Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IFL69flwb423DlFOfHe05llFCdA.roa
File: IFL69flwb423DlFOfHe05llFCdA.roa (raw, json)
Hash identifier: Hf02Fdk1Lyv/dJtGegpc2MFEmGhPWtLMVaxsRLY4QO0=
Subject key identifier: 20:52:FA:F5:F9:70:6F:8D:B7:0E:51:4E:7C:77:B4:E6:59:45:09:D0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018869C6EE40022C489F00B9F5B9F5A0C747
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IFL69flwb423DlFOfHe05llFCdA.roa
Signing time: Mon 29 May 2023 23:10:24 +0000
ROA not before: Mon 29 May 2023 23:10:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:69:c6:ee:40:02:2c:48:9f:00:b9:f5:b9:f5:a0:c7:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 29 23:10:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2052faf5f9706f8db70e514e7c77b4e6594509d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:84:f0:bc:13:89:42:e5:70:ac:82:37:7e:98:
b4:a5:18:9e:0a:a3:01:6b:0c:44:13:d1:b9:05:cd:
c9:bf:2f:0b:17:b7:b7:2a:b7:9d:a6:0d:a5:b9:f8:
42:71:b0:65:04:e9:b3:74:39:2b:fa:97:17:4f:9b:
0e:36:b9:ac:75:09:ec:72:bd:c7:52:b3:46:50:04:
a9:22:a4:34:01:6b:50:c3:51:90:54:4d:dd:b7:45:
39:fa:34:19:b0:fb:6b:d1:07:58:8e:85:e0:6d:59:
20:ee:93:52:1b:36:bb:09:c4:2a:91:ae:85:8f:fb:
39:07:7e:6d:9e:1c:6a:44:95:3d:30:ef:ec:d9:bc:
be:5f:b5:55:70:ba:8b:e4:56:2b:de:a5:33:33:a0:
b8:79:2d:28:54:cf:87:a6:00:fb:b6:b0:c0:60:ad:
63:38:96:39:d5:d7:62:bd:0f:6e:05:51:96:71:6f:
11:65:a2:a7:59:56:fd:dc:22:58:f1:ed:11:f1:bb:
86:f1:f8:00:6f:ae:3b:d5:5d:90:f2:92:ae:eb:d6:
38:44:b4:e6:07:df:df:bf:68:c5:18:1c:f3:eb:0f:
e8:16:ed:9e:d0:d8:ef:28:b1:9b:08:0e:c1:2b:7e:
69:c2:f4:56:4b:a4:60:3a:29:5b:82:9e:83:60:ab:
87:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:52:FA:F5:F9:70:6F:8D:B7:0E:51:4E:7C:77:B4:E6:59:45:09:D0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IFL69flwb423DlFOfHe05llFCdA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
11:d2:12:87:cb:3f:2f:5f:a4:28:d3:8f:49:43:0f:10:c1:bc:
25:6c:9a:c8:6c:db:3d:d8:6b:95:59:61:17:72:80:2d:33:69:
40:30:83:ec:bf:e8:ec:b9:4f:bf:01:b5:a7:a8:9d:23:20:8a:
7e:43:de:3c:d8:78:31:c2:9a:f3:40:b7:1a:3f:55:9f:d2:26:
82:23:05:f3:ae:34:fa:04:f6:6f:92:01:be:b5:db:ae:73:b9:
05:d7:5e:43:8d:8b:42:25:3a:d3:6c:04:0f:39:62:e5:79:5a:
f1:40:70:88:a3:37:d3:eb:9f:e4:cd:e4:29:c5:f1:25:95:00:
e8:96:03:07:be:5b:e0:53:7b:ab:0c:26:6c:e3:a6:86:72:bc:
3a:a1:60:93:b8:0a:87:36:54:6a:72:a7:ad:a9:ca:6c:21:09:
67:7c:de:7f:cc:0e:8b:0a:c9:1c:c0:8d:26:3a:8a:aa:53:0b:
d6:1d:17:78:d8:9f:00:39:b0:aa:01:f9:68:d5:0f:92:07:cb:
db:01:a6:f4:56:2f:08:42:d3:f2:77:b4:33:66:96:9e:cd:3e:
a0:df:39:2b:f0:f5:1e:30:06:9f:b9:47:84:ea:12:38:e8:4c:
7c:cf:26:07:19:bb:94:b1:83:e9:78:35:4f:7e:dd:cd:5f:18:
f9:b4:24:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 12:16:12 2025 by rpki-client