Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/l6ky717GZpJMzequeoLvvTAiSJ0.roa
File: l6ky717GZpJMzequeoLvvTAiSJ0.roa (raw, json)
Hash identifier: jjAVTYXsl1Ek+w47dGHvsEy+8EnyfaGQu8iADQg2VQM=
Subject key identifier: 97:A9:32:EF:5E:C6:66:92:4C:CD:EA:AE:7A:82:EF:BD:30:22:48:9D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018734C45390C96F4B110CD9CD887ADD5C00
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/l6ky717GZpJMzequeoLvvTAiSJ0.roa
Signing time: Thu 30 Mar 2023 23:04:54 +0000
ROA not before: Thu 30 Mar 2023 23:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:187:34c3:b94c/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:34:c4:53:90:c9:6f:4b:11:0c:d9:cd:88:7a:dd:5c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 30 23:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=97a932ef5ec666924ccdeaae7a82efbd3022489d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:1c:3f:8f:df:be:c7:31:3e:8b:0b:0d:8c:6a:
8d:81:5d:88:31:ca:63:a6:07:0a:de:25:12:11:2f:
80:c1:42:29:b5:75:10:fa:fd:6a:35:76:d0:21:81:
f8:2d:b9:f0:0b:3e:8b:0b:d8:03:07:c3:db:23:35:
19:f9:8e:b5:cd:cd:61:3f:2f:ac:bb:98:00:d4:76:
7b:ca:ec:ac:39:3d:cf:f2:dd:ff:c0:17:26:1f:07:
53:a8:b4:0d:78:52:a7:e7:25:99:d8:58:d7:a4:00:
be:ef:f6:a0:de:34:ce:1c:28:0c:f5:59:09:b1:3e:
ad:b5:58:12:60:d3:05:ed:e5:1e:aa:8f:d8:e9:3c:
84:15:b7:7f:ff:2f:f9:9b:80:5c:dd:0b:c2:33:b3:
4c:84:16:1e:c1:25:f0:32:7a:6a:a2:8f:cd:9a:fa:
49:0b:6f:79:8b:29:da:b8:64:d2:d2:d5:f6:18:39:
e6:d2:ec:2f:5d:e3:cb:7e:85:00:09:62:89:45:05:
3c:71:a3:69:56:fc:64:49:7d:96:21:67:bf:16:19:
91:f6:56:29:c0:2d:b4:de:64:32:b0:7f:f7:59:a3:
8e:d1:0f:ab:8e:0f:33:92:74:f7:80:95:07:9d:60:
61:20:17:96:f5:d3:15:11:f5:40:ae:30:1f:61:7b:
8e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A9:32:EF:5E:C6:66:92:4C:CD:EA:AE:7A:82:EF:BD:30:22:48:9D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/l6ky717GZpJMzequeoLvvTAiSJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3c:bc:01:e2:77:24:c6:ec:6d:83:fa:84:e0:b8:aa:7c:b3:14:
c8:76:b7:72:fc:ef:d5:56:70:fd:95:31:d2:e6:0b:cc:28:0f:
c0:8e:d0:25:59:13:82:05:25:48:82:6c:58:f0:fa:b3:84:ae:
cc:79:70:3b:f1:ab:96:43:10:9f:79:4d:6d:5c:a4:9b:76:23:
f4:52:96:7b:9d:d7:cd:ff:a2:c3:43:ee:fd:d7:73:c6:c0:6d:
90:4a:77:33:f1:bf:c7:52:5d:d3:5d:9b:b4:64:f5:ad:26:29:
7a:b1:ca:c6:69:8b:59:ef:a2:63:d5:fc:19:1a:d2:c5:bf:89:
59:87:06:3d:58:88:71:24:32:61:89:4c:09:f4:c3:91:42:5e:
8e:29:df:09:f6:b9:8a:88:eb:fd:9f:87:05:1b:3a:88:3c:e8:
dd:73:b5:32:5a:e6:4b:16:7e:38:59:34:4e:80:32:e6:c5:ae:
87:00:a7:f3:39:04:27:9d:97:07:8e:e7:0e:a6:a1:ae:4b:f3:
15:13:b9:b1:61:53:88:b2:f1:93:fe:28:7d:c3:e8:b3:75:a7:
bc:43:38:ad:46:3e:e6:b2:53:20:ee:bc:b3:31:b1:a8:5d:59:
9d:70:5a:22:f5:47:fe:69:15:6b:52:2f:27:c8:17:1a:57:51:
46:46:86:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 04:21:35 2025 by rpki-client