Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/b0IHbBG4QKzCrre4XS2qhiyE4oM.roa
File: b0IHbBG4QKzCrre4XS2qhiyE4oM.roa (raw, json)
Hash identifier: qu+gPzkFRtIkTEBEi8IFrO+MJ3Cl8pA2w9n5L7Kka64=
Subject key identifier: 6F:42:07:6C:11:B8:40:AC:C2:AE:B7:B8:5D:2D:AA:86:2C:84:E2:83
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01895A55630F83200D9B2ADC47B8F92893CD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/b0IHbBG4QKzCrre4XS2qhiyE4oM.roa
Signing time: Sat 15 Jul 2023 16:14:52 +0000
ROA not before: Sat 15 Jul 2023 16:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:5a:55:63:0f:83:20:0d:9b:2a:dc:47:b8:f9:28:93:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 15 16:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6f42076c11b840acc2aeb7b85d2daa862c84e283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f9:5f:fa:a7:6f:68:af:b4:e1:cd:82:6d:d4:
dd:ee:eb:86:f8:e3:ca:d9:23:7a:d0:b8:06:bf:8b:
9d:5f:da:4c:4a:e2:ce:e9:db:c2:6f:3a:5e:92:e1:
94:43:54:77:d7:9c:8b:da:a0:75:db:95:4b:9f:46:
4e:58:36:9b:b8:ce:96:3d:cc:c6:ae:58:a7:eb:ae:
8e:1b:ac:ee:c4:35:06:b6:3a:80:bf:9e:60:ac:6f:
61:b7:09:f6:10:10:da:b8:c3:0f:e1:c1:08:2c:1f:
14:0b:9e:dd:f3:55:b5:ce:e1:0a:ec:17:f9:c7:b6:
dd:3e:55:e7:7b:13:68:35:ac:aa:55:5d:fc:99:79:
09:3c:31:d9:d9:20:03:da:b2:63:36:bd:1b:20:26:
ea:62:84:28:0b:20:6a:03:f1:a1:96:50:70:ea:69:
56:f5:2e:ca:6d:74:d3:de:b2:50:cf:17:60:90:7f:
fa:85:13:55:4a:11:12:86:bc:d3:7f:ab:e8:d7:09:
aa:8a:01:c1:7c:48:ec:18:87:ad:5a:13:53:a5:81:
cb:1f:66:bc:7e:5d:de:03:a5:d2:21:5d:20:d9:0c:
ea:09:05:cd:62:7b:4f:b2:86:3c:6d:10:29:cc:53:
9f:12:bc:85:47:67:dc:2f:b2:f5:ab:01:5b:c7:be:
0e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:42:07:6C:11:B8:40:AC:C2:AE:B7:B8:5D:2D:AA:86:2C:84:E2:83
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/b0IHbBG4QKzCrre4XS2qhiyE4oM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
39:f4:c9:ce:d8:f8:38:8f:3b:4b:41:77:16:ed:dd:e0:f8:bd:
33:c5:3a:28:ec:33:72:a2:fd:6f:1d:a1:00:88:2c:bb:c5:17:
5e:26:f7:e1:4a:a2:cb:cc:f6:b4:b5:1a:ff:a8:a6:76:14:ac:
31:4f:0a:86:b7:d5:cd:0c:92:dc:46:b1:5b:38:8a:fe:18:4f:
b0:7e:ee:09:fc:10:f5:6f:b2:e8:9a:ec:e0:12:b3:0f:bd:c8:
34:b8:0a:a3:a9:77:1c:1c:4e:43:fc:a3:5d:35:d9:b5:4a:fc:
ea:ac:8a:83:2d:3d:5f:cf:ed:f9:55:ab:45:35:39:d4:b1:ac:
93:79:e0:ab:5c:15:e4:f4:33:f6:fa:ae:e3:f5:4d:03:9a:ff:
dc:c6:c9:e4:0f:ef:61:d1:14:b7:4b:93:ec:b9:ed:08:51:80:
29:9b:85:e9:41:2f:44:d1:49:59:f1:0a:40:f9:b3:e3:a6:a3:
e4:f7:44:2c:99:2f:97:fc:8c:3b:ef:60:4d:c0:a1:e6:49:46:
29:6a:95:e7:3a:04:76:94:26:8b:8b:7f:61:ac:09:2c:83:00:
e4:a0:3c:d4:0f:34:9d:37:d9:b0:60:a7:64:0c:aa:ea:a4:87:
c6:37:d0:3f:c0:e2:e4:ba:70:f2:c4:6a:8b:d6:a2:2c:db:7e:
e2:e2:8a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 10:45:21 2025 by rpki-client