Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gYhF4Kz6eW_9dkFQxHsHwRkgE9E.roa
File: gYhF4Kz6eW_9dkFQxHsHwRkgE9E.roa (raw, json)
Hash identifier: CHNa+aVxeCBwcIjFDYpV7/H5oiaunKJTUpIgfLlu9Uc=
Subject key identifier: 81:88:45:E0:AC:FA:79:6F:FD:76:41:50:C4:7B:07:C1:19:20:13:D1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01893FBAC3A99635F67095E6E3981ECD963D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gYhF4Kz6eW_9dkFQxHsHwRkgE9E.roa
Signing time: Mon 10 Jul 2023 12:15:51 +0000
ROA not before: Mon 10 Jul 2023 12:15:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:3f:ba:c3:a9:96:35:f6:70:95:e6:e3:98:1e:cd:96:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 10 12:15:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=818845e0acfa796ffd764150c47b07c1192013d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:57:a7:78:b1:45:3b:94:97:06:3e:95:f6:b2:
b2:1f:d2:8e:3c:f2:fd:0e:a3:bb:d6:3d:53:c3:27:
d5:4b:57:7c:dc:e1:25:cf:3a:dd:ec:9b:cb:d9:c6:
3c:71:85:76:4a:65:a4:2c:9c:89:29:53:0d:e3:f5:
55:66:bf:6a:28:04:dd:f7:8e:69:d9:c7:f9:bb:85:
53:a6:4c:f5:57:01:bf:49:5a:90:64:69:78:92:58:
7c:22:25:b4:b7:1b:ae:b9:8a:76:4f:d9:df:fb:31:
42:1a:14:4e:9c:eb:be:07:88:e6:e4:a6:2f:1c:dd:
fb:1c:8e:54:84:04:f1:b2:0c:2d:73:7b:67:1a:6b:
41:d8:f1:be:63:5c:c7:19:fe:2c:90:c5:d5:26:84:
65:c4:f0:ef:4a:f2:5f:ca:80:3e:8c:a8:a3:18:9a:
75:90:2c:2a:d4:06:97:ec:35:bd:ac:03:44:db:43:
33:ec:da:e5:e2:17:70:b0:55:94:eb:c4:87:ed:47:
81:5b:12:01:19:83:72:37:a9:31:bf:32:ed:4d:24:
92:8c:4c:be:fc:04:cc:28:91:4b:ea:2a:08:fe:b6:
c9:82:e9:85:b1:0b:df:33:31:8d:66:17:1c:ac:45:
b8:6d:7d:da:7c:d5:7e:a2:6a:6c:90:9d:3d:70:17:
f3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:88:45:E0:AC:FA:79:6F:FD:76:41:50:C4:7B:07:C1:19:20:13:D1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gYhF4Kz6eW_9dkFQxHsHwRkgE9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
07:84:65:c3:38:3d:ca:33:e9:98:d5:b6:3a:85:08:c1:b3:a0:
54:87:ff:f7:35:e1:5c:c3:a2:8f:fa:29:d2:5f:09:68:da:49:
c7:54:9c:28:6a:29:a5:d5:07:79:ec:7d:02:ba:29:73:2e:ae:
0c:61:98:c2:a6:d0:07:d7:a4:79:60:b7:ee:a0:f6:d1:4f:39:
26:95:9c:32:83:fe:a5:f7:e5:49:b8:86:92:71:25:d7:5c:c1:
ba:c2:fb:97:e1:4b:c0:1b:5f:55:d2:31:3f:78:60:83:b4:92:
f0:2a:97:a8:f1:8d:3c:8f:3d:1e:b5:74:87:b6:d1:37:78:9c:
9a:88:16:53:09:67:70:c9:05:6e:da:b2:ed:b2:f9:be:25:e9:
05:bb:e9:6b:bf:ef:6b:c1:ef:28:3d:a5:f2:b9:fc:85:0b:00:
10:c3:cf:6a:5e:47:74:04:db:c6:56:75:2b:19:6f:05:b4:cf:
41:dd:e8:38:c9:a4:10:ac:99:0e:2c:e2:49:13:ea:e3:cb:34:
3a:1d:e4:7a:f8:a2:15:ee:51:a7:76:6c:0e:33:54:90:08:3e:
07:1c:07:a6:08:64:96:91:b0:50:98:b9:cd:f3:d0:30:aa:14:
11:9e:e6:15:6f:41:07:24:cb:e3:4e:61:f2:68:20:41:70:6c:
22:80:c7:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 10:53:19 2025 by rpki-client