Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ItAA6Ru0MiXPPVgxe5qStRhYGmA.roa
File: ItAA6Ru0MiXPPVgxe5qStRhYGmA.roa (raw, json)
Hash identifier: erwqCqQUxuvXoJN/kV3dEsGscgBOeG6BCX8kd7Y6Dh8=
Subject key identifier: 22:D0:00:E9:1B:B4:32:25:CF:3D:58:31:7B:9A:92:B5:18:58:1A:60
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01883E00E00C36733D88D41906F1B85EEE7C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ItAA6Ru0MiXPPVgxe5qStRhYGmA.roa
Signing time: Sun 21 May 2023 11:10:24 +0000
ROA not before: Sun 21 May 2023 11:10:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:3e:00:e0:0c:36:73:3d:88:d4:19:06:f1:b8:5e:ee:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 21 11:10:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=22d000e91bb43225cf3d58317b9a92b518581a60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:86:de:23:0d:0e:11:0b:49:37:97:3d:55:02:
f5:a8:43:a9:0c:a8:64:3e:7e:61:90:9a:76:41:70:
85:43:b1:f8:53:bb:9e:d1:d5:8b:63:bf:c1:df:12:
c7:fc:86:38:c9:6e:0c:d9:0b:26:1d:25:f8:65:db:
3e:80:01:6c:4c:e5:dc:c5:3f:01:44:b1:58:8d:45:
ce:0d:a5:22:55:18:c5:c7:60:0e:5e:4f:2e:73:66:
c3:a9:d6:34:9d:52:41:a4:bd:bd:48:32:88:6c:8c:
ce:38:20:0f:39:9e:fa:32:9d:66:1c:d4:f7:ff:ab:
53:41:00:c7:96:00:83:51:00:a4:fe:a1:3e:7b:45:
d3:52:94:88:24:ee:ce:56:ff:d0:19:7d:af:42:1e:
d3:65:bb:02:95:fb:7b:2b:91:f7:85:0d:d0:2f:f7:
8e:29:78:71:ec:ba:73:9d:b7:9c:6e:d9:03:de:1d:
19:ca:a3:9d:d0:2d:f3:59:c6:72:57:87:4f:39:aa:
87:5f:0c:30:a9:36:e9:56:61:ee:a1:8d:0c:a3:00:
f8:43:9e:c4:6b:7c:e6:c7:43:f3:b0:ae:7d:95:41:
4e:eb:35:c3:8d:04:6b:60:cd:d1:69:95:ef:6b:88:
cb:b0:f7:07:66:d4:06:b6:18:85:c8:10:cc:b4:e8:
0c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D0:00:E9:1B:B4:32:25:CF:3D:58:31:7B:9A:92:B5:18:58:1A:60
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ItAA6Ru0MiXPPVgxe5qStRhYGmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
30:bd:72:e3:eb:c8:83:4c:ba:b7:dd:e0:c9:1b:54:de:94:64:
2b:0e:f6:f7:ae:8e:e3:64:92:1c:22:9c:f9:4b:dd:e0:bf:95:
2c:50:6c:ac:72:dc:f6:6b:db:d4:74:cb:23:4b:58:c1:11:56:
f9:d5:04:b2:e7:78:c1:51:6b:e1:8c:0a:6c:49:2d:30:e2:6b:
95:cd:f7:45:7e:47:29:e4:bc:f4:72:43:44:ad:53:ac:12:b7:
b0:f7:e4:c7:0f:55:ec:c9:26:50:ab:49:a8:1d:7b:0a:83:72:
bf:40:6a:ed:8f:ad:05:c3:c3:1a:f9:7b:dd:e3:39:f6:c9:ba:
f1:8e:1b:f7:70:2f:f0:98:41:c9:07:f0:48:b9:c5:65:ed:05:
32:db:d0:d5:8c:db:f9:d5:f0:15:70:2a:5b:a0:44:0b:09:37:
07:3e:0a:73:29:89:dc:e3:a3:12:be:60:11:50:1c:08:ba:32:
79:a5:ce:1e:6b:c8:7f:59:de:8c:45:5d:15:7a:4c:fa:d9:81:
3b:ae:6a:e9:7b:57:d9:49:a7:77:d5:7b:a3:1b:80:16:00:c8:
7b:33:36:40:ca:b4:bd:16:61:a0:d1:a1:fa:03:93:d2:81:da:
d0:a3:a9:e2:24:20:b0:a7:8b:b0:3d:63:da:5f:d1:76:b9:43:
53:e0:ea:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 09:32:36 2025 by rpki-client