Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rwoenXy8unTCutzzdmRNR3VUBAA.roa
File: rwoenXy8unTCutzzdmRNR3VUBAA.roa (raw, json)
Hash identifier: FRbG4DFiTg8wjjz6wC8lC+HcMu/alr9lHGjoTfINs9c=
Subject key identifier: AF:0A:1E:9D:7C:BC:BA:74:C2:BA:DC:F3:76:64:4D:47:75:54:04:00
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186EEA09862D6D530AF24244B8CFE88E81D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rwoenXy8unTCutzzdmRNR3VUBAA.roa
Signing time: Fri 17 Mar 2023 08:12:27 +0000
ROA not before: Fri 17 Mar 2023 08:12:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ee:a0:98:62:d6:d5:30:af:24:24:4b:8c:fe:88:e8:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 17 08:12:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=af0a1e9d7cbcba74c2badcf376644d4775540400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c7:58:36:53:39:96:a6:04:9f:5f:82:ff:7c:
24:42:33:a6:28:cd:de:48:c3:05:94:ee:91:02:28:
ad:81:f7:36:d6:e9:a0:6f:ad:b2:98:38:22:9c:e9:
cb:c0:d2:3d:fd:5d:02:57:0e:c5:27:70:d2:fe:c3:
c0:f5:24:40:6c:04:48:ed:45:3b:5b:42:e4:ee:1f:
af:76:70:0a:87:5b:0c:34:dc:ea:cf:44:d1:32:a9:
29:27:3d:fd:31:1a:16:d9:57:7e:ce:d1:18:92:1e:
25:89:d7:c0:75:5e:6e:aa:95:08:79:ce:06:d0:f4:
ca:c7:68:10:98:d1:27:42:74:b8:4e:dd:b8:9d:34:
35:f7:c3:70:5b:7e:61:74:08:96:a6:b8:a8:b0:29:
c7:be:1f:a1:2f:2a:9c:05:35:48:af:1a:5d:c3:04:
8a:b9:1e:9a:14:c0:10:c5:39:9f:3d:0b:12:a5:6c:
b4:4d:ce:2d:e2:7b:e8:d4:a7:b3:2a:46:09:26:0b:
80:59:b4:6c:58:8b:68:bb:36:ee:5f:25:1d:81:a4:
3b:40:eb:b3:85:5e:d3:54:fd:1f:4e:8d:d3:d3:2f:
09:89:c9:ef:18:31:7f:63:3d:1b:75:16:d1:a2:de:
72:75:65:22:0a:52:79:c4:c4:03:b5:11:7f:e6:6f:
1c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:0A:1E:9D:7C:BC:BA:74:C2:BA:DC:F3:76:64:4D:47:75:54:04:00
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rwoenXy8unTCutzzdmRNR3VUBAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
66:0e:25:55:24:b1:1c:67:39:de:2f:78:02:c2:03:e5:17:77:
aa:26:07:8c:1e:5e:20:20:4c:5e:c7:44:d1:bb:f3:e6:72:e6:
06:2e:4c:cc:6f:bf:0e:2c:9c:23:60:50:54:3e:f3:bd:cd:5b:
e9:1f:a6:95:3c:3f:69:35:da:d5:25:84:21:a4:23:00:17:b1:
28:74:1a:d0:b9:1a:de:d7:b8:12:14:4b:a4:ea:60:4a:81:41:
30:ea:55:3b:d7:2d:28:36:d0:55:d4:7f:e7:d2:e4:1e:f3:0f:
59:b2:1f:a4:34:f0:75:fc:a6:ee:0e:49:fd:dd:3c:e2:8e:3b:
cb:bf:97:85:42:6d:83:c1:5a:a9:3d:18:34:3f:4a:20:ca:be:
1f:ec:f7:82:da:bc:af:7b:88:c8:1f:e9:81:45:f1:d2:92:f3:
f9:58:15:c9:8d:13:84:7d:f4:b9:80:94:66:a1:75:40:3d:b6:
a8:82:a9:b3:25:f9:15:72:a5:73:24:d6:ee:dc:bf:ce:d7:01:
a6:2f:70:e4:5b:1c:5a:f2:32:39:a7:5a:d6:73:d8:0c:3d:42:
0b:85:b1:cd:1e:13:4c:45:1a:6a:75:91:42:62:e3:9c:0b:25:
4c:91:00:8a:7b:81:91:14:1e:31:1c:aa:a1:d5:d3:29:69:3c:
4d:1d:e9:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 14:38:26 2025 by rpki-client