Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IBPpHeUY0Js_9Q0gz8yeQMArzQE.roa
File: IBPpHeUY0Js_9Q0gz8yeQMArzQE.roa (raw, json)
Hash identifier: Ayajv93qv7+WBKpjiCZdCx9bLzPU94slUDDLhZqTuHQ=
Subject key identifier: 20:13:E9:1D:E5:18:D0:9B:3F:F5:0D:20:CF:CC:9E:40:C0:2B:CD:01
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018748F73ADF3B2699972D278DFF18102F49
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IBPpHeUY0Js_9Q0gz8yeQMArzQE.roa
Signing time: Mon 03 Apr 2023 21:12:54 +0000
ROA not before: Mon 03 Apr 2023 21:12:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:48:f7:3a:df:3b:26:99:97:2d:27:8d:ff:18:10:2f:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 3 21:12:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2013e91de518d09b3ff50d20cfcc9e40c02bcd01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:dc:69:cf:ed:ac:af:e1:94:50:36:c9:09:27:
c0:f7:28:8c:c4:57:33:d6:9f:6e:d8:b1:0a:39:30:
20:e1:8e:24:c0:e2:bc:f3:da:c3:1f:40:c3:58:59:
6c:75:a1:eb:a9:82:cd:42:21:03:72:e6:cb:64:f6:
e6:74:af:4d:a2:ef:09:dd:28:22:32:f1:1a:a6:08:
4f:d0:5a:5f:e3:c4:75:83:6b:d7:c5:5b:8b:73:30:
a0:d2:5e:68:d0:c3:1f:11:a2:7f:1b:76:c8:13:22:
28:69:5e:de:13:95:e4:ab:6f:13:e0:5b:94:cf:f7:
33:0c:80:cd:73:fa:f9:98:91:73:5f:75:da:3f:cb:
62:cb:34:02:a5:69:31:44:c9:0b:82:a2:2b:60:cb:
0e:97:e9:1f:d5:ca:fe:c5:11:ab:d9:7d:32:da:d7:
0e:57:b8:13:96:4b:cb:82:8f:c1:61:21:dd:5c:ca:
d5:b7:ff:e3:47:d0:e2:f3:07:7d:d9:9a:5e:80:cd:
ef:0c:d2:47:f0:25:7e:ad:f9:69:ba:a1:a4:07:1c:
4f:a9:86:23:ab:20:98:9d:64:b5:1d:cc:88:e9:c6:
4b:5f:e3:5b:c2:61:4b:0f:46:a3:67:66:3e:38:cb:
32:c6:27:2d:3a:96:d8:85:c7:38:0f:8c:c6:ca:ec:
00:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:13:E9:1D:E5:18:D0:9B:3F:F5:0D:20:CF:CC:9E:40:C0:2B:CD:01
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IBPpHeUY0Js_9Q0gz8yeQMArzQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9e:eb:af:0c:02:83:8b:e0:3a:02:d1:7b:70:4a:85:c2:70:33:
79:bb:78:85:46:e3:19:7b:6e:b9:3e:2f:79:bc:4b:1c:bc:5b:
12:88:19:8c:0e:49:ea:0b:3a:5e:36:5a:92:c5:a0:75:2a:17:
05:38:52:d3:87:c6:38:4e:56:d8:08:b9:af:36:c4:1d:37:06:
f9:0d:4f:a6:32:a9:ad:60:8e:0e:49:06:ae:d3:98:90:2e:69:
74:4f:d6:10:51:6d:c8:e6:4c:80:94:23:f0:96:c0:6c:4f:d9:
ab:83:3c:04:e4:d5:e3:1b:a1:e9:d5:31:67:8a:33:36:2f:26:
88:87:58:e1:6f:a9:a7:29:dd:5b:c3:da:11:fd:a1:72:84:3e:
f2:3f:a9:28:71:75:d1:66:52:91:e1:a7:3c:e0:d0:0b:09:85:
80:5a:28:7b:91:04:01:d3:cf:35:c1:32:32:6f:5f:01:5d:83:
d1:79:69:62:11:32:f8:d8:a6:92:97:88:1f:08:31:d9:9e:24:
94:84:17:c0:a0:9d:1f:27:47:b5:c6:f8:d9:68:13:4f:1e:61:
91:b8:98:5f:62:2c:e4:47:2c:d1:03:65:50:76:ce:03:d4:9e:
b4:f0:44:3a:96:cc:ae:99:6c:20:77:a9:b1:84:44:1d:da:f6:
ab:2e:51:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 13:21:12 2025 by rpki-client