Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XOmWI0w4FbqmCUMbzfbsEqpkU4A.roa
File: XOmWI0w4FbqmCUMbzfbsEqpkU4A.roa (raw, json)
Hash identifier: YiFQCF88ZzooVo4vrCdF1X6wZJLvSiuasxkFfK4ptiA=
Subject key identifier: 5C:E9:96:23:4C:38:15:BA:A6:09:43:1B:CD:F6:EC:12:AA:64:53:80
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01887A158AB574C61B8F08EB461BEDCB0735
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XOmWI0w4FbqmCUMbzfbsEqpkU4A.roa
Signing time: Fri 02 Jun 2023 03:10:12 +0000
ROA not before: Fri 02 Jun 2023 03:10:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:7a:15:8a:b5:74:c6:1b:8f:08:eb:46:1b:ed:cb:07:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 2 03:10:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ce996234c3815baa609431bcdf6ec12aa645380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ac:6e:1a:d5:0f:66:15:9a:dc:50:83:3b:86:
22:15:22:a2:df:b1:ed:4d:44:ce:ca:7c:6c:25:16:
99:02:cc:d1:c2:17:9c:fa:d6:5e:89:b6:51:ce:99:
31:dd:10:49:de:09:db:f0:0f:8f:0d:97:00:ad:ec:
d6:22:17:4e:45:b3:63:df:af:fe:c1:20:ee:30:f9:
73:05:3e:93:86:b5:bb:9d:d1:5c:08:52:ff:4d:3f:
cd:c4:92:7c:cd:b1:cd:ba:6a:96:23:2d:18:f6:b3:
22:b6:1c:00:56:4e:c2:20:12:c5:59:4a:b4:29:89:
d2:83:a1:f6:e6:87:3c:06:9f:24:bd:2c:ea:1d:06:
19:13:66:48:c1:2d:a0:65:cc:7d:e2:1e:38:fa:d0:
5c:fe:f1:94:dc:59:1c:2d:e3:9b:14:e0:bf:ff:5e:
ee:26:8a:60:86:35:ad:69:8b:c2:c5:00:80:be:d7:
cc:50:06:b5:74:3f:a8:b4:54:5d:c7:c2:d5:99:4c:
50:e7:57:b1:c4:3a:2d:43:68:64:36:46:54:77:24:
21:e2:31:a0:c6:ba:5f:fe:4d:1f:33:c8:b2:79:23:
4a:f5:2f:9c:d6:63:aa:33:b9:e8:53:15:65:74:bf:
64:e5:4a:bf:36:cc:bf:59:ff:7c:21:96:0f:29:db:
28:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:E9:96:23:4C:38:15:BA:A6:09:43:1B:CD:F6:EC:12:AA:64:53:80
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XOmWI0w4FbqmCUMbzfbsEqpkU4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
76:67:c3:55:f3:89:5e:aa:63:a8:e0:8e:ec:32:5b:93:5b:8e:
36:0e:56:7d:61:98:8f:3a:c5:f1:5e:33:ba:8d:20:2a:65:39:
7e:75:24:a4:26:37:af:23:bb:cf:d6:e0:9f:af:95:e6:6a:3d:
a8:ac:e4:5b:57:2b:e1:2a:be:2c:c3:ce:8a:50:b4:5a:d5:08:
e8:e4:cc:79:a7:9c:5c:81:78:78:85:62:6d:3d:db:ea:1a:27:
ca:56:53:eb:79:b1:09:59:09:96:ef:2d:98:15:51:96:bc:10:
81:4e:da:50:7b:d6:65:7f:d8:fb:f7:63:af:60:8c:45:ff:b0:
3b:03:54:51:a1:ab:82:e0:12:b0:73:9b:8d:9f:91:19:9a:e4:
3d:25:0a:3f:3f:58:8f:b4:b2:93:18:3c:56:80:8a:de:03:7f:
b0:0c:e7:12:e6:fb:63:0f:d1:68:88:67:aa:c1:c6:5a:b4:a9:
4f:06:eb:73:60:a1:80:04:61:4d:b9:2a:a8:b1:d6:f1:37:c3:
38:52:f3:a8:eb:a2:a2:b0:7a:e7:25:5d:2c:50:36:dc:d7:b0:
77:7f:e2:80:8a:24:6c:91:f7:2a:6c:b3:5b:0d:98:2c:d8:9c:
b5:2f:2c:14:6f:fe:32:c3:3c:95:0e:73:64:d5:7f:a8:5c:3f:
6f:d0:6a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 14:21:18 2025 by rpki-client