Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ISwIyBxrm4ZS9VHvrZlSWtOEQ0c.roa
File: ISwIyBxrm4ZS9VHvrZlSWtOEQ0c.roa (raw, json)
Hash identifier: f2Yq2q3IonNENxZuX5veHelMRdQ2hOvqBQH1UoWSdDM=
Subject key identifier: 21:2C:08:C8:1C:6B:9B:86:52:F5:51:EF:AD:99:52:5A:D3:84:43:47
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188D92337E56402C80C036902FBB531C9E0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ISwIyBxrm4ZS9VHvrZlSWtOEQ0c.roa
Signing time: Tue 20 Jun 2023 14:09:03 +0000
ROA not before: Tue 20 Jun 2023 14:09:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d9:23:37:e5:64:02:c8:0c:03:69:02:fb:b5:31:c9:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 20 14:09:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=212c08c81c6b9b8652f551efad99525ad3844347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:48:dd:1c:7b:86:86:14:48:49:41:e2:84:f5:
b5:48:6a:17:06:e1:1b:56:06:dd:c3:e3:40:8d:b3:
38:01:99:d7:fa:05:b5:70:81:36:4e:e9:cb:ba:78:
f1:93:df:b0:92:dc:1a:4a:9e:16:fb:3c:11:9a:ab:
07:88:19:d4:42:22:17:4d:82:37:14:e5:a3:8e:db:
4a:3d:ec:ba:53:2b:6c:68:ae:c6:ff:ce:63:e5:b0:
cc:cd:4e:fd:ff:92:13:c8:20:86:fa:f4:61:0d:1c:
d0:e0:15:cd:ab:93:aa:fe:24:16:93:ae:53:5c:f9:
61:6a:5c:f9:7a:af:ab:e5:78:0f:ea:b1:23:7e:37:
0b:eb:8a:ec:c9:c3:09:29:2e:39:b2:65:d7:99:2d:
ce:35:90:58:91:ac:53:19:d7:56:23:a7:6a:7b:e5:
b4:3e:99:74:8c:8b:88:8e:bd:b1:1c:29:fb:14:bc:
81:01:b4:c9:bf:3d:dd:2b:99:7a:1b:36:90:33:82:
8e:dc:19:d8:54:b7:98:e6:e6:ca:f6:af:b3:de:64:
08:c8:d0:b9:a5:c5:40:db:f5:41:27:37:27:af:bc:
9b:6a:3e:96:cc:2e:e0:9a:88:48:64:bd:3a:4b:03:
9d:68:09:68:c5:44:43:4b:12:1e:7e:72:f7:e0:49:
3d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:2C:08:C8:1C:6B:9B:86:52:F5:51:EF:AD:99:52:5A:D3:84:43:47
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ISwIyBxrm4ZS9VHvrZlSWtOEQ0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a0:2b:e4:ac:74:a5:a7:34:78:dd:25:54:a0:f2:7c:b0:80:0a:
82:00:e8:75:26:29:25:ee:7e:31:4c:f0:a1:a9:ec:21:ad:7b:
1e:45:b8:46:09:4c:2d:9e:f6:87:f6:2a:97:66:8b:8c:a6:78:
4a:0b:01:3d:98:a2:ca:bd:7e:83:2e:82:c1:35:88:bd:1f:f5:
22:fa:e8:1c:04:89:3f:ad:21:ed:47:50:a7:e7:e4:d4:79:75:
1b:97:97:91:e7:1e:b5:69:d9:70:26:77:cc:4f:19:bb:eb:1b:
1d:c2:52:9f:a5:de:90:99:a7:15:1a:50:71:8b:53:d1:b6:10:
b4:9c:da:26:1e:64:c5:69:fe:a4:84:f8:98:b9:31:68:fc:1a:
a1:f3:fe:82:b9:a7:4b:35:19:bc:64:07:d3:af:33:9f:e2:ff:
44:dc:c9:20:25:6a:16:ff:96:f3:f6:d2:21:fc:f2:97:68:4d:
e2:70:82:a1:a5:8f:cb:1e:75:a3:a8:6c:9e:65:22:91:a4:0c:
13:e9:e2:de:90:e5:c3:16:45:60:c6:47:53:c8:b3:66:8f:20:
eb:71:91:32:be:41:0f:31:93:79:bd:66:31:a5:ef:b6:50:09:
37:86:d2:c3:d3:fb:6c:9e:63:d8:b1:4e:3c:b9:08:bb:b9:eb:
3b:01:70:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:48:41 2025 by rpki-client