Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aYaPmzf6W3HpkwR3YRHiyxapJuk.roa
File: aYaPmzf6W3HpkwR3YRHiyxapJuk.roa (raw, json)
Hash identifier: G1jj5i7ki4Q9NuX2PiUQkxk+Gd4ORX/eQk5NxXIQpLo=
Subject key identifier: 69:86:8F:9B:37:FA:5B:71:E9:93:04:77:61:11:E2:CB:16:A9:26:E9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189379183942C2E30742FCE35914DBD0789
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aYaPmzf6W3HpkwR3YRHiyxapJuk.roa
Signing time: Sat 08 Jul 2023 22:13:50 +0000
ROA not before: Sat 08 Jul 2023 22:13:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:37:91:83:94:2c:2e:30:74:2f:ce:35:91:4d:bd:07:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 8 22:13:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=69868f9b37fa5b71e99304776111e2cb16a926e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:39:de:bd:a7:46:99:8d:50:81:2b:bf:b2:52:
3b:d4:77:7c:88:8d:01:10:94:a6:df:f3:7c:9a:2b:
a4:e6:01:52:3c:62:2f:2b:2f:aa:f3:39:93:3d:b3:
e5:62:ac:c2:b6:a0:b6:30:aa:87:26:71:06:fe:d6:
01:b3:11:45:48:31:d4:0d:f0:96:10:b7:71:78:8c:
27:06:a5:88:fa:0f:77:4d:81:e7:0d:3e:a3:96:25:
2c:da:27:6b:c3:3d:8d:a6:86:4d:9c:14:ac:08:c6:
14:dd:9d:67:a7:af:a5:48:79:8d:04:30:39:a8:7d:
86:38:6d:f3:13:b0:d9:1a:6f:96:5b:d8:19:55:1f:
89:84:36:e3:3a:c5:78:36:47:ce:ed:1d:cf:a3:3c:
06:3e:60:ed:76:88:57:c1:10:f7:fc:54:3e:9f:d3:
89:96:57:3e:1d:4e:e9:b0:c6:69:9e:ed:4e:72:74:
b0:fb:da:d3:9a:05:14:d2:f1:be:60:0d:c3:01:43:
86:df:c3:a4:7a:58:63:b3:f3:d6:85:2e:59:8b:e4:
bd:37:d3:f7:68:2a:c0:02:65:13:4c:e3:cb:d3:20:
80:cb:7d:3e:b4:51:bd:28:49:31:81:fd:ba:02:bf:
6d:22:98:ad:d6:e5:08:da:da:11:73:0f:ff:07:5e:
23:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:86:8F:9B:37:FA:5B:71:E9:93:04:77:61:11:E2:CB:16:A9:26:E9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aYaPmzf6W3HpkwR3YRHiyxapJuk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
aa:46:d0:3e:9f:14:2d:6d:42:a7:14:58:31:24:65:4a:fb:4d:
66:ab:73:56:c6:94:86:af:12:6a:b9:31:8d:d9:ff:0e:c5:b3:
66:f0:93:d0:8f:a5:f7:ae:1b:ee:85:df:ee:5e:0e:a4:3b:81:
d9:11:15:ae:d9:4e:0d:ad:a6:64:c9:b7:b7:99:23:60:1d:98:
7b:62:e0:4d:53:48:61:c3:13:dc:a9:02:50:5b:2e:8e:f8:31:
36:80:14:bc:51:81:22:69:92:db:28:88:c4:bb:ac:23:1a:d3:
99:04:86:50:fc:51:76:b9:06:6a:f5:02:bc:f1:fa:74:0b:85:
64:e6:65:0c:e4:a5:22:ca:b4:d2:9f:30:0c:d0:81:35:90:e8:
05:11:98:ef:92:db:fc:0f:a6:76:f2:cb:98:28:56:4b:99:2c:
f8:7d:22:02:8a:ff:6a:fa:b1:9b:a4:aa:78:27:1c:5c:a2:0d:
d0:3c:a5:6a:78:17:5d:6e:43:7f:e5:f6:71:50:fa:99:c9:a4:
49:34:c9:eb:c7:1f:32:04:86:56:3d:ab:3d:ef:40:73:df:75:
ba:12:42:29:a7:03:29:93:b0:27:7b:ea:fa:ff:36:b5:fe:05:
14:67:a7:4e:fb:6d:40:f3:dc:68:18:df:00:76:ae:e7:72:dd:
b7:1e:7e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:20:23 2025 by rpki-client