Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rBfF3gC-vG_lNIyrs6Yq-oap_Dg.roa
File: rBfF3gC-vG_lNIyrs6Yq-oap_Dg.roa (raw, json)
Hash identifier: TC2Li92aH5cUo46mgK0LzpcCOHztEoHwyaglKZE/Wg4=
Subject key identifier: AC:17:C5:DE:00:BE:BC:6F:E5:34:8C:AB:B3:A6:2A:FA:86:A9:FC:38
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018944716D513FED823BD3BB06ED2E9F457C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rBfF3gC-vG_lNIyrs6Yq-oap_Dg.roa
Signing time: Tue 11 Jul 2023 10:13:51 +0000
ROA not before: Tue 11 Jul 2023 10:13:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:44:71:6d:51:3f:ed:82:3b:d3:bb:06:ed:2e:9f:45:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 11 10:13:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ac17c5de00bebc6fe5348cabb3a62afa86a9fc38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:06:e1:49:00:84:26:33:2a:cb:c7:f5:85:34:
65:e0:b5:44:28:b7:a7:f6:dd:ea:af:1f:09:ea:4d:
1e:bf:06:49:76:42:06:90:57:42:17:18:49:60:f2:
49:45:b4:fd:45:ec:64:8f:08:11:ed:a7:35:d7:86:
11:a1:b3:93:99:79:03:95:d0:cd:0a:53:08:ba:b5:
6a:a3:14:62:99:86:71:52:e3:1e:36:b2:3c:59:05:
22:08:66:8f:b3:3f:29:7b:73:d7:0a:38:bc:dd:f3:
6a:13:ca:5f:65:0a:11:2b:b9:61:34:69:48:bc:f7:
46:bf:99:98:7e:83:56:03:d0:b9:4d:0b:a9:70:c8:
cb:58:b6:b0:d2:bf:9f:b1:4f:1b:26:46:1a:66:ab:
0f:fd:3c:eb:91:53:b3:bc:8c:bf:23:11:28:b1:19:
c0:d4:a8:03:cf:b8:16:29:0d:e8:52:c9:be:ea:e4:
c4:f5:34:d8:11:5d:87:6e:7c:11:d1:3a:ee:83:31:
98:40:fa:da:12:25:9d:e0:09:56:e7:74:eb:2c:d0:
d6:3d:70:c6:b7:e6:4b:3f:3e:4f:96:97:19:fd:54:
71:57:38:7b:a8:3d:53:96:f5:70:5a:15:f0:e9:35:
8b:01:e8:31:d0:d0:a0:b3:9e:e6:2c:85:cc:aa:7d:
b8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:17:C5:DE:00:BE:BC:6F:E5:34:8C:AB:B3:A6:2A:FA:86:A9:FC:38
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rBfF3gC-vG_lNIyrs6Yq-oap_Dg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
47:bf:ca:b1:d4:2a:45:9c:3d:3c:ca:ae:c3:22:4e:43:ba:a3:
a2:4e:e7:aa:8a:66:2e:bc:6d:96:60:f0:d5:18:b0:81:5d:cd:
2c:86:e3:0a:2f:4d:0e:d8:22:1c:3d:e9:26:fe:11:16:26:19:
94:14:27:e5:d1:9e:36:9b:32:dd:58:22:0a:1a:64:58:10:b5:
ac:c3:d3:19:63:4d:a3:df:af:c8:b8:16:09:32:a4:00:08:22:
fc:55:39:77:47:ce:2c:ea:5c:4d:09:ef:3a:ac:f9:32:58:5f:
62:a0:b8:ec:23:68:5d:4e:3b:bf:b9:69:77:c9:75:5d:25:03:
6b:54:73:58:0b:05:09:d9:8d:26:62:b3:25:bd:92:bb:82:d4:
5a:0e:fe:4b:19:e6:ca:ec:18:99:25:19:11:bf:cd:bc:a6:e1:
4f:17:3f:bb:99:b1:91:ec:f2:d9:c8:49:d1:19:6c:68:6f:d4:
3f:25:bf:6a:36:c0:e2:1d:20:05:62:f6:ba:87:e9:9f:ca:84:
79:a7:dc:19:89:44:26:59:c7:01:f3:39:76:74:de:c1:14:01:
80:ad:78:91:20:a5:9c:36:95:74:ed:fb:8b:d2:14:67:d4:8e:
f6:1a:cb:0f:9a:2b:e1:6d:12:a8:de:6a:6e:78:62:fe:3a:ac:
71:d9:ed:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:07:38 2025 by rpki-client