Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lGrUUAXtFJ12w82FEHZkSf4yTLU.roa
File: lGrUUAXtFJ12w82FEHZkSf4yTLU.roa (raw, json)
Hash identifier: 6/tvWt4Uc801d8b8Lg1xnQiiVBdqayWGotP1bcoDXWU=
Subject key identifier: 94:6A:D4:50:05:ED:14:9D:76:C3:CD:85:10:76:64:49:FE:32:4C:B5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01889E1D7B5EADC2A64149EFD3BF0343A9BD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lGrUUAXtFJ12w82FEHZkSf4yTLU.roa
Signing time: Fri 09 Jun 2023 03:05:12 +0000
ROA not before: Fri 09 Jun 2023 03:05:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:188:9e1d:27ee/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9e:1d:7b:5e:ad:c2:a6:41:49:ef:d3:bf:03:43:a9:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 9 03:05:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=946ad45005ed149d76c3cd8510766449fe324cb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:18:0c:98:44:36:13:49:e7:2e:7f:cd:0c:4c:
06:db:76:9b:2b:1f:0c:b0:c4:5f:3b:97:6f:b5:98:
6f:a9:1c:5a:a7:4d:39:69:b1:c3:af:e2:a8:a5:7a:
2a:6d:bf:ec:6f:10:fc:96:7c:22:24:62:20:d1:51:
1e:8a:bd:05:59:d3:b7:3a:45:57:e6:c9:da:f2:81:
e6:5e:d0:97:1d:97:33:f7:22:dd:c0:9f:a2:b9:ae:
a1:dd:aa:3d:b7:a8:7a:10:cc:45:de:a9:ea:80:17:
85:fc:ae:90:00:72:74:ae:78:57:cf:77:6a:b1:d9:
3f:e3:f7:77:7f:48:91:ed:c5:d4:13:f1:bb:68:89:
b5:70:85:8f:5c:10:05:d3:6e:6d:27:a1:99:09:6f:
af:9c:8c:d5:07:f8:f7:ee:05:01:c9:ed:0f:7c:71:
1e:b8:d1:bf:d8:c0:7f:11:b4:62:c1:0c:ec:35:e4:
2a:c5:a6:ec:9d:e7:29:e0:31:17:1e:48:84:c0:bf:
43:e7:2f:9c:6c:3b:50:b5:ca:9d:f5:78:4a:e3:0e:
00:c7:3e:12:cf:d4:4c:6e:60:b9:90:19:7e:b4:0d:
31:b9:31:01:c1:ae:56:eb:a9:56:6f:4d:cc:ea:2f:
ac:0d:c6:cf:ff:af:f3:20:d8:8c:45:65:c1:d8:9f:
30:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:6A:D4:50:05:ED:14:9D:76:C3:CD:85:10:76:64:49:FE:32:4C:B5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lGrUUAXtFJ12w82FEHZkSf4yTLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
60:2d:09:b2:ed:a6:d9:47:30:c5:58:97:84:b1:5c:61:23:3a:
45:eb:b5:9a:4f:ad:5c:10:99:6f:38:39:c2:1d:2e:8a:e6:74:
4f:dd:64:29:e7:f3:8d:04:68:2f:66:d7:f1:df:05:01:fa:40:
8c:01:d5:4a:af:54:7d:ca:ee:2a:b6:f9:c3:89:a7:66:c6:77:
8f:a6:b9:96:06:ad:c0:d2:ee:75:48:a0:f6:0f:85:ce:5d:26:
64:c6:44:60:5e:f8:c1:b2:3c:17:15:e9:57:fe:13:9d:9b:6a:
92:f2:a8:a4:df:c0:ac:79:98:67:f3:7d:cc:7a:9f:95:e5:47:
da:d2:ba:b9:ac:f8:fa:3a:2f:4a:b9:c9:90:4e:6b:d4:2b:fd:
2d:02:c2:4f:21:3a:dc:a4:ab:30:de:ee:3f:81:00:b8:47:ed:
38:04:d3:03:5b:ee:a0:2e:10:77:58:00:75:5d:30:8f:6e:12:
e9:d2:ff:00:84:5a:d4:61:5c:b7:e4:74:d3:e1:e5:6c:c1:c2:
5f:7a:b2:a5:0f:37:59:8c:e1:81:a9:c4:ba:43:60:65:cd:ae:
f3:ae:43:5a:45:4a:cc:6c:96:04:f6:82:1c:e1:7f:3b:b8:1f:
1c:e4:87:cd:8f:a9:05:41:6f:98:56:10:82:b6:12:83:ea:d2:
0f:85:41:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 03:55:37 2025 by rpki-client