Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ll97OxNDN9jtd0u9Ca8PzQDnpF0.roa
File: ll97OxNDN9jtd0u9Ca8PzQDnpF0.roa (raw, json)
Hash identifier: 1MvRN1gVC6otxxIVlbXIsab9ffb9lXi3Gm1O35i9nTs=
Subject key identifier: 96:5F:7B:3B:13:43:37:D8:ED:77:4B:BD:09:AF:0F:CD:00:E7:A4:5D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A0C383621CF10DBEB14C96D2311842481
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ll97OxNDN9jtd0u9Ca8PzQDnpF0.roa
Signing time: Sat 19 Aug 2023 05:15:25 +0000
ROA not before: Sat 19 Aug 2023 05:15:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:0c:38:36:21:cf:10:db:eb:14:c9:6d:23:11:84:24:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 19 05:15:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=965f7b3b134337d8ed774bbd09af0fcd00e7a45d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:76:e6:21:8f:fe:4e:48:93:45:ee:96:90:a7:
f0:67:bf:6c:1d:bb:8f:78:86:62:e7:12:40:7a:66:
88:f6:73:12:73:f8:97:5e:10:65:9e:43:19:c2:06:
31:76:c3:65:90:fa:85:4e:93:09:b4:08:ea:1e:c7:
3f:fc:57:da:52:29:90:2f:eb:a6:a9:90:29:d6:2d:
19:cb:5a:1a:21:7c:71:b1:d3:cb:e1:65:d4:d8:cb:
0c:3d:54:6a:64:36:91:98:80:84:57:73:55:d7:d4:
65:a1:3a:cc:c0:7c:68:9b:bc:2f:b0:5f:cd:c0:c1:
a9:16:92:e8:2a:d6:d7:c8:5a:da:28:c2:45:30:1c:
33:8b:a3:ca:2e:e7:00:3f:1b:7a:3e:e2:7c:c3:ad:
cb:43:c5:e3:fe:8c:79:bf:24:1f:dc:45:8d:b4:d3:
04:69:1f:9e:31:83:e5:0b:a4:b2:94:2f:c7:d3:f5:
a2:3a:01:5c:52:f3:bb:bc:c8:8d:e8:55:43:1d:fb:
13:d2:5a:9c:77:67:e0:11:3d:11:aa:f3:0a:5c:e5:
c3:e2:b2:56:57:32:c1:bc:e2:30:b6:b5:a8:4d:1a:
20:43:bc:24:83:40:4b:57:12:e3:91:47:cb:cf:97:
18:84:25:46:d1:53:56:37:3c:7a:de:02:27:eb:66:
db:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:5F:7B:3B:13:43:37:D8:ED:77:4B:BD:09:AF:0F:CD:00:E7:A4:5D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ll97OxNDN9jtd0u9Ca8PzQDnpF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5e:02:4c:2b:78:89:39:21:3d:ec:8d:27:55:c9:c1:13:f4:0c:
b9:4c:ac:0d:4c:4d:cf:18:e8:3b:a7:01:5a:74:e4:96:99:a5:
2d:ab:bc:d4:ea:cf:47:60:71:06:1b:3a:36:e2:ff:ad:57:8b:
1e:ea:bc:ec:0d:24:ca:36:4b:48:5d:e0:97:5f:d2:eb:4e:4e:
48:de:53:d7:b3:11:2b:49:05:2c:dc:36:2d:58:8c:c9:81:cb:
9e:88:03:8f:1e:b4:00:08:42:f6:b0:31:c0:bc:26:2a:50:c3:
43:28:f5:09:f5:a8:bc:90:b6:fe:8b:17:26:cb:24:c3:f3:3f:
d3:ab:ff:db:b0:e3:5e:cf:52:61:54:28:12:04:68:1b:7e:45:
36:12:06:15:7b:0a:39:ac:e6:f0:1f:78:fb:ec:29:00:92:7b:
ca:27:59:0f:86:5e:3c:ea:2b:87:92:7b:4d:e6:85:f8:2b:ea:
ad:19:1a:0b:3b:09:cc:96:30:f6:2c:4d:ce:0d:df:a4:44:b7:
8a:20:dd:3c:8c:cf:f7:c3:50:5c:f3:d4:bf:f9:8d:bf:f9:e3:
fc:90:20:67:e7:39:3d:c5:26:08:0d:45:d9:4e:5c:f3:03:71:
fc:66:c1:2a:02:82:6a:99:cd:42:a5:29:6e:68:9e:69:57:82:
e9:b2:68:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:21:20 2025 by rpki-client