Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/V6XcuQc2vqPhGUYZ1WO8SyNwvmg.roa
File: V6XcuQc2vqPhGUYZ1WO8SyNwvmg.roa (raw, json)
Hash identifier: +/W4lDUh4yIp4Fx4oolqDIvuMMUmasG5W5xUvNfuqGA=
Subject key identifier: 57:A5:DC:B9:07:36:BE:A3:E1:19:46:19:D5:63:BC:4B:23:70:BE:68
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186E3095E97167C825FF232B6AD41AFB7CD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/V6XcuQc2vqPhGUYZ1WO8SyNwvmg.roa
Signing time: Wed 15 Mar 2023 02:11:27 +0000
ROA not before: Wed 15 Mar 2023 02:11:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e3:09:5e:97:16:7c:82:5f:f2:32:b6:ad:41:af:b7:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 15 02:11:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=57a5dcb90736bea3e1194619d563bc4b2370be68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6d:5c:f6:2d:99:55:33:58:9c:ad:e8:a7:22:
aa:b4:50:96:8d:93:5c:c0:38:52:b9:db:9e:07:43:
36:5d:f5:d5:5a:0f:22:70:21:16:e2:eb:c6:18:8c:
2c:8d:55:a6:31:f9:c9:e8:13:e4:9a:a1:df:01:b7:
9c:e1:5a:b5:08:9b:1e:ff:be:0e:12:c8:06:68:a6:
55:a2:e3:ed:cc:7a:3b:4c:c8:ef:68:d6:79:31:8c:
f4:2f:45:99:b0:54:f2:f0:c8:cc:36:a1:96:d3:ab:
2f:1c:58:b6:e4:68:08:d9:95:5e:2f:f0:93:2d:6e:
b2:68:cf:7c:67:30:9f:7a:41:b0:9a:72:69:dc:e1:
a7:9e:d9:63:d1:45:bd:25:7b:99:4c:28:b6:08:8c:
cb:a6:7b:1e:f4:47:7e:bd:b4:22:51:f9:5b:c6:07:
ce:e1:9f:e6:73:b9:a0:21:5a:32:9f:08:f4:a4:c0:
10:46:32:0b:81:d3:e6:d5:b2:3a:a9:ef:fc:fc:44:
06:4b:a5:d6:d4:57:35:e9:ef:5c:97:9e:46:e7:c2:
78:72:27:8e:0f:0e:f0:b7:50:1e:92:da:72:37:d1:
2e:1c:51:94:ce:11:9c:ec:ac:bc:fb:2f:3f:9a:ac:
39:41:88:72:d3:3c:c7:7d:88:ad:8e:5f:bf:cd:61:
0f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A5:DC:B9:07:36:BE:A3:E1:19:46:19:D5:63:BC:4B:23:70:BE:68
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/V6XcuQc2vqPhGUYZ1WO8SyNwvmg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
70:e5:13:c3:0d:c6:1f:46:1b:12:5f:79:aa:6b:92:81:c6:46:
91:73:8e:be:c2:e3:c2:e3:e4:0b:48:54:fb:9b:c6:b0:09:82:
85:60:11:99:52:9c:6a:26:fa:87:2f:44:ce:a4:25:78:ab:fa:
88:e5:ba:ee:d5:db:77:c5:07:31:09:79:a6:0a:78:56:b2:e0:
b4:16:1b:92:84:b4:f3:44:65:2f:04:3a:58:ac:33:de:3f:b7:
cb:be:39:31:e6:fd:8e:e7:14:3f:6d:9c:b0:0b:6b:17:6c:5f:
5e:13:8c:2b:34:7c:7c:ac:87:4f:cf:8f:41:58:a9:d2:c7:00:
2b:f4:0c:93:79:04:88:11:0e:59:08:f9:96:65:64:1d:e0:46:
0a:8f:eb:ff:6b:dc:cb:bd:d3:ea:46:e4:29:f1:b3:8a:38:1b:
19:54:24:b7:23:4f:a3:8b:f0:35:9e:a4:5e:ef:23:1f:eb:f6:
50:40:af:50:0b:72:0d:f8:18:e9:fb:70:d8:24:9b:ec:7f:1c:
98:04:d3:90:a1:a3:20:2f:01:b9:6e:0c:9c:c9:21:e6:2e:4e:
e9:01:f2:ce:11:8c:c1:18:6e:4c:17:0f:55:f0:5a:1d:f2:94:
d3:3a:86:30:8d:66:6a:3e:30:5f:a0:28:7a:0d:61:09:34:e7:
96:0c:cc:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 13:40:56 2025 by rpki-client