Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cB588DcW6qF_rnL-9YYfguLUTEk.roa
File: cB588DcW6qF_rnL-9YYfguLUTEk.roa (raw, json)
Hash identifier: jkVI69zGkXUBtBCydL/uTy2JG7Yz2t+90VU4AoZr14c=
Subject key identifier: 70:1E:7C:F0:37:16:EA:A1:7F:AE:72:FE:F5:86:1F:82:E2:D4:4C:49
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186AAA058F59DF59DBF6291538063B841FC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cB588DcW6qF_rnL-9YYfguLUTEk.roa
Signing time: Sat 04 Mar 2023 03:18:00 +0000
ROA not before: Sat 04 Mar 2023 03:18:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:aa:a0:58:f5:9d:f5:9d:bf:62:91:53:80:63:b8:41:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 4 03:18:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=701e7cf03716eaa17fae72fef5861f82e2d44c49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c1:e7:1d:43:92:29:3f:84:db:7b:94:97:c6:
fb:f9:2e:0e:78:16:39:10:3c:e3:41:76:09:ee:83:
a1:75:7a:31:b9:90:67:f8:12:ca:5b:68:95:a0:5d:
a6:22:f5:35:77:45:52:ff:2d:9a:a9:1d:04:bd:0a:
3e:86:81:c8:f3:0f:b3:17:04:96:e0:db:35:c7:36:
04:f7:83:98:42:30:22:be:d6:0a:84:15:f4:8c:9e:
f4:f5:de:a7:4b:96:f1:37:9e:21:85:83:1d:19:4e:
7f:5c:a0:6d:fb:92:84:fa:db:17:4a:c1:3f:0d:26:
5f:d7:0c:76:f2:ee:cf:52:4f:37:d1:9d:7f:62:69:
39:3c:53:7b:2f:bb:47:de:29:a2:a6:50:fe:70:94:
54:20:a5:f4:9f:2b:f5:04:85:ea:f5:6c:96:e1:fd:
c0:5b:37:17:2e:02:41:e0:d3:f9:58:32:ed:4b:2b:
a1:ac:f1:a8:65:b0:74:80:a6:11:34:b0:1f:86:6c:
20:9f:dc:c8:72:1a:44:b6:3c:40:6c:c1:c0:4c:37:
5a:7a:ea:e3:9f:ab:d2:10:a5:ff:0e:91:86:ff:95:
8a:29:0a:e1:35:88:90:70:7f:4b:f2:0c:f4:94:f2:
60:c5:1e:0b:df:31:dd:fd:59:bc:41:fe:3f:36:d7:
2f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:1E:7C:F0:37:16:EA:A1:7F:AE:72:FE:F5:86:1F:82:E2:D4:4C:49
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cB588DcW6qF_rnL-9YYfguLUTEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
90:d6:26:ac:77:a2:46:e5:6f:d2:e7:c0:60:41:da:ca:c2:07:
c4:e3:69:ac:85:41:4f:ec:bc:78:e4:29:6f:c0:53:57:ad:ce:
1b:92:8c:a5:dc:a4:d3:a8:81:5d:ec:dc:bd:62:1a:4a:fd:b9:
78:1b:2f:25:5d:fc:00:21:d5:91:a0:08:88:fd:11:07:09:2c:
9e:3b:32:6e:e1:d7:60:bf:7b:02:f9:46:d5:95:e6:24:69:20:
df:09:96:e4:fb:63:3b:a4:0d:00:3f:2b:29:b6:e1:a6:88:38:
dc:21:0f:82:39:83:84:a8:9b:24:e2:e1:70:5e:df:3e:85:6d:
c7:03:11:3f:3e:15:a5:20:9e:7d:80:c6:53:4b:4f:be:b0:d7:
15:8b:37:ae:20:6e:0a:8f:12:7a:73:1e:31:fe:af:5e:c3:70:
4a:0b:c2:6b:fe:e6:70:e7:1c:32:d2:e7:04:78:8f:77:54:e5:
f6:59:1f:c9:6e:8e:02:c9:50:54:12:27:80:72:cd:59:f1:b1:
60:f0:fd:a4:83:07:b0:1a:2b:2e:33:e2:af:c4:9c:9c:a7:f3:
f5:ee:49:5b:d6:f5:52:26:2b:0f:91:e9:ed:8f:d9:49:b3:6a:
c1:9b:ca:41:88:4e:b4:06:a1:c4:3e:1c:b4:e1:26:24:6d:50:
b3:5f:73:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:12:25 2025 by rpki-client