Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/n0YQcP81W4O3Bz6ZQN491qKTW-4.roa
File: n0YQcP81W4O3Bz6ZQN491qKTW-4.roa (raw, json)
Hash identifier: 0KZsBNJj1+1+8gG2WSNQKIe7rup32m/EIJChyajpsOk=
Subject key identifier: 9F:46:10:70:FF:35:5B:83:B7:07:3E:99:40:DE:3D:D6:A2:93:5B:EE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187F4D5CEA964C68EB3AC54D3232356EA09
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/n0YQcP81W4O3Bz6ZQN491qKTW-4.roa
Signing time: Sun 07 May 2023 06:11:05 +0000
ROA not before: Sun 07 May 2023 06:11:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:f4:d5:ce:a9:64:c6:8e:b3:ac:54:d3:23:23:56:ea:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 7 06:11:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9f461070ff355b83b7073e9940de3dd6a2935bee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a2:35:05:77:6e:f7:44:cc:fb:7b:8b:83:92:
b1:28:8f:7f:8e:96:47:68:d8:66:64:e9:c0:0f:fa:
6c:18:be:08:2c:57:9b:c3:e4:e8:81:98:48:ce:eb:
f5:4b:1b:2c:17:22:2b:a3:ac:e9:a3:bd:e9:93:63:
41:fb:3c:a0:38:1e:d6:5b:41:a7:20:4e:bf:ae:db:
a0:be:ac:d2:8a:e4:09:67:95:61:08:c0:21:12:87:
e9:5d:fd:62:d8:24:17:3b:a2:cb:da:18:42:01:d8:
8d:38:52:41:82:ef:35:bd:fd:fd:b9:31:70:31:50:
f9:ce:16:ad:80:ac:89:e2:c6:c3:94:32:b6:6f:1a:
f2:53:46:5d:c8:9a:bd:7c:eb:65:8b:e3:14:45:8f:
25:8c:2b:81:25:47:f6:ea:dd:c2:8a:13:3d:1a:05:
65:df:1b:5c:21:d3:76:7a:4d:02:01:c0:b3:c9:a5:
51:ac:98:75:dd:20:8a:2a:37:e6:96:f0:3e:c4:4d:
c4:b7:48:87:d3:7f:3c:ee:16:5e:60:45:64:e2:ed:
50:45:04:4a:81:ca:06:87:cc:ad:da:71:c1:08:0a:
3b:93:9a:d1:a6:34:78:da:52:ca:73:d2:38:b4:67:
af:4e:5d:31:7f:b0:82:63:d2:e0:ee:7e:c2:9f:30:
2a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:46:10:70:FF:35:5B:83:B7:07:3E:99:40:DE:3D:D6:A2:93:5B:EE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/n0YQcP81W4O3Bz6ZQN491qKTW-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2b:28:8c:2e:f2:a2:54:1b:8c:81:60:a7:3f:b2:e7:36:9a:da:
05:16:3d:2c:6c:36:c5:39:5f:27:68:4d:aa:2f:63:90:3f:41:
90:38:5e:60:69:34:73:ea:69:50:c9:4b:42:f3:c5:36:15:09:
1e:eb:d4:14:b8:3f:42:11:1e:e8:23:4e:94:15:52:27:59:b9:
39:9a:75:bd:76:59:d8:b7:02:01:01:33:0a:eb:78:5d:a3:ab:
72:98:fb:48:29:02:c4:ca:87:c9:99:85:6b:3f:03:48:cc:09:
61:b2:d9:59:c5:ec:67:27:c7:36:37:a5:cd:35:39:1c:e3:32:
64:4a:76:a9:2a:de:4d:81:b5:70:c6:58:e3:7b:6f:3e:e7:86:
ad:6b:0a:11:5d:f1:69:41:8f:1f:de:f6:4e:a0:1b:23:53:65:
0b:e2:29:dd:04:98:d2:49:ae:b8:3c:5d:2e:54:e6:f4:cb:c4:
4b:8a:a3:70:01:46:78:de:0e:cf:e5:0d:3f:eb:3f:69:6d:f2:
89:eb:ad:e6:05:21:50:26:ae:50:bb:65:0f:4a:08:63:1d:af:
b6:6c:1c:9c:f9:de:e1:71:ac:c3:a4:a1:3b:e4:8e:b4:f7:a3:
59:c0:a7:d2:5f:71:97:dd:6d:2f:87:06:e5:50:b3:c5:ca:72:
1a:e5:93:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 03:48:27 2025 by rpki-client