Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ctxnVWTV8guqJQXXec9Esgc_9bM.roa
File: ctxnVWTV8guqJQXXec9Esgc_9bM.roa (raw, json)
Hash identifier: 5RFSwii/FG3Bo2m8UGnhx5L6hWzPCnIT1/QMi5SVMsw=
Subject key identifier: 72:DC:67:55:64:D5:F2:0B:AA:25:05:D7:79:CF:44:B2:07:3F:F5:B3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189646A3CADD11195A9519472AA64535D16
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ctxnVWTV8guqJQXXec9Esgc_9bM.roa
Signing time: Mon 17 Jul 2023 15:13:51 +0000
ROA not before: Mon 17 Jul 2023 15:13:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:6a:3c:ad:d1:11:95:a9:51:94:72:aa:64:53:5d:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 17 15:13:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=72dc675564d5f20baa2505d779cf44b2073ff5b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b9:21:ed:65:67:84:dd:c8:52:d9:42:7e:52:
f6:cb:0c:e7:25:62:07:a4:93:11:c2:79:9b:1d:72:
79:4d:02:48:51:44:a7:28:bb:fb:80:5d:25:cb:fb:
dc:56:71:83:46:00:d5:35:d1:80:19:71:5f:fd:a0:
3c:8e:b4:90:6d:42:38:74:ca:91:f4:d2:09:f9:98:
e4:dc:e5:01:14:b8:77:16:f9:5f:df:1e:bf:85:51:
96:fb:c4:68:56:ee:ea:61:3e:f9:90:1a:a3:0e:9b:
bf:bd:43:de:f4:23:16:be:52:6c:16:7d:e9:16:fe:
0b:fe:2e:b7:c0:3c:87:b9:63:a0:7b:ac:61:8e:8f:
90:a6:c9:83:30:44:31:a3:8f:0a:2a:63:ab:34:42:
57:c6:c6:9e:84:93:c5:e0:03:81:5c:46:a7:9b:70:
f2:29:b2:ad:eb:2f:48:71:d6:c1:93:ae:ca:b8:a1:
81:0a:e1:a0:85:3c:8d:72:f7:6d:21:1a:78:d4:30:
0d:49:79:e9:2b:30:09:38:f1:d1:07:60:e9:c8:b9:
f9:47:8b:50:12:47:c6:0c:0b:cd:2a:32:d9:24:83:
34:a1:8b:53:22:6a:c2:71:f0:04:02:27:9e:52:06:
b7:da:56:1f:1d:1c:18:f4:00:1c:25:c7:3b:ba:50:
c7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:DC:67:55:64:D5:F2:0B:AA:25:05:D7:79:CF:44:B2:07:3F:F5:B3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ctxnVWTV8guqJQXXec9Esgc_9bM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
96:09:70:5f:48:cc:0f:e9:be:6b:d6:cf:d2:41:bb:f1:05:10:
8a:b2:fd:93:51:d6:2a:5a:57:55:39:f3:eb:a4:53:ab:4b:9d:
4f:9f:06:74:f9:f0:f6:87:43:19:0d:da:b9:a7:c0:a7:16:a9:
3d:43:af:17:92:c1:25:97:8b:eb:e0:7c:84:d1:bd:8b:53:bc:
fc:39:3d:07:93:f7:38:ae:86:04:7f:ee:f0:cd:a1:ef:c8:6a:
f1:74:9b:29:58:e6:23:89:bc:b1:d4:21:f4:32:30:54:20:01:
58:a2:e6:d2:42:e2:06:5f:29:ca:af:36:ac:d8:05:a4:c0:f6:
0e:3f:45:22:21:48:00:8c:e7:de:dc:a1:7e:71:62:a9:5c:e1:
7d:51:f0:ec:c0:8c:18:6d:7d:16:05:88:c5:db:90:bd:87:1b:
9a:88:48:d9:13:ab:ef:96:70:84:cf:ff:bf:c8:d4:96:31:80:
d4:12:b0:55:95:79:2a:9f:c9:2e:34:4a:bc:a5:6b:af:21:f8:
af:03:d4:7a:29:e8:49:51:d4:91:8b:1c:82:06:af:fa:df:54:
aa:14:71:93:0b:59:f2:e6:40:02:28:77:7f:2b:1e:92:51:97:
93:35:77:eb:a7:7e:ca:d4:83:6c:54:47:c4:e6:d6:57:e8:95:
3a:cd:10:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 02:59:46 2025 by rpki-client