Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lG-d_91moak7mxFTogtNHSjtJ0Y.roa
File: lG-d_91moak7mxFTogtNHSjtJ0Y.roa (raw, json)
Hash identifier: y0dGIDVtaesAWoORQYd43uGTak/ZFOe8bO70ZVGHYD4=
Subject key identifier: 94:6F:9D:FF:DD:66:A1:A9:3B:9B:11:53:A2:0B:4D:1D:28:ED:27:46
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186A838366A28873131D95FC4054692FFC6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lG-d_91moak7mxFTogtNHSjtJ0Y.roa
Signing time: Fri 03 Mar 2023 16:05:01 +0000
ROA not before: Fri 03 Mar 2023 16:05:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:a837:a829/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a8:38:36:6a:28:87:31:31:d9:5f:c4:05:46:92:ff:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 3 16:05:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=946f9dffdd66a1a93b9b1153a20b4d1d28ed2746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:41:82:de:80:1a:34:fe:3e:54:b6:96:3a:28:
fb:94:ab:9a:f2:ec:0d:bd:c2:c9:f7:de:7f:98:63:
39:0d:11:c6:c5:9d:56:43:68:01:ed:bb:fd:22:e8:
24:85:72:45:62:9a:55:ab:ed:21:59:0c:25:2a:00:
ec:22:ee:2e:07:7d:9f:0c:5a:90:54:f9:e5:22:9e:
ed:9f:9e:72:c3:ce:7d:9f:8f:59:d0:e1:a3:7b:c9:
29:4d:ea:de:9a:43:67:29:78:c2:7e:52:1a:a4:0f:
ef:eb:f4:b9:12:f2:20:d8:44:fe:74:f1:82:be:79:
7b:3c:58:ad:52:bf:ff:ec:de:56:92:9b:2a:b6:52:
b6:0a:01:3e:ea:0b:d0:0a:6b:ab:45:4b:ad:1c:5a:
07:d3:9d:4e:a7:a7:53:58:b7:63:25:1f:68:ef:34:
c1:de:fe:0f:31:f2:17:7b:d4:ac:50:83:79:2e:59:
7b:80:17:db:b0:7b:93:d1:62:ac:d6:21:fe:b9:63:
1b:67:03:db:fe:e8:9b:ab:e9:55:5a:dd:18:18:1e:
02:7a:c4:62:df:7c:ea:33:bd:2f:0e:df:89:70:4a:
15:b4:48:ef:95:7f:28:82:04:28:b4:2b:c6:78:13:
3e:71:ca:20:1d:6e:c3:19:56:ca:e9:7b:61:de:8c:
67:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:6F:9D:FF:DD:66:A1:A9:3B:9B:11:53:A2:0B:4D:1D:28:ED:27:46
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lG-d_91moak7mxFTogtNHSjtJ0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b5:4c:43:de:cb:f7:66:d5:a0:cc:6c:2b:00:99:fb:71:54:9a:
19:b0:76:10:08:18:47:e5:23:c7:c4:8c:cf:ef:c1:0f:34:c0:
1d:08:7a:14:10:8e:39:1d:27:f8:6d:74:4e:6f:a8:31:57:24:
c3:c9:08:aa:79:82:3e:76:f9:09:fe:cc:d8:d1:03:f3:77:67:
53:0c:29:3c:ac:85:6c:dd:04:3a:58:a9:fe:24:12:31:bf:05:
f1:32:3f:7e:b2:08:a6:93:ac:ca:0f:99:2a:87:d2:18:b5:81:
6b:e0:5c:65:ac:f7:f9:85:ea:11:8d:27:f7:37:6a:9a:d7:1d:
57:61:76:e4:af:7b:ae:5e:b2:1a:39:f0:b4:48:d5:2c:a0:54:
d5:0b:4a:fd:0d:48:e9:d4:98:f9:18:91:a3:5a:e0:33:5b:19:
1e:1b:85:c9:d3:c4:be:2e:5e:86:4e:c8:28:e8:20:df:4c:81:
29:3f:5a:37:6e:a9:8e:1f:73:de:41:23:7a:86:d0:1a:c0:e2:
60:f2:ee:76:9f:99:57:2e:98:2d:a5:9a:ec:82:79:df:40:d6:
b6:4e:f7:ab:fc:5d:93:62:35:a3:9d:5f:1b:d6:73:b5:cd:3e:
1a:44:74:07:d7:35:c7:43:1d:b8:b9:78:6c:84:26:c7:c1:ea:
d2:29:f3:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 15:21:22 2025 by rpki-client