Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cGR3O0RJGu9dvSatqi1FgLXXSW8.roa
File: cGR3O0RJGu9dvSatqi1FgLXXSW8.roa (raw, json)
Hash identifier: iZz3/YLxp5hFbcRMQQ4ZRGIX3l2IjfAiQNHjjh7/iwE=
Subject key identifier: 70:64:77:3B:44:49:1A:EF:5D:BD:26:AD:AA:2D:45:80:B5:D7:49:6F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188A4C8EFFB5C182C688499FF8AD223A3A7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cGR3O0RJGu9dvSatqi1FgLXXSW8.roa
Signing time: Sat 10 Jun 2023 10:10:12 +0000
ROA not before: Sat 10 Jun 2023 10:10:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:a4:c8:ef:fb:5c:18:2c:68:84:99:ff:8a:d2:23:a3:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 10 10:10:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7064773b44491aef5dbd26adaa2d4580b5d7496f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:df:a2:55:ab:e8:4e:bd:42:18:57:ea:c5:96:
a8:e2:7b:b7:d1:49:b7:f2:24:dc:b1:41:49:b9:7a:
02:2f:92:b0:9c:ce:16:48:04:c7:6e:de:ee:fc:7b:
8f:ff:3b:de:13:91:9d:18:76:c5:4c:62:8c:fd:85:
72:5d:9d:b8:95:d9:c3:69:82:e1:60:a6:ce:8f:5f:
af:e4:a5:fb:54:7f:2e:0f:26:69:34:99:f8:8f:b8:
37:84:61:f8:e5:75:f4:50:ca:84:fd:a8:ab:7f:4e:
d5:c8:15:9c:ca:cf:a5:2a:0e:4f:1a:67:9f:3c:99:
b9:fb:79:bc:04:92:39:3a:80:64:06:90:98:4d:39:
ec:92:e5:20:f9:83:6e:90:f3:b6:61:7f:00:ce:97:
cc:c8:52:11:5c:67:91:fa:61:76:e0:ee:29:ff:40:
fa:55:6b:31:fa:3b:e2:b3:42:2b:cd:15:fe:f2:8e:
05:b8:3a:42:cc:40:f6:6b:39:e1:b5:39:60:13:1e:
be:a3:d1:1a:10:d7:8f:08:bb:92:26:b6:06:1f:03:
b1:56:f8:f0:e0:12:86:f1:9d:90:e7:98:21:70:e6:
4f:11:aa:61:c3:e1:d3:4c:01:9a:40:e3:f5:cc:b1:
73:5d:81:31:88:1e:c5:2b:30:ee:73:fc:68:a3:6f:
a9:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:64:77:3B:44:49:1A:EF:5D:BD:26:AD:AA:2D:45:80:B5:D7:49:6F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cGR3O0RJGu9dvSatqi1FgLXXSW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7b:7b:0d:9a:c6:9c:0e:4f:73:81:3a:49:f9:b5:5b:be:09:0f:
e6:fb:f3:2d:11:8e:ab:b3:e3:ee:12:0e:cf:87:fa:5e:de:58:
79:02:ef:e0:7b:29:2f:a8:b6:d3:f6:22:59:ba:ac:d4:11:b9:
00:cb:96:14:61:43:25:d6:0f:44:be:2d:a6:8b:6e:dd:78:04:
9f:c8:b9:b0:ba:e6:55:73:60:d6:70:0d:93:cd:4b:d3:be:3f:
0d:4a:c4:0f:84:56:69:ba:45:24:d4:df:5f:eb:37:04:8e:3c:
41:0a:8f:67:67:67:2c:ed:23:35:cb:b5:c5:cf:35:18:c5:c5:
95:43:51:5c:51:b4:3b:23:f6:17:67:95:6a:20:d6:f8:2d:4c:
00:81:af:52:dd:92:25:2d:6b:6f:51:06:bc:54:51:78:2b:f4:
15:3e:cf:ce:8b:2d:99:dd:03:1f:4c:59:63:1d:e3:c7:f9:33:
47:14:de:ad:ca:2a:f3:4b:67:b0:27:3e:97:36:41:a5:61:11:
f5:22:fa:0e:96:d8:ef:d1:0b:23:3d:bf:65:5c:b9:0f:88:15:
11:1a:2e:74:28:4c:7d:fc:ab:22:5c:a7:00:91:e9:2b:6f:36:
e6:60:61:3d:52:25:0e:00:4e:3b:17:97:5d:51:d7:87:b5:fa:
41:d1:31:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:48:38 2025 by rpki-client