Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_odUlwCai_iPBUZp_26eYrKmAkc.roa
File: _odUlwCai_iPBUZp_26eYrKmAkc.roa (raw, json)
Hash identifier: fFqpLiOb8cX35vWrICgDUT3C6tDOyMMgXGaWQbSDZRk=
Subject key identifier: FE:87:54:97:00:9A:8B:F8:8F:05:46:69:FF:6E:9E:62:B2:A6:02:47
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188B05E344A62379521762583C292E7855F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_odUlwCai_iPBUZp_26eYrKmAkc.roa
Signing time: Mon 12 Jun 2023 16:09:03 +0000
ROA not before: Mon 12 Jun 2023 16:09:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b0:5e:34:4a:62:37:95:21:76:25:83:c2:92:e7:85:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 12 16:09:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe875497009a8bf88f054669ff6e9e62b2a60247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a9:2a:3f:3d:78:09:aa:b6:3c:13:5a:0c:12:
64:59:f7:b4:df:e0:3c:b7:91:f2:78:28:d8:77:4a:
c3:91:15:b9:9f:78:7a:73:e5:f0:bf:a5:98:39:af:
01:9d:e4:f2:bb:25:f0:88:81:ff:33:7a:c6:85:ad:
e3:cc:d4:d0:35:3b:ee:31:00:c1:17:3b:04:a1:9f:
eb:7e:b2:77:68:e4:2a:ff:a3:2a:ad:6c:47:37:ff:
4e:60:9b:09:1d:bf:9f:1a:04:ff:5a:d9:31:28:3d:
d5:6f:b3:91:d0:39:c4:cc:1c:97:de:5d:c7:2c:59:
10:f4:37:c3:de:6a:32:0e:4b:d1:74:87:a5:75:9e:
96:71:53:e1:9c:c5:d9:ee:28:da:a3:89:fc:1e:85:
48:bc:cf:3e:d8:f2:03:fd:e3:9a:6d:c7:24:d8:5d:
21:2f:90:d6:eb:46:71:ab:a7:17:7f:4c:8c:f5:e0:
27:3c:09:1d:15:cf:1f:14:23:88:7c:70:2a:13:1c:
b8:56:e0:d5:9e:48:9e:84:00:63:fd:23:4c:aa:b6:
a8:5d:d5:a9:e6:ce:ff:76:c4:3e:9c:0f:e7:61:df:
22:51:10:f1:54:ce:03:f2:45:b1:0a:9a:d7:b1:14:
b7:45:1e:bd:cb:2f:97:37:56:61:96:74:1d:5b:05:
9b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:87:54:97:00:9A:8B:F8:8F:05:46:69:FF:6E:9E:62:B2:A6:02:47
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_odUlwCai_iPBUZp_26eYrKmAkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
87:28:6d:67:4a:52:2b:dd:a1:30:d6:16:b8:3d:61:57:26:e9:
a3:c2:02:77:40:8c:fa:d2:63:d1:86:4c:23:46:2b:b6:58:1e:
9d:0c:0b:46:88:ab:da:e8:64:a6:82:19:4a:72:ec:ae:8c:ea:
37:01:46:22:ed:13:21:cf:82:93:81:9b:e9:13:5e:18:d5:7a:
4f:f6:64:50:56:bc:a3:1d:50:bd:2c:d0:84:1d:3a:de:b3:36:
7a:78:9d:48:e0:3a:98:e2:94:67:76:dd:d2:d5:fb:b7:19:30:
64:23:fb:a6:23:f7:b2:eb:34:5f:32:e5:16:d9:c0:4e:e7:bb:
7f:74:47:97:fe:f5:09:a0:40:b7:65:0b:cb:ca:74:fb:89:e3:
58:17:bb:8b:49:65:ca:c6:d5:56:8f:c2:a4:b5:7e:42:f8:22:
32:21:41:7f:74:db:c3:96:ca:af:d6:57:e8:b9:10:5d:8a:9c:
ff:a7:18:db:32:c8:43:a6:c9:43:2d:ed:08:6b:08:0d:93:46:
04:89:ef:a0:53:23:a2:22:50:de:61:e3:e2:e9:e1:2f:5e:2e:
1d:b9:85:51:9d:a5:e6:d9:a5:33:e8:a1:b2:d5:d2:b4:ca:be:
68:17:37:f9:e5:de:c7:c5:07:2d:c1:2a:49:1a:08:05:c9:0d:
5a:2b:32:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:08:21 2025 by rpki-client