Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/a_zXrN9A4oLvTYFAf-lfuX7xVkA.roa
File: a_zXrN9A4oLvTYFAf-lfuX7xVkA.roa (raw, json)
Hash identifier: RATgE71rnK5MMY5/pg6Jw39ehINhJBbA/RJ9SnnaP/M=
Subject key identifier: 6B:FC:D7:AC:DF:40:E2:82:EF:4D:81:40:7F:E9:5F:B9:7E:F1:56:40
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187741557DB7C50B5ADE19310ED4042B283
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/a_zXrN9A4oLvTYFAf-lfuX7xVkA.roa
Signing time: Wed 12 Apr 2023 06:09:28 +0000
ROA not before: Wed 12 Apr 2023 06:09:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:74:15:57:db:7c:50:b5:ad:e1:93:10:ed:40:42:b2:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 12 06:09:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6bfcd7acdf40e282ef4d81407fe95fb97ef15640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d9:76:b2:a8:e8:e6:b3:48:5b:4b:c2:c5:21:
bc:79:f7:a2:fe:5f:ff:c7:d3:b7:b9:89:67:cb:d1:
93:ec:9f:84:c6:f2:a2:d5:96:27:68:3a:9f:23:69:
46:e0:44:3c:1d:fa:0b:82:54:2e:ab:40:0f:08:67:
2c:03:a9:c1:3d:1a:a0:e9:06:63:76:5d:13:16:f0:
2f:e4:d4:30:ed:d1:60:2d:e7:d9:ce:04:b0:c5:6e:
8e:ed:42:58:e8:0a:eb:fe:30:47:16:e1:0c:ea:ad:
d7:8b:e9:08:b8:94:7c:ba:f0:1e:08:20:04:3d:0e:
ef:84:0c:04:11:7d:bb:9b:65:30:73:50:cd:e3:e2:
d7:ff:30:4f:cd:66:18:c6:0f:6b:c1:d4:c2:dd:26:
a3:0a:c0:3c:5d:0e:bb:bc:23:e4:66:4f:55:a2:2f:
20:5a:f8:2c:75:ff:16:3e:74:13:80:0f:96:23:2b:
cb:01:ce:a1:db:ce:77:ae:59:6b:93:02:a5:30:c4:
be:5e:ec:4c:9d:8b:a6:d8:f2:fc:22:8d:9c:d1:cb:
f1:2a:3b:80:0b:60:0e:d3:2c:be:5f:03:56:67:7a:
62:33:f4:60:af:56:41:38:98:c5:51:38:db:a1:87:
55:e6:c7:23:a7:ad:46:10:58:dd:70:71:4f:47:e2:
6a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:FC:D7:AC:DF:40:E2:82:EF:4D:81:40:7F:E9:5F:B9:7E:F1:56:40
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/a_zXrN9A4oLvTYFAf-lfuX7xVkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8e:fe:d8:94:f5:b0:76:6e:0e:c3:a9:3b:6b:4f:0b:bb:a9:5e:
5b:e2:0a:4a:ee:fe:67:da:c3:d4:34:03:c6:e8:ea:fb:16:9b:
d6:29:24:b7:09:a5:b5:87:6b:13:ac:cf:0d:9b:09:ef:a7:af:
30:b2:f8:2a:c7:79:96:05:ab:7a:96:7b:e0:12:8b:82:7a:9d:
fe:29:a0:27:9c:ab:fd:54:2e:78:3b:d1:ee:35:a3:fa:75:37:
2b:05:a8:9d:1c:3b:69:89:69:08:6c:10:f6:d9:74:a9:3e:39:
76:5e:a7:68:8b:3e:21:0c:28:64:44:9e:74:56:36:37:70:53:
9a:33:0d:a7:3c:b4:c8:76:7b:89:95:fb:3a:68:01:a6:07:fd:
89:07:37:f7:f0:53:9c:c6:94:2f:fc:76:1b:ef:16:4c:03:c2:
16:97:05:6a:5b:c5:cd:15:54:e4:b2:82:dc:0f:d7:09:cf:a6:
aa:56:ce:07:b7:3a:46:c7:a1:f2:7e:b3:5b:0a:05:a0:9f:58:
91:c9:6b:0b:10:e6:b1:ac:92:16:fb:d0:85:25:2f:34:6a:5f:
4a:77:e6:eb:87:27:30:0c:b0:e9:a4:c8:44:da:4a:1b:5b:80:
53:6a:e0:74:3a:29:b3:8a:b5:3c:34:c9:e8:99:7b:08:33:b7:
b7:cc:ed:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 00:54:45 2025 by rpki-client