Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/I4FJc7hUSUF33XXz1G6GvNYG6xM.roa
File: I4FJc7hUSUF33XXz1G6GvNYG6xM.roa (raw, json)
Hash identifier: 5QXgKlmfz1lA2Q+9vm28BR9wWB0ay+HviHMgLebwiG0=
Subject key identifier: 23:81:49:73:B8:54:49:41:77:DD:75:F3:D4:6E:86:BC:D6:06:EB:13
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01889D7C9C9FE3433F311397E674F126C8D8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/I4FJc7hUSUF33XXz1G6GvNYG6xM.roa
Signing time: Fri 09 Jun 2023 00:09:29 +0000
ROA not before: Fri 09 Jun 2023 00:09:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9d:7c:9c:9f:e3:43:3f:31:13:97:e6:74:f1:26:c8:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 9 00:09:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=23814973b854494177dd75f3d46e86bcd606eb13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e7:07:a0:64:5f:2e:30:ee:7a:20:6b:9c:ef:
b3:ee:d9:be:b0:be:ad:b7:48:0a:7e:aa:c9:28:6f:
34:65:78:46:e9:c6:0f:1a:6a:0e:fd:6d:8b:20:03:
90:a5:eb:1b:59:32:32:e5:41:04:f9:19:5a:60:59:
cb:0a:4b:4d:54:a8:84:74:9e:8a:2b:4f:95:7c:01:
d8:a2:f8:66:76:91:58:c7:84:c1:af:5b:c2:79:ce:
45:53:d8:73:d5:7b:56:22:1e:7d:da:85:9b:da:8e:
cd:79:6f:06:32:20:b4:74:37:f5:46:eb:17:f7:0a:
dd:c2:a3:1c:a9:b5:56:23:8d:54:15:2e:e3:f4:fe:
94:3e:e4:29:2f:e4:f1:53:18:93:24:48:7b:b9:f0:
00:ab:2f:56:97:f7:1e:9f:21:bf:81:47:fa:5d:a3:
94:36:69:a8:bd:69:85:14:a6:19:f0:aa:c9:7f:2f:
a7:d6:43:b4:b9:db:11:83:a5:ca:38:7e:94:d6:22:
a0:af:86:5b:72:07:7d:49:e8:b7:d2:61:66:33:82:
cb:b0:27:05:51:37:2f:a7:42:a5:16:5c:5a:a1:48:
5e:83:3b:9a:ec:52:3e:f2:5c:c8:80:00:b4:29:45:
43:2d:ef:ee:68:dd:22:40:74:64:da:f2:71:d7:4e:
93:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:81:49:73:B8:54:49:41:77:DD:75:F3:D4:6E:86:BC:D6:06:EB:13
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/I4FJc7hUSUF33XXz1G6GvNYG6xM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
79:42:c7:13:db:bc:4d:d1:80:41:08:5f:d8:35:5a:cb:9f:81:
ec:b1:87:ad:86:8a:84:6c:d7:73:76:eb:fe:8e:ca:73:02:a3:
1f:bd:66:24:0a:d9:bd:93:d4:2e:54:99:b2:4c:39:21:6a:2f:
b6:cf:da:ad:af:ff:9d:9e:0d:b1:53:40:91:d9:4a:f1:ad:94:
8f:17:85:bc:6c:b3:eb:07:08:57:41:33:bb:82:04:6e:e4:b4:
45:b6:43:aa:0b:99:4e:5f:b2:8b:cb:b1:ad:b5:37:41:d5:63:
c3:1c:66:14:ca:dc:82:48:52:4b:28:8a:e2:80:03:ac:2f:70:
0a:33:b7:e4:de:8e:6f:61:bb:9d:98:2f:1e:7d:dc:c5:38:0e:
3b:51:b8:70:55:f0:bb:8a:46:e9:18:08:e9:fa:a0:d7:37:92:
2c:ec:41:10:02:05:cc:77:12:25:82:3c:58:1e:c3:d7:18:26:
71:ed:e2:1f:47:9f:d4:11:08:db:b6:b1:58:ea:3d:c1:86:c7:
bf:fc:03:b1:4b:6c:8e:62:ce:1f:02:28:27:ff:a0:fb:93:d5:
4f:32:29:87:a4:bc:92:8e:15:ad:39:42:dc:7d:74:cc:bb:7a:
57:9b:6a:67:d8:57:0d:5a:22:38:f1:01:af:06:75:b1:a7:8e:
bc:c1:77:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 16:48:17 2025 by rpki-client