Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IOp5QMzn1wij14msxAnxAAYhX_M.roa
File: IOp5QMzn1wij14msxAnxAAYhX_M.roa (raw, json)
Hash identifier: pbtlZZK7qGah3UUiXClSmMa92pS+UaV62qyr3DmBRNw=
Subject key identifier: 20:EA:79:40:CC:E7:D7:08:A3:D7:89:AC:C4:09:F1:00:06:21:5F:F3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186C983F2D82D1077D2B48EAFECA13CA815
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IOp5QMzn1wij14msxAnxAAYhX_M.roa
Signing time: Fri 10 Mar 2023 03:15:13 +0000
ROA not before: Fri 10 Mar 2023 03:15:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c9:83:f2:d8:2d:10:77:d2:b4:8e:af:ec:a1:3c:a8:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 10 03:15:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=20ea7940cce7d708a3d789acc409f10006215ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:16:51:26:98:29:c4:b8:24:45:90:f8:ae:ce:
c9:5c:64:5a:e5:55:44:bb:1c:f4:fc:8e:88:dc:e4:
80:00:f5:59:35:7a:7e:03:bf:f7:32:1a:55:05:74:
d1:6a:d8:ae:0b:2e:d3:ad:28:d5:16:37:73:28:09:
3e:d6:a3:2b:08:37:f2:d7:91:f2:a9:71:ea:55:90:
e0:19:d2:82:c0:3b:5a:dc:32:36:4a:fe:2d:02:4b:
15:71:26:33:4e:d2:0f:26:d2:cd:ca:da:2a:d9:7f:
81:98:9a:26:1b:00:af:b7:ac:be:7d:2b:4f:c7:f5:
52:bb:9f:56:eb:ab:6a:9c:80:36:a3:62:fc:3f:72:
aa:ac:fb:26:e9:27:35:1d:12:28:73:ba:60:f9:f0:
c9:64:01:cc:14:5b:5f:09:fe:88:c5:0a:34:6d:3a:
4d:89:66:f2:5e:89:ab:d5:67:60:69:2a:71:47:47:
9a:c5:c8:1c:72:fd:35:99:1d:b4:80:61:05:66:b2:
8e:e5:61:69:4d:ab:ff:38:8a:70:73:ab:99:c0:57:
1d:8c:b9:5c:14:51:79:11:bb:38:82:82:e5:92:68:
e3:9b:2d:db:05:17:00:e8:a4:84:00:80:52:e9:97:
86:5a:bb:5f:8e:dc:9d:b3:d9:8e:15:a3:85:28:60:
92:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:EA:79:40:CC:E7:D7:08:A3:D7:89:AC:C4:09:F1:00:06:21:5F:F3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IOp5QMzn1wij14msxAnxAAYhX_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9c:e4:28:e5:de:08:4c:1c:3d:f5:b6:3c:bb:98:d5:dc:41:a2:
87:bd:fc:42:22:50:8e:88:46:f6:20:52:01:0e:03:bf:73:9d:
ea:e9:79:d8:20:90:88:9c:99:b3:d1:53:9b:1b:e1:bd:7a:4d:
c0:1c:46:4b:d1:dd:82:f8:70:a9:39:64:ca:28:67:46:29:25:
7c:18:bc:39:36:57:3f:c5:1b:dd:eb:f0:5b:c9:24:a8:7e:9e:
26:5a:36:34:6c:5e:98:73:93:75:e9:95:0c:8e:37:1c:88:9c:
43:7d:ae:fc:f1:c5:70:13:2b:89:a5:fb:f0:c3:5b:ee:e8:3c:
d2:d9:3f:7a:cd:94:cb:c9:db:67:0d:33:4b:7f:48:0c:14:17:
b0:35:f1:3d:93:4f:e2:58:d8:04:3a:5a:5f:85:48:70:3d:1e:
91:be:24:a6:cc:cc:9a:db:d2:a4:14:e7:d7:37:76:55:a4:a2:
01:e5:02:b1:78:35:3b:cc:ac:a5:c7:6d:5d:d8:44:62:e1:b6:
3f:e4:6a:43:6f:9c:c5:99:7c:99:4d:b4:b4:83:ae:87:8a:07:
a5:da:a5:35:c1:d9:c6:82:e1:9d:6b:93:e0:7c:62:d2:eb:d2:
9f:59:56:1f:64:6f:fc:17:0e:92:c1:56:79:46:72:4c:72:9b:
3b:54:8e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 09:40:04 2025 by rpki-client