Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aVissLtqMDTiopOsiw7CC0kUN7U.roa
File: aVissLtqMDTiopOsiw7CC0kUN7U.roa (raw, json)
Hash identifier: jMHg1Iimh95p2UGCh5DPE/Csl+SPkFoE6wTh5dDr26A=
Subject key identifier: 69:58:AC:B0:BB:6A:30:34:E2:A2:93:AC:8B:0E:C2:0B:49:14:37:B5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188DDDC83D51FA3F9CEFB85662441017D64
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aVissLtqMDTiopOsiw7CC0kUN7U.roa
Signing time: Wed 21 Jun 2023 12:09:56 +0000
ROA not before: Wed 21 Jun 2023 12:09:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:dd:dc:83:d5:1f:a3:f9:ce:fb:85:66:24:41:01:7d:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 21 12:09:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6958acb0bb6a3034e2a293ac8b0ec20b491437b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a9:aa:cf:b8:ae:f9:ef:16:c5:3f:66:b7:48:
64:c8:06:90:6c:eb:6f:c6:57:e0:f4:a7:46:4c:b4:
0a:0e:49:35:f5:89:a1:14:ae:4c:f2:bb:a9:d8:11:
87:9a:fe:1d:f0:4d:50:c9:c8:66:d9:01:71:12:92:
50:b8:9a:4b:29:65:c9:dd:1e:96:f9:ce:7a:1c:79:
ba:41:89:69:0f:fd:d1:92:de:67:a0:49:e9:92:b5:
4b:7e:5b:68:f0:83:7a:2c:70:51:d0:74:78:6b:c2:
12:e9:ee:1f:37:f5:3f:6a:79:b9:21:a6:3d:43:a2:
9f:84:bf:e2:cb:cf:d9:e8:b7:cd:b2:16:cb:cf:f3:
80:3b:65:09:4f:f9:53:86:59:25:7f:9e:6f:58:84:
ed:4d:91:3a:ad:66:67:a5:da:7f:c6:f7:75:6b:ad:
62:7f:bc:0c:9f:d9:b0:9b:44:31:de:5c:e8:44:e2:
4e:d8:65:07:5a:a4:1e:ab:d6:97:de:d5:b8:77:df:
1d:b4:5c:63:9b:0d:0e:ce:aa:3f:a7:ac:b6:e6:a2:
fb:87:6a:89:c2:51:c0:b9:37:e0:2a:19:ee:7e:4e:
a3:8c:8e:55:1f:f3:2d:76:61:51:11:e2:dc:f4:c3:
3a:c6:c6:74:90:f9:26:27:fb:54:1b:01:da:8e:27:
d6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:58:AC:B0:BB:6A:30:34:E2:A2:93:AC:8B:0E:C2:0B:49:14:37:B5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aVissLtqMDTiopOsiw7CC0kUN7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4c:00:96:db:58:f7:bd:61:e0:04:e8:28:17:e3:fc:62:85:d5:
d2:a1:b3:fe:f4:a4:62:4b:ae:95:9a:ab:c7:b4:5e:5f:f1:a8:
e8:59:b8:a7:50:15:66:c7:da:04:21:f9:93:a5:12:35:7a:03:
a1:21:7b:bd:bb:fd:29:9f:8a:8e:ae:9b:17:ed:67:f0:a2:3e:
9e:9f:8c:3c:c0:64:b4:15:c0:5f:97:bd:0f:2f:3d:f5:f4:ab:
40:e0:1e:4b:f0:88:df:42:10:ca:32:ff:df:9f:fd:1a:f2:ca:
94:44:6c:41:a9:b9:7c:a4:01:19:25:d6:32:49:64:d4:e8:1d:
f2:02:5d:ad:75:07:91:48:f0:82:e1:0d:95:8f:f6:4e:0e:d9:
16:15:f1:fc:cf:35:78:9b:f6:14:06:90:53:d8:51:42:97:79:
d3:6d:e8:7c:3e:3b:07:14:27:a0:a1:fd:2f:6b:fa:98:74:a3:
e3:33:ff:51:d2:d8:6c:3b:12:b3:c9:ee:09:69:b7:01:d7:3a:
c0:26:cd:40:9b:a9:13:54:9f:2d:03:30:4e:e7:60:c0:2d:f2:
5d:8d:0c:12:41:83:15:96:fb:63:7c:62:41:7c:ac:7c:85:78:
43:80:bc:4f:51:d9:7c:a6:17:3e:fa:0e:8a:0b:0c:c3:99:2a:
4f:45:5a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:01:26 2025 by rpki-client