Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dUpethXKUm4rlgmdVSitZ-L9hIQ.roa
File: dUpethXKUm4rlgmdVSitZ-L9hIQ.roa (raw, json)
Hash identifier: bmRYlbC7n/yrdXsBq0823x64nucxDtfxj8qwFSWRbGo=
Subject key identifier: 75:4A:5E:B6:15:CA:52:6E:2B:96:09:9D:55:28:AD:67:E2:FD:84:84
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01898BDD0B453B65A55E9C7EFF4F07D00F27
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dUpethXKUm4rlgmdVSitZ-L9hIQ.roa
Signing time: Tue 25 Jul 2023 07:04:26 +0000
ROA not before: Tue 25 Jul 2023 07:04:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:189:8bdc:f3f0/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:8b:dd:0b:45:3b:65:a5:5e:9c:7e:ff:4f:07:d0:0f:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 25 07:04:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=754a5eb615ca526e2b96099d5528ad67e2fd8484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:00:85:1c:eb:77:b9:c8:f3:50:8a:01:c5:12:
4d:7d:85:52:16:fe:5e:50:2c:ff:78:8a:04:60:03:
9d:b3:22:64:48:b2:e0:df:a5:6b:13:2d:c9:1f:f2:
38:0a:60:e9:42:43:4e:fc:cd:8e:fd:6e:e8:e8:83:
9e:fd:1b:20:5f:e3:a5:85:74:88:9a:74:e9:4e:22:
8e:76:69:44:0b:89:2f:fb:00:36:2d:6e:ca:25:4a:
39:ef:0b:91:de:5c:ac:85:08:fe:a1:f4:a4:8d:14:
e3:5d:58:0d:db:bf:c0:9f:74:f7:3a:de:f6:69:76:
21:14:89:8a:2f:44:8e:d1:b2:2b:6f:2e:33:7e:74:
ce:94:2c:9b:f6:25:89:ff:0e:51:aa:82:87:af:81:
dd:ca:8d:74:36:67:42:4d:95:f1:a1:03:c0:59:30:
38:86:77:b8:97:d6:56:af:06:98:8b:06:8e:33:50:
d0:34:62:e8:93:be:c5:d4:e1:61:7a:de:7f:2c:95:
02:d4:01:c5:ba:a8:bb:c0:60:14:55:61:73:76:cc:
99:e1:dc:98:d8:e1:c8:2e:4a:66:96:cd:a7:c1:60:
f9:f2:8d:10:06:f9:fc:61:c9:1f:d3:91:29:e7:64:
d9:8a:5f:f2:29:7c:f4:75:8c:57:10:a5:38:2a:f3:
cf:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:4A:5E:B6:15:CA:52:6E:2B:96:09:9D:55:28:AD:67:E2:FD:84:84
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dUpethXKUm4rlgmdVSitZ-L9hIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3d:ca:43:4c:f0:da:cf:5b:06:31:34:9a:33:e8:be:ae:0a:7f:
c8:cc:c4:fc:c4:b9:3f:d4:5f:92:75:7e:8b:8d:dc:db:c3:1c:
d7:cf:d6:e0:d3:70:09:06:b8:49:5c:2b:be:f2:d4:22:62:ad:
f0:4f:04:c9:bb:2f:33:58:dc:22:e3:e9:17:3b:2d:94:e1:42:
dc:00:71:d6:c9:d9:cb:21:e4:27:84:98:30:ec:f8:8e:f2:78:
33:18:b3:fb:60:f2:ba:0c:27:b7:01:88:bb:29:74:0f:9c:79:
ab:1e:76:bd:f2:11:1f:82:af:af:e9:19:fb:47:cf:ed:bd:44:
f6:d4:1a:01:dd:f1:ac:75:b9:3a:6b:a9:28:70:2e:87:fb:f0:
f7:e1:75:aa:d6:63:e4:e9:94:9e:f3:c3:38:ff:46:f8:7a:92:
da:b3:69:a2:7e:8b:38:0b:4b:58:39:d9:af:7c:8c:00:a0:51:
40:21:a7:5b:6b:2c:37:5b:11:09:61:b8:43:0a:a3:00:d8:34:
49:8a:aa:74:31:7b:27:fa:b3:64:77:2a:0c:86:a3:44:7f:b9:
ee:1e:8d:e9:20:d4:73:70:3d:36:c1:30:11:08:49:44:26:24:
b8:52:a6:e8:d8:ad:2a:70:17:72:25:04:d1:0d:b8:15:22:3e:
22:08:38:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 09:48:23 2025 by rpki-client