Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lZfXqK7Lw8Qi2WsxcclGzKGdNX8.roa
File: lZfXqK7Lw8Qi2WsxcclGzKGdNX8.roa (raw, json)
Hash identifier: S+U+NqLmm1fQZbk2WXxvWRbl5hp6NRMmW7csUQA+Zwc=
Subject key identifier: 95:97:D7:A8:AE:CB:C3:C4:22:D9:6B:31:71:C9:46:CC:A1:9D:35:7F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187E525A8697B9ABBB90DBDB04BEC11A555
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lZfXqK7Lw8Qi2WsxcclGzKGdNX8.roa
Signing time: Thu 04 May 2023 05:04:23 +0000
ROA not before: Thu 04 May 2023 05:04:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:187:e525:761e/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e5:25:a8:69:7b:9a:bb:b9:0d:bd:b0:4b:ec:11:a5:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 4 05:04:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9597d7a8aecbc3c422d96b3171c946cca19d357f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:61:14:49:91:ff:d4:d5:51:e4:b1:81:d8:4f:
a0:61:d2:4a:ab:e9:eb:f5:f5:7d:a3:17:07:7b:0d:
92:70:f2:bd:14:82:ba:2e:23:f8:7e:3b:0a:eb:6f:
0a:69:c2:ec:e5:e0:2d:54:e0:5d:4d:39:98:0a:28:
85:a5:64:fe:83:ed:99:d5:a5:c3:23:2e:43:0a:c8:
d0:45:ae:82:a5:19:8c:06:1c:1e:40:be:65:25:99:
a4:d0:01:8a:6f:70:04:c3:d2:78:7f:39:d8:ac:22:
cf:40:ff:ba:f3:78:58:3d:cf:7b:7e:48:35:ac:fb:
4f:e4:b8:eb:a7:f8:e2:71:7b:31:43:cc:e4:d0:28:
3f:95:85:f1:c2:89:92:41:2b:f1:fe:d3:39:5d:0b:
12:bf:e6:6b:8d:19:74:77:a1:1f:a8:79:df:83:87:
a9:31:06:d9:86:2f:83:1a:4a:32:e4:50:ff:c4:f0:
b8:fc:b8:a8:9f:90:15:13:61:4f:7a:17:0e:f3:f0:
6f:a3:ef:39:8e:cf:3b:a9:3c:0e:8b:fd:ad:fa:c5:
15:60:8b:1c:10:0e:2c:df:66:e5:89:31:cd:99:24:
90:a8:58:b3:75:2b:a6:1c:62:38:73:69:b5:f8:c4:
7b:e4:88:87:8f:94:0e:31:f8:67:f8:61:54:d9:4b:
d9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:97:D7:A8:AE:CB:C3:C4:22:D9:6B:31:71:C9:46:CC:A1:9D:35:7F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lZfXqK7Lw8Qi2WsxcclGzKGdNX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
32:09:2b:a7:bc:ea:87:7c:aa:e6:2f:87:28:d7:03:ac:ab:1b:
f3:7a:51:86:ca:d9:5a:30:f1:d3:cb:cd:65:eb:ee:5a:fd:1d:
54:00:ff:9d:01:1d:9d:8f:23:59:4d:34:39:e2:6c:76:aa:b5:
63:01:36:a1:d6:16:05:85:45:e5:ba:5c:89:10:30:28:30:52:
ac:b2:ec:45:0f:54:65:fb:2e:59:12:be:25:a7:e3:7b:a2:de:
84:40:b9:6f:75:88:5c:03:2f:ed:0f:fc:8a:34:69:09:5f:81:
32:7a:02:b8:b2:d8:46:37:35:60:a1:8d:5c:7c:d5:92:58:96:
23:39:f2:4c:06:4a:b4:77:8b:f4:56:b7:2a:1b:8a:30:10:76:
25:a9:4c:dc:66:6e:ed:7b:ed:2f:a5:31:b9:a7:d7:52:2c:c6:
7e:86:ac:22:6e:b6:80:7b:f7:f0:c5:69:d0:ed:2b:40:d3:2b:
3f:1c:e1:2d:6e:93:30:bd:d6:15:68:9b:8d:a4:3e:58:5d:1c:
85:e7:a4:3e:22:c2:02:5b:f4:f0:da:44:56:2c:ee:21:de:9d:
aa:5c:2f:c6:3b:ea:a5:1d:2e:68:1e:3a:1d:52:21:d4:01:67:
86:c3:6d:04:cf:1d:54:85:51:cc:aa:27:b0:1a:4e:e2:c1:c3:
86:e6:03:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 12:54:14 2025 by rpki-client