Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UnNZWFsdWWJ7axxqqNRC7J-jgBw.roa
File: UnNZWFsdWWJ7axxqqNRC7J-jgBw.roa (raw, json)
Hash identifier: MGhztpJ3YFm4eI2B3fvC4f4WY5El2jmjxy4ZGU/I1Ag=
Subject key identifier: 52:73:59:58:5B:1D:59:62:7B:6B:1C:6A:A8:D4:42:EC:9F:A3:80:1C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187C231931D77553C399E1ACBB139126191
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UnNZWFsdWWJ7axxqqNRC7J-jgBw.roa
Signing time: Thu 27 Apr 2023 10:10:41 +0000
ROA not before: Thu 27 Apr 2023 10:10:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c2:31:93:1d:77:55:3c:39:9e:1a:cb:b1:39:12:61:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 27 10:10:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=527359585b1d59627b6b1c6aa8d442ec9fa3801c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:be:c5:6c:9a:ae:dd:91:20:f8:1a:c4:4f:be:
f4:89:80:35:9b:0a:c8:81:cc:bf:f1:c8:1c:95:9f:
25:24:8d:e8:bf:4f:ed:a3:32:38:b7:e2:b2:cd:40:
28:46:35:4c:f3:32:10:cf:2b:eb:74:e9:50:8b:9c:
cf:a7:60:19:56:eb:38:f0:07:08:e7:0d:e7:10:78:
ad:7d:88:a8:d3:f5:2b:4e:ff:25:76:09:75:1a:24:
b8:4f:1a:f8:ad:81:19:4a:dd:01:71:b5:c2:ec:4e:
68:0b:8f:5a:0d:a4:3d:35:02:29:d9:2d:1c:b8:8f:
cc:7a:6b:25:de:8e:24:7c:ce:b3:4a:a1:14:63:b4:
db:90:12:3b:64:5d:6a:50:e9:14:f5:14:47:28:1f:
d8:da:b8:1f:f3:a0:41:2f:5f:94:67:ef:85:34:bd:
db:35:ea:73:a6:80:c1:0f:75:7c:c4:95:b8:9e:8e:
ee:df:67:aa:4b:a4:68:3f:4a:92:d5:52:c7:b6:b9:
68:ac:10:cf:ae:55:7c:02:a0:f1:c5:15:8f:6c:2b:
14:7e:65:5a:82:9d:d5:ff:b5:4b:2e:87:d9:4b:3e:
4e:78:eb:ab:3f:9a:86:4b:ed:39:25:70:d2:61:8b:
e4:c2:bb:c4:15:5b:71:ce:d9:1c:eb:1f:80:3c:8c:
9e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:73:59:58:5B:1D:59:62:7B:6B:1C:6A:A8:D4:42:EC:9F:A3:80:1C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UnNZWFsdWWJ7axxqqNRC7J-jgBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
91:56:14:bd:b5:96:a5:69:65:73:b0:20:31:c8:3c:90:76:f6:
70:af:f4:69:5c:3e:59:cf:fe:01:2a:2e:e8:c4:35:a9:60:0b:
6f:7b:61:36:d1:f0:2d:dc:ff:ba:27:1e:cf:4c:df:71:4a:36:
c7:24:56:0d:5e:03:a4:e2:ae:34:16:7f:1c:a5:43:54:c0:3a:
ec:f8:50:c9:d9:11:44:b0:7f:6a:39:d8:18:1d:c0:45:37:28:
6d:72:12:20:52:93:0a:54:bd:63:40:80:2a:a8:5b:3d:05:2b:
b0:25:eb:4d:c5:bf:2a:69:42:13:f8:fe:96:33:38:0d:c7:c5:
99:7b:a2:cd:8a:c9:6c:8f:2c:be:be:91:63:a5:1a:25:66:41:
3f:e3:d5:fc:26:5a:b0:4c:05:68:a4:e8:81:50:13:20:3c:fb:
af:b3:bb:16:24:9c:72:18:e7:9b:fd:df:a7:0c:34:b6:fd:22:
55:9d:b3:85:73:d8:8e:a7:3e:85:e7:12:b5:64:5b:4f:ab:79:
94:18:bf:da:f8:bd:d9:57:33:cf:37:ab:b0:9f:f6:d4:cb:c3:
f6:b4:2d:b6:10:b3:e1:2d:bf:ac:03:8f:0a:52:0d:12:9c:ba:
a4:5e:ad:cc:34:02:42:56:02:49:13:47:d7:78:0e:dd:f4:f4:
a1:76:0c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:12:14 2025 by rpki-client