Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/R0Y8mEFVpKWuaLfvDo14Z4oNFzI.roa
File: R0Y8mEFVpKWuaLfvDo14Z4oNFzI.roa (raw, json)
Hash identifier: 1HzkFMQ8pqtGAEj8ySg03qowkCblcyGQu3AlgMPI7oU=
Subject key identifier: 47:46:3C:98:41:55:A4:A5:AE:68:B7:EF:0E:8D:78:67:8A:0D:17:32
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018954F729C2678AB52086F8CC484B0F2556
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/R0Y8mEFVpKWuaLfvDo14Z4oNFzI.roa
Signing time: Fri 14 Jul 2023 15:13:51 +0000
ROA not before: Fri 14 Jul 2023 15:13:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:54:f7:29:c2:67:8a:b5:20:86:f8:cc:48:4b:0f:25:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 14 15:13:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=47463c984155a4a5ae68b7ef0e8d78678a0d1732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:63:1f:ff:89:7a:6e:56:02:f5:6c:3a:6b:9f:
ae:55:f8:d1:98:c6:ba:bf:c9:c6:b7:ca:fb:b9:a2:
1e:6b:d6:b3:df:ac:c8:70:66:a1:0f:67:0b:1b:af:
37:30:a5:4a:74:f9:47:77:a7:f8:78:1f:42:a5:11:
ad:eb:6a:81:07:aa:93:21:3c:e6:55:74:41:2a:e2:
b1:d8:cc:d2:ca:49:ae:3b:96:b2:88:bf:5c:e5:fe:
62:de:b0:e4:9f:5d:17:8c:1d:6c:44:b0:d7:c7:3d:
e7:9f:e7:d6:64:4b:53:5f:92:75:f8:2a:22:9b:78:
ac:51:af:09:4f:7e:5b:44:5f:05:b1:e3:d2:19:aa:
c2:23:7d:5c:55:d4:24:0b:eb:d7:71:7f:e5:ce:ac:
f0:73:70:d0:04:da:54:3b:17:ca:ab:2f:e0:aa:6b:
34:17:58:54:95:06:48:13:a1:42:14:38:b3:81:14:
3b:95:67:ec:56:55:fb:7d:29:65:e3:fd:61:45:3c:
88:2c:b5:11:57:b7:d1:01:a7:6e:79:e6:54:de:d7:
41:25:cb:fa:f9:73:3b:50:89:34:dd:36:4c:be:7f:
9f:ac:30:54:f4:24:65:08:1e:09:31:53:b5:fc:72:
f6:91:ed:4b:fa:d5:c0:39:c8:dd:c8:e3:3d:c2:7c:
95:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:46:3C:98:41:55:A4:A5:AE:68:B7:EF:0E:8D:78:67:8A:0D:17:32
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/R0Y8mEFVpKWuaLfvDo14Z4oNFzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0a:ca:b3:8a:54:96:33:0d:2d:bd:2b:a7:0b:8b:7f:94:d1:26:
56:26:e4:05:08:96:74:99:19:06:fe:7e:a0:a2:35:83:75:d9:
80:84:a1:f1:dd:f3:bc:2a:f0:d3:d4:8a:88:f8:a6:de:9f:3c:
af:57:8f:a7:80:ae:92:84:78:87:c6:4a:fa:01:d0:d8:9c:f4:
a2:7f:ed:d1:f0:64:46:f5:6b:2c:46:8a:9b:3c:8f:4a:3a:c3:
6b:7c:a7:3c:23:85:b3:75:d5:7b:59:53:ad:17:8d:4b:88:2a:
20:66:84:52:4d:65:d3:55:6c:7e:d0:4f:06:8d:f7:51:ac:a9:
58:7b:c3:9a:04:82:e0:23:00:47:87:b1:9e:6b:70:a9:a9:59:
42:2a:c3:24:8c:ee:4d:83:75:6f:50:6a:4e:aa:1c:dc:d7:1d:
9f:da:9f:2a:1c:28:74:8a:b8:8d:c4:b7:dc:69:12:5b:28:5f:
b9:30:79:d1:be:f0:76:1d:65:6f:79:04:ed:94:f0:24:5a:a8:
de:33:73:1a:5a:3e:6c:da:16:f8:b7:39:f4:8e:87:e4:90:f7:
55:eb:e6:6d:0b:69:b8:b0:78:79:01:18:4e:04:30:87:c4:0d:
f4:7b:1e:95:76:79:91:60:e3:08:d5:c3:d6:fc:8f:fd:10:4a:
7b:e0:7c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:33:19 2025 by rpki-client