Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/d_9X3ZmgiOL2TZ2m3isQXzv9ZXs.roa
File: d_9X3ZmgiOL2TZ2m3isQXzv9ZXs.roa (raw, json)
Hash identifier: 2gZSHQWRPDpiTKJ7OdPfRlvJMg8DUur+w1WDFhNxI18=
Subject key identifier: 77:FF:57:DD:99:A0:88:E2:F6:4D:9D:A6:DE:2B:10:5F:3B:FD:65:7B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01878CC657FA1225582D76A716A2CF29952C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/d_9X3ZmgiOL2TZ2m3isQXzv9ZXs.roa
Signing time: Mon 17 Apr 2023 01:13:41 +0000
ROA not before: Mon 17 Apr 2023 01:13:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:8c:c6:57:fa:12:25:58:2d:76:a7:16:a2:cf:29:95:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 17 01:13:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=77ff57dd99a088e2f64d9da6de2b105f3bfd657b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:95:60:bf:dc:6c:0e:1a:ea:ea:a1:49:ae:24:
5c:d3:17:44:bc:b7:86:4e:26:7a:07:e6:22:ca:f3:
3d:11:f8:d6:05:f1:14:10:3f:13:a8:01:60:ee:52:
36:f2:f9:7c:0a:89:f4:d9:05:a0:61:4f:c2:2e:d8:
2c:79:ad:d3:03:f2:f7:a9:3a:e3:59:b4:43:4b:af:
57:0b:6f:61:df:3e:e2:90:cd:88:9f:f1:f2:27:2c:
93:f2:8d:b7:f1:13:ce:33:4d:35:c0:b8:b3:98:5f:
a9:3c:cf:44:cb:ee:eb:27:d0:fd:73:7c:b2:23:6f:
a8:2b:a2:e6:8d:86:1e:c0:61:30:15:a8:45:fa:2f:
90:e6:55:37:39:03:fc:d4:93:51:85:5b:86:9b:23:
e7:2d:39:09:5c:b8:b3:97:7c:90:13:ef:7d:be:73:
ff:30:17:fb:fe:92:bc:af:59:38:5b:79:37:8c:3c:
e9:94:b1:ce:17:63:52:61:c9:15:eb:b4:9c:5b:ae:
9d:5b:f6:5a:66:f3:80:b5:8b:b5:b5:89:16:39:d1:
28:c7:87:2f:6d:55:b2:74:61:94:da:91:4a:f3:f8:
65:cd:52:9a:e0:78:79:30:e3:be:f1:af:cc:8a:2c:
c0:46:5a:cb:c0:70:0b:22:0b:67:86:f4:d0:62:2e:
83:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:FF:57:DD:99:A0:88:E2:F6:4D:9D:A6:DE:2B:10:5F:3B:FD:65:7B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/d_9X3ZmgiOL2TZ2m3isQXzv9ZXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
31:3a:10:1b:ff:2f:ba:f6:4e:fb:26:54:65:d4:95:53:1c:f0:
6b:74:da:84:ad:3e:cf:3d:fb:b8:a8:d7:43:72:eb:7a:3a:02:
be:c3:32:7f:70:17:ee:8b:bd:1f:08:f3:5d:57:28:3f:a7:f3:
73:85:7b:da:d9:c7:55:5b:f0:1c:77:d6:41:e9:56:cb:08:41:
73:68:34:5f:bd:72:48:cc:bd:3d:52:b0:e0:39:69:5a:c6:f1:
8a:87:20:76:46:71:a3:82:48:b6:57:a5:b5:8f:4b:60:8c:f6:
76:7b:fa:30:54:04:59:c8:41:74:58:06:e6:47:b4:09:fb:46:
82:65:6e:c0:d8:d5:0d:9b:f7:42:8e:8d:ff:6f:ed:f3:03:c2:
b0:f2:78:72:8c:b5:be:db:ab:65:b2:62:7a:8a:6b:03:55:ab:
e9:11:88:dd:7d:02:1f:56:d8:21:2d:d6:ce:e4:59:64:c9:ad:
42:bc:93:3c:b5:ba:06:62:57:ce:10:15:a6:6c:41:d8:0d:03:
39:9b:8f:8a:53:10:1e:4f:27:4e:61:26:db:25:ea:dc:e2:8e:
e2:19:08:a1:29:1c:55:33:8d:7d:4a:92:1c:65:ac:af:d4:dc:
5a:a0:ab:19:e6:62:e2:fa:84:af:ea:0c:80:a9:81:67:26:dd:
bb:52:f9:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:22:22 2025 by rpki-client