Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/U602eyRdSqSjtXSNXqyk2K02s8Y.roa
File: U602eyRdSqSjtXSNXqyk2K02s8Y.roa (raw, json)
Hash identifier: YanLTNKlB4kFsW/WRXJm2vDIK5cMC3hDfOtMw49dSM4=
Subject key identifier: 53:AD:36:7B:24:5D:4A:A4:A3:B5:74:8D:5E:AC:A4:D8:AD:36:B3:C6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01897413E32F9CB7DA622A10005F8698DBB9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/U602eyRdSqSjtXSNXqyk2K02s8Y.roa
Signing time: Thu 20 Jul 2023 16:13:27 +0000
ROA not before: Thu 20 Jul 2023 16:13:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:74:13:e3:2f:9c:b7:da:62:2a:10:00:5f:86:98:db:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 20 16:13:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=53ad367b245d4aa4a3b5748d5eaca4d8ad36b3c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:02:09:ba:e3:35:f8:c2:3e:6a:d8:67:b6:e2:
e7:a1:bb:de:90:02:b9:98:53:75:d0:9a:c8:30:c2:
9d:92:0c:16:f3:02:cb:90:e2:00:75:77:71:4d:75:
e4:b8:56:54:7a:1a:58:da:01:03:51:4b:84:32:20:
16:56:ff:f2:d5:a9:76:a2:ae:3b:0f:ad:0c:1e:7f:
cd:43:8d:55:8d:08:a8:92:2f:8b:77:93:2a:0c:62:
1c:fb:b0:53:5a:43:21:5a:ad:a2:7a:c1:73:04:8c:
3f:c7:2d:0b:44:19:7d:1d:79:51:f0:01:20:ed:0d:
98:07:b3:b7:ce:7a:e9:bf:9e:54:47:fa:1e:4e:60:
77:2f:52:e5:6c:ed:db:5a:e5:1b:b1:fa:c7:32:ad:
b0:c8:80:01:dd:89:6b:20:75:90:f1:a7:d1:a5:ac:
70:38:70:91:2b:7f:40:90:06:d1:ff:c4:f1:18:41:
d1:e9:9b:ed:a4:54:2e:b0:64:99:de:6d:2f:8d:92:
43:46:cc:bc:6c:3a:2c:16:99:fa:d6:87:90:a0:3c:
3f:48:bb:ca:0c:b3:4b:1d:b6:02:20:ac:4d:16:c5:
91:3d:00:e1:cc:d4:cc:01:a4:fc:d6:56:2a:68:f7:
68:56:57:05:14:a4:7a:8d:b6:e6:1e:29:d5:e6:8e:
bb:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:AD:36:7B:24:5D:4A:A4:A3:B5:74:8D:5E:AC:A4:D8:AD:36:B3:C6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/U602eyRdSqSjtXSNXqyk2K02s8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
31:ed:01:61:62:f2:ca:54:46:60:18:2c:5d:ad:39:51:c1:66:
34:62:da:1c:22:ba:25:2d:49:25:a1:a9:f5:3e:0c:ab:0a:12:
20:01:69:d5:05:3f:15:00:cf:ac:91:cb:e7:7d:9c:3a:77:bf:
9b:04:d7:c5:b5:12:7c:c6:a3:dd:b0:b1:e1:e2:91:3d:8f:fc:
b6:fc:ba:39:1d:62:de:a0:30:01:7c:7f:b3:84:64:e6:88:dd:
23:75:68:e9:25:e3:54:bc:fc:ab:1f:2f:f5:76:8f:06:de:10:
b6:66:59:92:72:b3:11:22:51:64:6e:05:8a:ab:7e:1d:06:84:
41:fd:ef:ef:c3:5f:3c:bb:47:c2:71:0b:72:a1:b1:6b:e1:37:
7c:3f:bc:07:55:26:ea:3d:9a:a0:ab:a6:5e:fd:e7:65:9c:40:
77:03:d1:7c:89:53:2b:1b:cb:f8:1e:67:20:b9:2d:f7:30:a8:
7a:c8:95:59:0e:21:a1:c9:ea:98:89:b5:ca:62:1d:a5:0c:8e:
b4:f1:82:d0:1e:04:b2:aa:09:2e:aa:7b:1a:eb:ff:d0:1f:fd:
7f:de:2d:0e:3f:66:41:98:27:55:46:ae:83:ae:f4:ac:6f:0f:
41:80:1a:36:c0:2a:97:c3:79:fb:a3:f8:1a:9d:7b:cc:ba:1d:
f4:e1:70:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 09:43:09 2025 by rpki-client