Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/m6cjB5oeNl5iApOg9xyKPXMLQ_w.roa
File: m6cjB5oeNl5iApOg9xyKPXMLQ_w.roa (raw, json)
Hash identifier: BE+P5/ilPipSncooL8ws5Hm3OOnXvgQtxITXwwF8rgU=
Subject key identifier: 9B:A7:23:07:9A:1E:36:5E:62:02:93:A0:F7:1C:8A:3D:73:0B:43:FC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018877F12481CFD4DD165B79A7F9E27BE48B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/m6cjB5oeNl5iApOg9xyKPXMLQ_w.roa
Signing time: Thu 01 Jun 2023 17:11:12 +0000
ROA not before: Thu 01 Jun 2023 17:11:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:77:f1:24:81:cf:d4:dd:16:5b:79:a7:f9:e2:7b:e4:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 1 17:11:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ba723079a1e365e620293a0f71c8a3d730b43fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:8e:6f:41:95:12:ba:f2:c6:a6:8c:76:25:a6:
74:71:f8:b6:3f:cc:8c:e9:74:c0:d0:e4:e8:ea:14:
06:8a:41:40:3c:f2:69:c7:5a:94:a9:19:55:75:eb:
30:77:9a:88:9f:d8:13:15:ff:69:86:7b:68:6a:91:
48:0c:0f:45:1a:01:24:df:3b:20:88:a9:51:e3:ae:
9c:80:50:2c:d7:33:b0:a9:bc:69:e6:1c:a2:0f:2d:
0d:3b:83:6b:6e:c6:1d:09:00:1b:09:00:63:67:88:
2d:54:42:92:83:6b:88:3b:1d:bf:d6:c0:10:59:33:
d3:0f:8a:86:0b:d2:2e:68:51:68:ab:03:75:21:db:
00:a9:8d:44:11:b0:8c:3f:80:7c:9d:fd:64:31:74:
be:ce:08:51:60:87:d2:eb:53:d7:5a:19:d3:c8:9f:
75:21:e2:5f:bd:bd:01:10:ae:56:c5:a4:9b:e3:de:
ae:f9:b6:c2:32:85:90:e6:cc:80:ad:34:26:ab:e7:
db:44:9f:59:97:24:b9:53:cf:94:c9:e4:34:ed:27:
92:76:0c:38:5b:8d:89:8d:e3:02:8e:e8:72:8c:42:
af:84:52:e2:50:3b:5b:4d:bd:c7:8e:50:24:fc:a9:
08:23:1a:65:2a:67:5d:42:d6:f9:cb:c9:16:d1:b3:
83:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:A7:23:07:9A:1E:36:5E:62:02:93:A0:F7:1C:8A:3D:73:0B:43:FC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/m6cjB5oeNl5iApOg9xyKPXMLQ_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2e:05:e7:11:c0:c2:95:06:8d:8d:7e:0d:11:a9:8e:ab:83:2e:
ec:8a:a0:8b:ce:62:ff:db:17:0f:4d:f5:35:1e:dc:e7:40:9d:
1f:c7:df:5d:20:e5:95:c2:95:24:51:0f:96:f9:de:81:4a:dd:
b8:c9:4e:2d:25:99:ee:95:0e:ae:65:ef:81:de:73:9d:b2:05:
24:18:b7:8e:d4:ba:08:c6:d6:86:48:14:d0:4c:06:7e:6e:8d:
1b:6f:94:ca:ec:45:66:6c:20:ae:f8:46:cc:7e:0b:22:5a:ad:
c2:57:fe:c7:8a:dd:c1:19:65:97:80:d8:0d:63:e1:63:76:6b:
9d:b2:b9:cb:bf:e9:9b:64:f9:97:35:58:46:eb:7e:1e:73:91:
1e:d4:4e:e0:34:24:b8:0a:a6:7c:6a:8e:85:31:bd:57:4d:6d:
7f:f3:7b:9d:f2:82:66:37:08:72:6e:a3:3c:01:a0:4e:5f:97:
52:cd:10:03:85:bd:0d:1f:fa:b3:13:6e:c1:2e:41:68:62:14:
d1:78:b7:71:b3:63:d8:e6:c6:00:65:5f:40:63:69:a8:bd:c1:
ce:6c:aa:36:11:a8:a9:85:73:02:30:0e:ff:8b:bf:eb:74:54:
18:93:3b:e4:74:4a:64:ef:45:a5:d6:07:84:31:58:fd:ea:1c:
c1:a5:d3:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:13:16 2025 by rpki-client