Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/F56byPmx-_97Z4dJ4a4T1qhDL3w.roa
File: F56byPmx-_97Z4dJ4a4T1qhDL3w.roa (raw, json)
Hash identifier: vmLLBaa7x+WmgpsakPIm86Ue22nNZ+l2uLQxJm/+ytw=
Subject key identifier: 17:9E:9B:C8:F9:B1:FB:FF:7B:67:87:49:E1:AE:13:D6:A8:43:2F:7C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01877D516FB92F29F27CA589D342F3032966
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/F56byPmx-_97Z4dJ4a4T1qhDL3w.roa
Signing time: Fri 14 Apr 2023 01:11:41 +0000
ROA not before: Fri 14 Apr 2023 01:11:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7d:51:6f:b9:2f:29:f2:7c:a5:89:d3:42:f3:03:29:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 14 01:11:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=179e9bc8f9b1fbff7b678749e1ae13d6a8432f7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:69:8f:1a:35:de:0e:7d:f5:58:63:40:0d:84:
71:72:5e:ca:9b:56:9f:5f:c8:1c:f4:e0:14:5e:07:
6f:bc:94:5b:55:13:b7:3f:9e:d4:6d:83:ec:15:8a:
0e:b9:2e:1b:fd:85:69:e6:de:45:61:3e:83:af:a7:
10:24:2c:e7:65:c5:92:24:09:52:0f:94:f8:1a:af:
58:81:04:72:dc:29:5f:0e:28:bf:5f:30:d6:40:d9:
3d:17:c7:43:2a:27:87:1a:fb:10:9b:95:57:bd:1a:
ba:c9:c7:27:85:95:a4:59:9a:ae:b4:14:e9:c9:95:
63:d6:2b:98:2d:ae:b3:ba:90:8c:8e:48:03:66:4d:
19:94:ad:71:15:89:be:a5:2d:98:35:6b:2c:fb:85:
3f:c5:15:27:0a:33:0a:01:94:bd:cb:79:55:0f:a9:
d4:2b:9a:4f:c7:5b:20:2b:f4:dd:44:a1:00:7e:fc:
d1:02:2c:31:ee:9c:c1:74:3d:ba:08:11:21:31:a3:
90:d2:9b:86:44:d5:0c:6f:be:31:16:13:03:04:7f:
57:bd:d2:f3:f9:86:ff:ab:83:39:33:12:65:f2:c5:
f9:65:82:3e:db:cf:b9:0f:ba:49:49:c6:1f:02:16:
75:09:4b:ff:33:06:c8:6a:26:26:03:42:8f:5a:33:
ef:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:9E:9B:C8:F9:B1:FB:FF:7B:67:87:49:E1:AE:13:D6:A8:43:2F:7C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/F56byPmx-_97Z4dJ4a4T1qhDL3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1a:4c:14:a6:65:53:3c:f6:19:c2:b0:70:fc:9e:fe:f8:7d:93:
ce:0e:69:f4:fd:af:41:02:c8:26:ee:37:19:6d:4d:a5:79:7f:
bd:7b:53:ef:40:fa:6b:59:93:1a:b4:3e:87:f5:75:1d:cf:3f:
0a:24:d4:3d:d6:f4:ac:eb:c3:d9:c9:ea:96:fd:16:85:28:f4:
2e:70:39:45:b3:21:74:72:87:6c:f0:06:dc:85:95:69:52:05:
c6:11:4a:ec:3a:3d:36:17:5f:32:bd:01:02:fc:c2:6c:82:bd:
00:a8:65:12:8f:59:32:21:d4:60:ff:19:37:ad:5e:4e:58:a8:
bc:95:0d:af:ab:eb:40:dd:62:af:d1:9d:8a:eb:e5:57:55:3f:
26:6a:df:0f:eb:cb:ca:bd:4f:06:36:bd:62:3f:12:02:41:5f:
43:1f:04:37:28:61:ae:9c:b0:06:b5:ff:89:6f:cc:d5:a0:df:
29:75:e1:b5:57:80:9e:85:f3:3c:cf:95:71:0e:1d:68:df:de:
08:9d:2f:0f:be:ad:07:4e:a4:2c:e3:a2:f3:65:60:ba:0b:42:
86:a6:9b:a1:ee:3d:0a:bb:af:e3:bf:f6:ee:9f:9d:22:dd:44:
c9:00:f2:42:75:25:88:38:a6:3c:90:0d:f9:b2:b6:d1:56:f5:
e1:64:b5:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:23:08 2025 by rpki-client