94:d2:99:cd:3f:fd:88:a2:b2:55:08:94:
45:d2:90:bb:e3:e4:b7:91:27:57:ee:d9:14:99:6c:
c4:89:84:f1:05:2c:8b:72:d6:80:7f:8c:17:2b:5f:
ac:b6:26:a8:2e:4e:07:18:55:60:c9:f2:aa:57:00:
87:fd:f7:63:d4:01:6f:37:74:15:66:50:82:e2:3f:
79:9b:9a:d7:97:2b:34:7c:83:11:80:b8:b7:03:c5:
ff:ca:0e:43:62:d4:cd:f6:a0:d6:79:c3:bb:bc:1e:
b5:ce:9f:03:79:f8:0d:7d:44:00:d0:06:83:06:48:
da:b4:31:dc:56:ba:67:cf:df:92:a4:4b:01:b8:f8:
b2:17:84:c0:ec:7e:ba:9e:ea:6e:75:ab:b6:d0:b6:
0a:c9:0c:dd:9f:b3:2b:d8:d1:ca:75:b7:b4:85:a0:
66:a8:b3:4e:53:5d:04:49:0d:7f:10:28:5b:91:17:
ca:5b:8f:3c:f3:b3:63:5a:4b:46:f0:68:4a:34:07:
cd:b6:a9:de:78:ba:43:3b:10:a2:d1:e8:8f:ee:4e:
86:8d:65:b1:5b:77:ab:32:a0:72:7c:1d:c0:dc:f9:
21:27:a6:c8:1a:34:ff:00:75:77:27:d9:e4:56:c7:
f4:c9:1e:f0:0d:ea:be:6f:2c:46:5a:e7:de:f5:a6:
a2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:4E:64:E9:34:C7:70:E6:EB:61:84:3C:7F:40:B8:9B:18:C2:D4:8F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CU5k6TTHcObrYYQ8f0C4mxjC1I8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
78:d3:4c:2b:ae:21:78:a7:89:50:66:f7:d7:01:6e:78:00:58:
c6:6e:47:e8:1d:7a:9d:84:de:4b:c1:7e:a9:a7:d0:a4:75:e1:
45:f4:0b:b9:08:71:a2:e9:26:a3:da:61:a5:7c:94:5c:87:12:
2b:cf:62:9f:91:65:2a:85:e8:a9:04:32:58:c9:4b:70:f8:7c:
16:32:81:e9:0e:6e:9e:46:6a:1b:64:39:9f:02:7b:37:8f:7a:
0c:04:1d:a1:e0:2d:b4:4a:13:2d:57:33:0e:4a:80:c6:62:c1:
71:da:7f:1c:76:c7:59:eb:1f:cf:9c:32:cf:af:1c:9b:5c:9d:
27:52:2a:ed:e7:57:e1:e7:01:d4:f3:07:60:59:6b:08:54:83:
9e:f8:d7:0b:ae:4b:6b:e8:0a:40:30:b0:00:14:37:62:98:e8:
ae:fd:10:c9:7e:8c:9a:97:77:af:22:ed:34:e0:cb:f8:3f:2f:
7e:0a:f6:ff:cd:a0:8b:db:fc:40:02:9c:a5:13:bc:fb:ae:50:
d8:77:74:63:1d:79:63:67:00:23:29:9f:21:f3:17:1a:ac:8a:
2e:58:bb:ac:c6:e2:dd:08:d2:b3:76:f7:eb:49:22:cc:cc:9b:
fd:7c:08:b1:25:4e:62:f2:c0:d5:b3:80:44:75:4e:9d:e3:93:
df:3e:c0:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 13:20:28 2025 by rpki-client