Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iIbrTcoFbqsljgC77m0OFyx6b0c.roa
File: iIbrTcoFbqsljgC77m0OFyx6b0c.roa (raw, json)
Hash identifier: 2OFjyY4+4K3EmPLAdNyNjmBcahe4u/O67Nb+sKqlMWE=
Subject key identifier: 88:86:EB:4D:CA:05:6E:AB:25:8E:00:BB:EE:6D:0E:17:2C:7A:6F:47
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01893B35850C9482A08844EAAD7A2D5D9D92
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iIbrTcoFbqsljgC77m0OFyx6b0c.roa
Signing time: Sun 09 Jul 2023 15:11:50 +0000
ROA not before: Sun 09 Jul 2023 15:11:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:3b:35:85:0c:94:82:a0:88:44:ea:ad:7a:2d:5d:9d:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 9 15:11:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8886eb4dca056eab258e00bbee6d0e172c7a6f47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:70:a3:da:3e:ee:90:cb:50:4b:68:fe:a3:49:
07:51:df:4f:c7:cb:00:37:ef:93:7e:2e:f7:f9:7a:
b0:f8:e9:85:78:dc:35:b5:d1:2f:d9:1b:c8:32:77:
e0:6d:db:70:43:88:50:e8:82:26:46:47:d2:fb:bc:
05:2c:f4:18:90:63:27:4e:01:45:6f:a9:ea:2d:66:
42:2e:e2:6c:fd:1a:7e:4a:fc:c6:41:f4:5d:f9:78:
25:5b:e8:36:c8:c0:cb:e7:f4:5e:c9:d0:d8:4e:03:
f3:76:a9:65:de:9c:b7:cd:29:09:63:d6:18:2f:b4:
af:0a:18:f8:54:ea:13:64:63:d5:4c:b2:2a:86:3b:
4a:86:5c:bf:90:25:fa:71:15:cc:6b:33:ea:9f:35:
66:bd:d5:d1:31:8f:10:9d:21:e4:54:d1:d6:7c:3c:
e4:ed:e5:d9:d5:bd:d2:83:8f:1a:aa:ae:e4:73:3d:
df:25:3a:db:9a:19:d3:3f:b6:c8:64:57:e0:f4:66:
fd:81:ba:7f:23:68:15:1a:ec:eb:96:01:2e:02:17:
ca:bd:4e:25:e5:41:ac:bb:3f:53:1c:cf:97:da:66:
c2:4e:63:d9:7f:0d:6f:e1:a3:cf:26:b9:28:19:32:
35:79:e7:3d:12:f9:3d:44:00:5f:d8:dd:8f:66:fa:
dc:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:86:EB:4D:CA:05:6E:AB:25:8E:00:BB:EE:6D:0E:17:2C:7A:6F:47
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iIbrTcoFbqsljgC77m0OFyx6b0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
54:5b:76:c2:96:9d:49:ee:e5:b0:ad:b9:25:d2:60:88:24:ff:
e8:db:24:e8:a8:fb:e1:0b:b9:b4:d6:a2:51:1e:82:5b:a5:f6:
0f:91:8d:f0:56:8b:42:b0:18:d6:ed:b5:81:4e:4d:f1:d7:81:
84:df:d4:5c:22:be:c5:3a:63:2f:b5:20:75:d7:35:d6:16:f4:
66:fd:b5:cf:d7:20:96:12:82:a0:af:60:70:76:a3:78:90:1a:
5d:36:29:34:f1:69:7a:1b:19:67:d9:c7:50:a0:a0:db:58:cf:
90:7d:16:fe:aa:fd:9f:54:81:9b:13:7f:f6:fa:9e:d8:36:e7:
d9:3e:1a:06:03:ad:ae:8f:62:d5:a6:29:64:f1:ac:52:58:43:
71:f6:d3:d3:0d:6d:2a:ac:0c:63:e3:49:26:e1:6d:13:73:98:
c9:9c:33:ac:2a:bb:64:ff:c7:a0:98:2d:0c:cd:ec:70:c2:6c:
d4:7c:04:b4:71:78:c7:ff:34:13:dc:ed:b7:33:cb:47:92:a4:
f7:22:1e:c4:53:ac:a4:7f:ea:c4:ed:2e:c1:fb:2c:e6:03:5f:
af:3a:75:0d:c5:45:cc:c3:8f:b2:98:32:0e:2f:00:19:ad:f4:
b9:3e:2d:6f:76:0b:48:ec:89:4b:9e:7d:54:72:fe:6e:37:ac:
99:7b:9d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:35:23 2025 by rpki-client