Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_-9sHLdhS0omS8vbcWx_TDmSigg.roa
File: _-9sHLdhS0omS8vbcWx_TDmSigg.roa (raw, json)
Hash identifier: LW6e3fP/4vr+10wzVnSdeZaRR0UQ6B1rSYZ+Cqf8th0=
Subject key identifier: FF:EF:6C:1C:B7:61:4B:4A:26:4B:CB:DB:71:6C:7F:4C:39:92:8A:08
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187511CCBF8BD1FE906AB8682E0D2B9D2BB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_-9sHLdhS0omS8vbcWx_TDmSigg.roa
Signing time: Wed 05 Apr 2023 11:10:54 +0000
ROA not before: Wed 05 Apr 2023 11:10:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:51:1c:cb:f8:bd:1f:e9:06:ab:86:82:e0:d2:b9:d2:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 5 11:10:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ffef6c1cb7614b4a264bcbdb716c7f4c39928a08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:94:e7:6a:89:85:d2:c8:48:cb:07:6c:38:76:
4a:9d:5a:c7:c4:78:cd:6a:23:a2:45:e1:cb:53:03:
7a:56:c1:87:34:24:d8:bf:41:50:28:17:33:aa:a9:
3e:ed:4f:a6:51:ad:df:b7:f0:04:40:7c:47:35:79:
f6:4a:1b:f2:71:b1:38:00:c1:3d:9e:4c:27:5b:50:
b3:96:d8:fe:97:20:55:36:aa:2a:17:03:f1:b4:27:
b1:a1:db:69:e6:0e:3a:2b:26:ac:19:a4:7e:d7:07:
fb:5c:aa:c2:60:e8:09:a6:62:60:b0:a6:bf:39:f7:
0a:d7:86:3c:9b:28:b9:a2:32:61:52:1e:04:7f:6a:
37:a5:c4:a1:64:9c:a0:de:d0:13:65:35:e7:cb:65:
e4:a4:0b:19:4f:e9:7e:5f:3d:da:5c:52:6e:d8:18:
b9:e1:8b:18:4a:a1:a2:ef:b3:d7:3b:02:4d:99:34:
22:bc:0d:2c:78:8b:f3:2c:9a:08:52:5d:ab:e0:5c:
d8:f7:88:83:7a:be:9c:ce:ec:55:02:01:79:dc:cb:
d6:8a:44:8b:b0:f3:07:8d:10:01:76:aa:b0:f4:1b:
cd:fe:4e:67:22:40:e4:70:21:cf:0c:ed:20:7c:6e:
db:22:b2:65:25:d1:a9:cf:1a:a2:a8:5d:64:ae:fc:
77:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:EF:6C:1C:B7:61:4B:4A:26:4B:CB:DB:71:6C:7F:4C:39:92:8A:08
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_-9sHLdhS0omS8vbcWx_TDmSigg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4b:bc:7b:f6:38:29:0e:d1:34:5a:3c:87:50:3f:bd:19:23:df:
1f:b7:16:80:dc:ed:51:52:0b:8f:18:6e:71:9b:b0:62:0d:26:
a7:d1:82:07:3a:31:76:f1:0a:e0:b4:8d:dc:b6:3c:16:ba:b5:
5c:1e:da:ab:cc:b0:3c:c5:84:92:ee:b2:02:17:ad:99:1b:e6:
f9:fa:be:93:60:2c:a9:89:8e:c9:be:47:4c:39:18:28:b9:69:
62:e9:7c:7b:e8:34:b0:f8:25:0f:1a:e7:30:d7:60:59:3a:f8:
2b:27:3c:8f:6a:b2:82:3b:33:08:44:26:31:dd:bc:65:72:0d:
25:5f:5e:ca:05:36:ee:14:cd:68:85:52:35:35:91:ef:33:b8:
40:33:19:87:13:56:80:33:2a:0a:5a:8e:df:53:30:30:99:ca:
4a:1e:85:87:34:c4:a2:a9:c1:b0:1e:2b:70:56:b2:2a:2b:34:
b0:7b:eb:84:8e:d7:6b:fd:84:49:7f:4b:4d:9e:5c:44:99:85:
9e:ae:a2:a0:3e:90:70:07:61:3a:96:49:8b:53:79:ef:12:b9:
fc:83:f2:29:af:e9:f7:90:aa:f2:c2:0c:a6:06:eb:ca:e0:01:
32:84:a6:d9:59:4f:19:50:54:ff:57:03:8e:79:5d:75:91:98:
19:c0:4b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:23:59 2025 by rpki-client