Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/D72JTqFARiKZHsElhxXGdtv_5_M.roa
File: D72JTqFARiKZHsElhxXGdtv_5_M.roa (raw, json)
Hash identifier: AlVu0NuhisrBQuDNGORb/+GoIdbRQEXvUQrDA+PG1SU=
Subject key identifier: 0F:BD:89:4E:A1:40:46:22:99:1E:C1:25:87:15:C6:76:DB:FF:E7:F3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189D625062FC764D2F95EA6150BBE302608
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/D72JTqFARiKZHsElhxXGdtv_5_M.roa
Signing time: Tue 08 Aug 2023 17:14:57 +0000
ROA not before: Tue 08 Aug 2023 17:14:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d6:25:06:2f:c7:64:d2:f9:5e:a6:15:0b:be:30:26:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 8 17:14:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0fbd894ea1404622991ec1258715c676dbffe7f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:5e:d5:20:07:70:30:b1:0e:f4:94:ee:9a:6f:
59:69:65:4c:b0:17:25:46:d5:ae:9a:7a:6d:89:eb:
fd:6f:68:c2:bc:82:dc:b5:2b:e9:62:68:94:b6:4f:
0b:40:f5:8c:19:bf:78:dc:09:2b:ed:32:8b:53:dc:
e5:2f:a0:15:83:f0:e2:6a:23:59:b0:61:6d:00:62:
00:68:94:a3:bf:ef:be:46:85:98:8b:bc:cb:ce:c7:
5e:fe:a3:76:d4:04:86:6b:7b:e7:6d:e6:28:35:3f:
09:70:f7:ec:bd:e8:31:3e:56:0f:56:d1:25:73:fc:
28:5b:d4:b6:a5:97:4e:36:81:32:0b:ff:d0:86:25:
b7:af:7d:10:84:0f:be:3f:c8:e3:51:98:dd:5b:56:
d5:06:34:51:50:9e:1f:1a:c2:a3:2a:4b:4c:de:2f:
8f:62:dc:1f:8d:6f:19:a7:51:9e:b7:27:e4:b7:30:
dc:f8:33:fe:5c:9a:f8:34:29:c9:7a:0c:94:ef:5d:
a9:7e:05:b1:b1:8e:43:f3:91:e2:c1:56:de:ec:d6:
a4:b4:4c:dc:dd:d3:c2:bb:e9:8a:e5:81:e3:d5:f8:
5a:54:18:80:b5:d5:f2:66:ce:75:a8:19:c9:fd:57:
4b:46:0d:fc:80:c3:13:5a:21:ad:05:20:2c:87:6a:
db:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:BD:89:4E:A1:40:46:22:99:1E:C1:25:87:15:C6:76:DB:FF:E7:F3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/D72JTqFARiKZHsElhxXGdtv_5_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
22:1b:b6:b9:ed:70:dd:ca:05:74:5e:dd:ad:96:55:96:c8:a0:
4e:6a:9b:f1:04:0d:ac:16:d7:4c:6b:4e:79:4a:67:3d:ea:45:
0e:34:c7:a4:0c:02:3b:3e:2b:9f:48:09:59:e0:6f:78:6a:92:
dc:f0:de:b5:fc:1b:2d:47:a4:0b:59:ff:88:3c:b8:9a:e8:e4:
7d:da:3c:14:4c:69:f2:eb:63:79:1b:bd:f3:8b:22:a8:18:e6:
fd:fc:60:dc:3c:ba:d3:a2:86:40:c3:7e:6b:62:1d:07:33:12:
47:69:ca:1e:94:83:ee:78:92:a2:3f:56:01:95:98:d3:60:b1:
04:bf:67:e8:4f:35:a7:3c:a8:13:1b:a8:71:41:ec:fa:f4:5e:
a1:a4:94:8b:0a:c7:39:37:1e:d2:0b:31:37:97:ad:9e:6d:23:
3f:ce:ac:f9:88:a2:0d:3b:05:46:fb:ea:61:f3:84:b5:0c:f8:
bc:2c:7f:3c:3b:c0:f1:f3:b3:64:8c:da:db:e9:29:95:4c:cd:
3b:ab:8f:72:d1:bd:c7:a9:d6:27:b7:86:f6:05:2b:1a:c7:31:
36:d3:fe:67:fe:e7:28:f4:11:e9:9c:4a:f0:7d:11:53:89:11:
99:84:ba:ca:53:a0:fe:2d:06:c2:7a:63:a6:48:89:08:f4:85:
6a:48:22:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 09:59:06 2025 by rpki-client