Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/d4GEDLxZUtaB-eQD7j7b2RoLFBg.roa
File: d4GEDLxZUtaB-eQD7j7b2RoLFBg.roa (raw, json)
Hash identifier: U8FhHQVYvukUSS4plnmiNXe2P3rTB1N6IP7ESvCpNdo=
Subject key identifier: 77:81:84:0C:BC:59:52:D6:81:F9:E4:03:EE:3E:DB:D9:1A:0B:14:18
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188CED853928A152CA34F031B1DD01161BA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/d4GEDLxZUtaB-eQD7j7b2RoLFBg.roa
Signing time: Sun 18 Jun 2023 14:11:03 +0000
ROA not before: Sun 18 Jun 2023 14:11:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:ce:d8:53:92:8a:15:2c:a3:4f:03:1b:1d:d0:11:61:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 18 14:11:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7781840cbc5952d681f9e403ee3edbd91a0b1418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:2b:91:06:06:de:1a:27:2f:0d:42:a0:f9:de:
78:0b:c5:bc:e6:fa:c3:d4:42:74:b2:21:9d:df:0b:
9d:9e:4d:17:6e:53:5c:a5:81:d2:3b:b1:7b:d8:c3:
85:a8:af:d2:2a:62:d2:bf:fe:a2:e2:02:8b:1c:d2:
0b:82:d1:52:0d:88:f8:ff:c8:c4:d2:d0:8f:ad:9e:
79:55:b0:f3:13:4c:d3:05:54:0b:52:1c:00:2e:e9:
ed:6c:4d:44:fc:bf:cf:2a:16:56:36:e8:0d:42:e6:
e7:5e:ae:03:f0:92:67:fc:0a:9b:dd:ce:42:64:35:
df:99:a5:75:7a:2d:90:0f:d5:4d:0e:3f:45:40:7d:
61:3d:82:71:60:1c:ac:3a:ca:4b:92:a7:77:54:e0:
dd:3d:e6:b5:4e:45:c7:17:56:47:94:42:2b:53:6e:
2f:bf:06:da:4d:50:e3:35:47:41:1c:cb:ca:4c:69:
88:a5:04:c5:63:3a:60:a1:73:96:ef:1f:07:40:4a:
c3:4d:5b:dc:d3:06:c0:84:2e:7f:59:29:b7:fb:a3:
4c:7f:1d:53:d9:60:d5:1c:0d:c0:1e:39:85:96:34:
f2:ca:eb:62:46:dc:91:63:f4:49:34:5e:e7:34:06:
d8:06:0e:3c:d7:b3:96:d6:a6:89:5a:be:cf:eb:30:
86:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:81:84:0C:BC:59:52:D6:81:F9:E4:03:EE:3E:DB:D9:1A:0B:14:18
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/d4GEDLxZUtaB-eQD7j7b2RoLFBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
86:aa:00:3a:84:46:88:74:13:f3:0b:5d:0b:0c:54:dc:f8:42:
88:6c:62:e5:29:5f:a2:50:73:a0:78:03:8d:e3:13:24:cf:d2:
2f:b1:29:0d:e0:9a:89:19:d5:c6:e1:01:7d:18:a7:b9:a0:e6:
04:62:7c:68:5b:4b:57:02:9a:74:12:53:d9:9f:a0:1e:d9:ce:
17:3c:f5:88:20:92:6e:e5:42:31:da:8b:46:a8:90:a4:7c:35:
00:54:4e:01:00:5e:35:ed:6c:b8:e1:55:87:f3:2d:5f:ce:3d:
17:76:65:5b:18:e0:10:d1:82:04:1c:c4:88:ba:43:1d:dd:dc:
45:2a:71:16:3f:48:ee:35:50:a4:a2:97:ad:8e:d7:b5:87:87:
75:1f:1d:ad:8e:5d:0c:85:cb:b2:06:fb:aa:e5:3f:8c:70:4b:
87:39:6a:7c:8c:2f:d4:d6:3c:f4:aa:62:a0:50:eb:30:af:23:
5f:00:1a:b6:d4:bf:03:93:3a:0c:61:eb:3c:1c:8d:eb:ca:27:
48:87:df:09:9e:14:1c:61:6b:fd:e9:ed:3f:3f:6e:48:71:38:
cf:c7:5c:06:d4:34:7b:6f:1d:f0:4e:e2:95:18:c8:de:17:18:
b5:df:79:11:75:73:69:8e:44:e8:5c:11:88:15:b6:67:59:37:
ad:03:44:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:37:10 2025 by rpki-client