Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/D0hiwuxVE_iNgTyImOs9r6WJlCk.roa
File: D0hiwuxVE_iNgTyImOs9r6WJlCk.roa (raw, json)
Hash identifier: vuQVz9JT/lrLTDhXcUky46d08aqZlK87JmskLbc10DE=
Subject key identifier: 0F:48:62:C2:EC:55:13:F8:8D:81:3C:88:98:EB:3D:AF:A5:89:94:29
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018792C78365F2022B1B5458D8B3BD69F143
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/D0hiwuxVE_iNgTyImOs9r6WJlCk.roa
Signing time: Tue 18 Apr 2023 05:12:41 +0000
ROA not before: Tue 18 Apr 2023 05:12:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:92:c7:83:65:f2:02:2b:1b:54:58:d8:b3:bd:69:f1:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 18 05:12:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0f4862c2ec5513f88d813c8898eb3dafa5899429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:38:a3:87:33:68:57:c2:ba:2d:74:95:b5:07:
32:87:c2:31:78:92:ea:6d:05:e7:61:f3:82:90:cd:
f8:6d:88:da:5f:49:fa:0b:5c:7b:b0:0e:e8:33:ae:
e5:12:c2:9b:37:2d:08:af:f9:0c:f6:32:15:91:f7:
90:88:09:fc:f4:70:e6:84:27:7b:ea:12:58:a7:9f:
b7:37:a6:f3:e1:cc:1e:b3:03:c8:c2:88:19:82:d7:
5d:ea:53:e6:38:0c:14:f0:79:e5:2a:30:43:f9:67:
ec:ba:e9:06:8a:6c:ba:7b:55:2e:6c:0e:e7:cb:b8:
c2:04:6a:ff:5d:8f:6e:4e:ee:14:c5:d3:6a:79:4b:
5c:ef:a1:de:e0:e7:b0:58:b8:7e:cf:89:d7:f7:6c:
3f:b3:e2:10:f7:72:4c:2f:bb:3f:87:54:3a:79:ed:
6c:f8:73:8c:ea:cf:18:98:9f:93:f6:5a:a0:63:a9:
84:38:23:28:ad:8c:3b:82:6e:1f:13:19:e3:5a:83:
27:b4:c6:09:23:1b:aa:12:b7:26:00:d2:6f:eb:f6:
d5:63:9d:26:42:5f:15:2b:10:0c:fe:49:f2:7b:dd:
5f:43:38:6a:cc:3c:4f:3c:02:64:41:3a:31:2d:d2:
54:0b:0e:0c:8d:c1:97:6c:61:7a:b0:c9:7b:7a:8f:
9a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:48:62:C2:EC:55:13:F8:8D:81:3C:88:98:EB:3D:AF:A5:89:94:29
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/D0hiwuxVE_iNgTyImOs9r6WJlCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ab:e2:95:79:d4:6e:6f:15:34:1f:41:9d:da:9e:32:d0:5b:c6:
34:d3:96:7d:bf:bd:bb:7e:cb:33:bd:53:80:56:22:0b:ca:14:
10:94:d7:4b:a1:f1:cb:1f:85:91:23:84:f9:ba:70:7f:40:8d:
a8:ca:e7:09:42:0f:8f:74:7d:87:57:50:79:90:72:f4:22:89:
9c:eb:4e:4f:de:7d:59:36:c3:ee:58:dc:da:a6:00:fd:dd:f4:
cb:ca:b5:86:19:cf:c1:bc:3b:75:44:9e:d7:a2:d1:32:3e:07:
9a:4d:37:a5:d2:53:ca:36:da:2b:38:88:cf:ae:3f:dc:27:5a:
14:52:04:eb:69:af:64:9d:28:a7:ff:75:e4:a7:39:d5:f7:db:
29:f3:c2:dc:03:bf:8d:bf:99:87:1f:10:29:e5:32:79:13:27:
0d:47:3d:d0:99:50:f7:44:e5:b9:65:f9:d3:49:2c:da:a4:6e:
29:c0:26:f4:a7:c2:25:5f:34:f5:f8:61:c2:66:84:3d:df:46:
de:0e:93:b0:53:a7:07:f1:57:b7:ad:53:3b:54:2d:37:a5:c3:
c0:48:cc:46:a6:14:61:60:5e:04:3f:fe:36:39:92:1a:a8:2a:
f1:95:f4:62:6a:4a:7e:27:4e:19:96:ee:da:8f:77:d1:38:66:
3c:34:a3:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 08:32:54 2025 by rpki-client