Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_2Z72Ai3Dp4K3SxLhkd-pRFpHg8.roa
File: _2Z72Ai3Dp4K3SxLhkd-pRFpHg8.roa (raw, json)
Hash identifier: xsAtFfdm76gRJ+LhRwdWsJmM0zgcsW7UBEgH3HbcTew=
Subject key identifier: FF:66:7B:D8:08:B7:0E:9E:0A:DD:2C:4B:86:47:7E:A5:11:69:1E:0F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188DCC910CEEDA8B6E2B48FA07D6E614B87
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_2Z72Ai3Dp4K3SxLhkd-pRFpHg8.roa
Signing time: Wed 21 Jun 2023 07:09:04 +0000
ROA not before: Wed 21 Jun 2023 07:09:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:dc:c9:10:ce:ed:a8:b6:e2:b4:8f:a0:7d:6e:61:4b:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 21 07:09:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ff667bd808b70e9e0add2c4b86477ea511691e0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:be:a3:74:ce:df:21:81:04:f6:d7:24:88:52:
56:14:dc:35:a7:94:62:dd:b5:57:7e:31:a0:2b:56:
e2:1f:54:93:d8:d0:84:da:1b:dc:cd:a2:50:a0:b8:
ad:d9:80:79:c9:c1:b1:93:84:d1:a8:37:d7:87:27:
da:d6:a7:eb:37:b7:3d:f5:31:33:d4:fc:be:10:f8:
7e:3d:54:62:b4:63:19:7e:8e:c7:70:c8:ce:73:0a:
b9:27:05:bd:89:e3:6c:a1:6f:53:31:0d:b2:d4:2d:
d9:08:ca:e3:8c:46:d6:b9:5d:62:fc:a1:71:62:18:
bf:95:68:cb:47:3b:aa:df:d6:d8:f5:d3:56:6e:93:
ca:e3:e7:50:9e:52:51:19:10:68:c8:16:e3:87:c6:
54:8b:81:14:3f:37:45:fc:fa:6c:94:5b:e3:0f:0e:
73:83:71:11:18:b3:35:e3:2e:3e:d8:19:0b:c6:14:
4f:c5:b0:49:27:70:50:a8:78:61:92:a9:dc:26:32:
28:46:fa:46:2d:ec:8e:8b:1e:f9:3f:2a:fd:9d:d6:
3c:8e:29:62:49:4a:5e:bc:eb:98:5a:5f:42:68:c0:
41:80:d9:36:29:02:37:e7:0e:4f:02:ce:e0:89:af:
39:f6:7c:6e:66:dd:31:3b:f1:3d:b5:c9:9e:e7:28:
14:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:66:7B:D8:08:B7:0E:9E:0A:DD:2C:4B:86:47:7E:A5:11:69:1E:0F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_2Z72Ai3Dp4K3SxLhkd-pRFpHg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
83:d6:94:a5:bf:01:f7:ba:7b:8c:69:1d:b9:6a:2d:22:0c:8a:
92:db:a5:26:5e:a8:50:4a:c2:9d:3b:ad:18:a8:8f:7f:20:20:
11:fd:88:92:40:86:db:5b:18:9f:42:ad:dc:56:4d:b8:e9:a3:
5c:78:5b:c7:8b:71:bf:23:8b:f7:12:24:05:61:66:bd:58:0f:
47:f5:ea:5d:3f:39:0b:5c:2c:00:a3:00:d6:d4:6e:0b:8e:2f:
ad:cd:05:0f:fa:49:d9:a8:8c:89:a8:d5:21:1d:91:3f:97:21:
8a:f3:b1:18:4c:c6:98:b7:7c:20:b6:4e:9c:b6:94:6d:a7:5e:
d5:9f:c2:ee:a8:ef:f4:e9:fa:5a:fc:44:aa:f9:10:a8:73:48:
63:27:fd:b7:74:7c:67:15:e9:1b:da:4e:18:0c:58:9b:20:eb:
35:28:36:1d:a4:16:94:a4:4d:ac:73:8e:c1:ee:38:bb:6e:99:
99:a1:c0:a0:1c:90:a0:9f:21:47:bd:8f:bd:d9:79:a8:fa:81:
3d:a7:78:3d:3b:33:a5:bf:3a:a1:85:c9:07:f8:29:87:47:46:
c8:76:b2:bf:cc:c7:32:eb:0c:ea:ca:29:62:3e:f9:80:c3:41:
a3:fd:d8:a7:72:86:81:f5:e1:16:10:4b:82:58:16:47:a8:a2:
05:1d:c7:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:11:50 2025 by rpki-client