Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IXcdAZVU8j-hfdQPSTHYZoZWq6I.roa
File: IXcdAZVU8j-hfdQPSTHYZoZWq6I.roa (raw, json)
Hash identifier: f+d6hJqyDk971nQJJzKd23d+C+88NTs9doyk4+F+0lw=
Subject key identifier: 21:77:1D:01:95:54:F2:3F:A1:7D:D4:0F:49:31:D8:66:86:56:AB:A2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188C3737A98D0588E4520A443BE7B2E47B9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IXcdAZVU8j-hfdQPSTHYZoZWq6I.roa
Signing time: Fri 16 Jun 2023 09:05:05 +0000
ROA not before: Fri 16 Jun 2023 09:05:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:188:c372:a749/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c3:73:7a:98:d0:58:8e:45:20:a4:43:be:7b:2e:47:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 16 09:05:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=21771d019554f23fa17dd40f4931d8668656aba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e3:27:24:25:62:c4:db:a1:0e:86:de:59:c5:
e4:00:ab:07:33:6b:2e:a0:a3:58:25:98:0a:66:d9:
59:66:8c:13:33:44:0c:3e:7d:2e:7a:e8:13:22:d9:
b7:c1:46:8c:64:02:62:15:65:93:0e:d5:08:c6:69:
da:ab:a3:fe:85:71:79:d9:a8:ff:82:2b:ef:a1:f9:
54:f6:59:ce:4e:9d:da:56:ab:fa:75:32:ff:fe:b7:
a3:d2:bc:fa:77:1f:7a:96:1f:e7:20:7d:c8:49:a1:
02:f0:ae:83:40:ec:19:41:30:9a:83:8f:20:4b:43:
12:6f:f7:83:37:49:bb:a7:55:0e:72:c5:e6:d1:87:
fc:06:67:ad:d0:d5:18:55:5b:f7:45:20:bb:90:69:
15:72:af:81:7b:3f:fe:78:ba:3b:4b:d2:60:ee:64:
04:77:67:73:23:8e:f8:bf:00:41:e5:ab:23:91:14:
bd:ca:a6:ce:b6:9c:3e:a2:e4:2d:89:4d:dc:38:73:
24:7d:66:b1:fa:e6:33:72:d4:7b:6d:75:c7:78:53:
dd:70:2b:f1:4c:e0:9b:42:26:4d:61:cb:38:b5:0e:
bc:fb:d4:f5:77:ff:7e:99:0b:2b:c4:39:bf:e9:2c:
f9:14:30:f3:e1:d7:b9:c5:d1:ff:51:44:28:1c:ce:
8b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:77:1D:01:95:54:F2:3F:A1:7D:D4:0F:49:31:D8:66:86:56:AB:A2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IXcdAZVU8j-hfdQPSTHYZoZWq6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a0:20:67:d2:97:4b:9f:04:1b:bb:10:75:19:f8:c8:26:32:e2:
26:ec:8e:7d:80:39:01:20:46:1a:bc:fa:fb:f4:a7:78:b8:09:
8a:d7:b1:eb:a6:76:63:55:6a:52:8c:64:a8:1b:d9:20:20:4a:
51:08:c7:c8:a9:6d:05:3f:53:2d:13:38:3b:99:7e:eb:ef:df:
c4:c3:d6:16:93:dd:f8:85:68:29:eb:11:ce:60:c0:cc:29:99:
ba:95:f8:f2:15:32:49:0f:aa:4f:0b:ea:f2:48:1a:49:84:d2:
73:54:1d:18:da:02:e2:e0:4c:05:bf:cc:d3:64:ca:3c:85:35:
84:76:39:89:02:1a:fd:eb:0d:ba:57:84:59:10:f2:6a:f9:60:
c9:60:7b:41:e1:d0:a2:a7:27:8e:89:b0:0a:9e:e9:14:f0:17:
e0:9d:55:5e:ae:ca:10:03:90:94:3d:01:48:8f:9f:9f:95:31:
6c:83:c3:e4:56:8e:c3:1b:ff:70:3e:a9:d8:a7:a4:78:a9:a6:
59:22:a1:81:3f:32:90:eb:6f:bc:af:35:03:ea:f3:df:02:38:
a8:ea:9f:0b:53:ca:8b:1f:44:ab:b7:eb:4b:29:8f:ea:87:3a:
2a:c8:11:1b:9a:d4:a2:2f:db:14:8a:23:90:57:8d:f1:54:92:
ad:ea:37:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:55:06 2025 by rpki-client