Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sGzUIP540O56N1KHGJ88CzLOEQw.roa
File: sGzUIP540O56N1KHGJ88CzLOEQw.roa (raw, json)
Hash identifier: tRonqwCe6SP1Gqs0BPQAwhmall6v+cA/Hb9OcKGvlpU=
Subject key identifier: B0:6C:D4:20:FE:78:D0:EE:7A:37:52:87:18:9F:3C:0B:32:CE:11:0C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018836106879C000F7F0B6B2C0C251CDAA6D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sGzUIP540O56N1KHGJ88CzLOEQw.roa
Signing time: Fri 19 May 2023 22:10:24 +0000
ROA not before: Fri 19 May 2023 22:10:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:36:10:68:79:c0:00:f7:f0:b6:b2:c0:c2:51:cd:aa:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 19 22:10:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b06cd420fe78d0ee7a375287189f3c0b32ce110c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0a:5b:05:77:2d:b4:4e:d8:77:43:f5:27:ef:
19:25:2e:ec:43:66:58:3c:51:03:e2:7d:e0:06:34:
32:00:56:a5:61:a5:fb:03:96:dc:3a:9c:be:a1:7a:
27:1e:54:89:1c:83:d8:ce:70:fc:ab:83:e1:81:72:
80:7a:33:9f:12:2c:eb:60:5d:06:71:b8:20:00:7a:
e0:78:fc:fa:33:9a:5c:05:d4:8e:22:c3:6b:f6:fa:
df:67:8f:a0:34:d0:95:77:d3:0a:0d:5f:42:ce:81:
bd:35:b4:f8:67:19:81:97:74:14:73:09:fb:8b:fe:
56:0e:39:0b:c9:da:67:4d:b6:bf:3c:16:6d:0d:a0:
17:07:02:e4:92:d8:39:9e:f9:29:72:6d:fc:23:76:
4b:7f:f1:06:35:05:ab:76:78:31:09:11:7c:65:88:
49:4f:36:30:60:ff:1b:87:92:5f:9b:fa:75:2c:b3:
66:33:a1:88:48:34:cd:5b:54:be:6a:5b:21:c6:ac:
3f:8f:96:eb:79:7f:4d:56:b1:e9:ce:f2:0b:47:ab:
f3:98:d8:cb:5f:39:59:d0:a7:0f:b2:e3:52:e3:cf:
56:2d:fb:cd:33:d2:b5:7e:b2:b0:bd:ff:da:54:24:
42:ec:f8:55:ae:22:6b:1b:25:5f:72:f1:f6:ef:64:
89:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:6C:D4:20:FE:78:D0:EE:7A:37:52:87:18:9F:3C:0B:32:CE:11:0C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sGzUIP540O56N1KHGJ88CzLOEQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a7:23:44:5a:3b:4e:34:60:2e:47:20:86:02:1d:0c:8d:3d:ed:
0c:bb:f8:90:61:fc:22:ec:73:2d:17:84:9e:54:1d:7b:a7:9f:
72:90:0b:37:5b:b3:68:bd:da:b0:74:dd:36:01:11:fb:b3:c6:
68:00:60:26:26:d0:cb:ce:aa:23:d4:65:70:94:1a:b0:0b:a3:
4e:3e:cc:e1:c0:c8:88:01:07:80:f6:e8:6e:9a:78:0c:c4:d5:
f0:c0:51:48:43:ca:13:09:9e:55:4f:d2:ae:14:6e:84:62:89:
c8:52:01:45:2c:71:03:fb:56:f2:6e:c5:49:4f:8d:9e:7a:d1:
d4:ff:1e:36:a3:ea:e3:00:c5:43:76:31:f3:16:e0:8a:ce:e2:
fd:62:d3:b7:ad:dd:35:75:3e:4c:c4:31:59:c8:e8:2b:23:ef:
be:99:3a:d7:4f:60:ae:a2:2a:16:97:a3:09:39:5e:b8:59:e7:
15:e2:12:3b:4b:9d:28:24:b4:f0:83:5c:5b:3b:21:8d:5d:6e:
36:52:5b:07:aa:59:ae:ce:3f:c8:40:b4:a7:3f:1c:3b:1d:32:
31:f4:09:58:ed:b6:37:6a:8d:9e:0b:01:05:e0:ff:18:68:9f:
b2:ad:01:ca:50:00:d6:66:36:5f:de:1d:53:33:09:e1:a5:20:
6f:4a:8f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 03:17:10 2025 by rpki-client