Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lnRGaIQ9ej0CdoZ6yVn6haubq1U.roa
File: lnRGaIQ9ej0CdoZ6yVn6haubq1U.roa (raw, json)
Hash identifier: pgLKZxR4mrKW4xWAnFySrXR/xOFI0+eLn6BRVXGsWtQ=
Subject key identifier: 96:74:46:68:84:3D:7A:3D:02:76:86:7A:C9:59:FA:85:AB:9B:AB:55
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01889BFBD34A18A3410CC99C7DAB38196489
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lnRGaIQ9ej0CdoZ6yVn6haubq1U.roa
Signing time: Thu 08 Jun 2023 17:09:12 +0000
ROA not before: Thu 08 Jun 2023 17:09:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9b:fb:d3:4a:18:a3:41:0c:c9:9c:7d:ab:38:19:64:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 8 17:09:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=96744668843d7a3d0276867ac959fa85ab9bab55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5a:74:94:65:1f:5e:c4:f4:74:6a:05:6f:ef:
01:8c:6c:75:8c:7f:c6:f9:f1:42:d3:8c:94:f1:79:
dd:51:f2:f1:85:81:88:42:4f:54:2a:47:16:14:8c:
45:f1:94:c2:39:56:21:5c:43:7b:a1:39:a5:ea:db:
b7:7d:1c:e3:e6:78:46:24:ca:30:ee:46:6c:5d:d3:
37:cd:6f:70:1c:a9:2d:5f:2d:da:59:a7:3a:ce:f8:
84:5a:8a:13:46:2b:f5:2b:79:bd:5a:7f:90:55:8f:
d1:b0:0d:12:ae:fd:41:20:9b:0e:20:77:1e:30:e2:
da:f5:f5:e2:74:9d:fa:07:3b:62:24:d8:c9:7c:2a:
0d:2e:38:da:4d:42:89:7b:bf:de:d4:99:7e:92:57:
e1:2b:70:15:2d:4b:9f:25:ad:bd:32:a9:05:a3:9f:
ab:dd:8e:dd:b8:18:23:63:58:1a:40:f5:db:28:67:
84:af:e8:6b:de:86:95:47:b3:73:d2:fa:a3:4c:01:
34:f6:e0:92:59:8a:90:b8:ec:dd:c7:cd:77:3a:76:
c5:de:4b:e5:02:cf:d7:eb:15:37:6d:d3:55:ac:c4:
83:3c:6c:0f:94:2d:e6:e2:03:0e:92:31:3f:47:ed:
c4:51:d8:f2:14:58:da:ef:ea:62:cf:56:25:b0:62:
8c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:74:46:68:84:3D:7A:3D:02:76:86:7A:C9:59:FA:85:AB:9B:AB:55
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lnRGaIQ9ej0CdoZ6yVn6haubq1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
99:99:bd:6e:e5:7b:1d:01:ca:1c:7e:e0:d0:0a:46:3d:7c:ec:
fd:15:45:c8:18:34:03:20:e2:c0:16:a9:3d:1e:36:91:bf:65:
fe:2c:c1:9c:76:37:a4:33:fd:b9:85:c3:29:fd:c1:a7:33:fd:
35:71:d2:b9:ac:0b:b9:85:4d:f0:d8:f4:d1:2d:59:1c:f4:24:
6c:33:ab:24:48:f1:cf:09:eb:cf:f2:f0:ff:ce:aa:70:83:06:
07:5a:c9:74:8a:66:a0:c5:4a:26:81:5e:31:0c:84:73:41:9a:
12:6f:bf:c0:54:8b:ed:06:00:09:55:df:78:20:93:d5:9a:ec:
72:fa:5f:b7:e6:05:81:69:41:f8:dc:34:75:bf:18:d7:44:10:
c2:08:b6:52:f2:69:2c:4f:ed:28:ff:36:e9:a8:63:b3:aa:b2:
96:1f:53:29:3b:c0:7e:1e:b8:0a:08:e3:6f:8c:0f:9e:19:27:
12:73:a0:8c:26:ec:ae:42:3f:63:d5:1c:ff:34:a9:ce:c8:a0:
f1:83:41:e7:b5:72:e7:50:ca:f6:99:16:57:4a:ee:6a:ab:3d:
cf:d4:c8:8b:87:d9:41:8e:56:fc:40:f8:6a:a4:a8:b3:37:79:
59:cf:b6:e2:27:7d:c8:6c:38:bb:dd:22:55:47:54:e7:e6:98:
76:b4:27:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 14:51:08 2025 by rpki-client