Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sLDhawQvsq9wweRRPFPRn9zlWsk.roa
File: sLDhawQvsq9wweRRPFPRn9zlWsk.roa (raw, json)
Hash identifier: o92o4ny77x6bUV+BoghyWvRNLMZ9WC8r0hKQ7XwbsUU=
Subject key identifier: B0:B0:E1:6B:04:2F:B2:AF:70:C1:E4:51:3C:53:D1:9F:DC:E5:5A:C9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01895153275D4345BD9F76C9E65EE222833E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sLDhawQvsq9wweRRPFPRn9zlWsk.roa
Signing time: Thu 13 Jul 2023 22:15:51 +0000
ROA not before: Thu 13 Jul 2023 22:15:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:51:53:27:5d:43:45:bd:9f:76:c9:e6:5e:e2:22:83:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 13 22:15:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b0b0e16b042fb2af70c1e4513c53d19fdce55ac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c3:e8:0b:6b:b1:d0:0c:71:d8:0c:86:67:20:
f8:a8:a5:3b:f9:ff:a4:05:da:6c:12:0b:e2:30:33:
c8:86:7b:77:9e:9c:9e:3c:6d:ef:25:1e:3f:7f:03:
fc:a7:1e:4d:7e:c5:8f:a0:d9:87:74:73:30:05:99:
0b:c6:73:b1:54:8e:ff:6b:b1:d1:dc:5a:e5:84:a3:
a6:8f:bf:8b:0c:a1:b2:ba:87:c9:bf:9e:af:70:0f:
14:8e:c4:08:80:c1:dc:1f:8d:eb:e9:be:ce:96:c5:
89:88:01:f4:4f:53:d2:8c:09:40:a3:a1:52:07:92:
a4:4a:3c:1d:9d:71:f2:ee:43:8c:b7:c5:3f:db:85:
86:50:65:7c:52:db:d6:76:bf:e4:23:3b:b1:14:02:
54:6e:60:da:81:6c:92:2c:fb:82:12:9e:f2:5a:2b:
85:18:df:61:e5:ad:ca:54:51:bf:3c:a0:9a:2c:35:
6d:09:f4:cf:ed:a1:67:b6:0e:94:3d:23:d5:15:6f:
8d:e7:94:0a:eb:fd:28:b6:7c:d2:86:cb:1c:01:bf:
fc:62:21:d8:cc:38:4e:ce:c0:1f:cb:55:81:3c:03:
e4:69:90:66:8c:b6:f2:8a:71:7e:d3:ba:14:ac:d5:
7f:01:1b:65:42:35:64:01:d1:d8:7c:09:87:a2:ae:
9e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B0:E1:6B:04:2F:B2:AF:70:C1:E4:51:3C:53:D1:9F:DC:E5:5A:C9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sLDhawQvsq9wweRRPFPRn9zlWsk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
81:83:91:ec:74:78:80:07:4a:33:6d:94:7b:31:e0:8f:2e:bc:
91:a0:36:3a:d5:db:0e:8a:60:6f:98:c2:e6:67:be:bd:5c:80:
d5:08:dd:d6:ff:dc:96:8d:e4:ba:a3:75:98:a6:2b:4d:de:a9:
f3:7e:40:cb:fc:88:c4:45:49:40:a7:81:a4:9c:3e:35:8c:54:
0a:9c:81:a8:d0:d5:2a:c6:f8:d3:20:96:86:4c:9c:fa:4b:76:
be:6a:55:90:e8:36:90:3e:b6:5a:c5:b0:f6:9b:ab:78:59:62:
34:7e:a8:ae:05:6c:c1:5f:80:e6:07:c7:a1:d4:b4:f5:b9:2b:
3b:73:f8:7e:c1:2e:34:1e:87:4a:c8:f5:bb:ff:6b:00:79:21:
8b:9e:41:12:86:26:72:a0:d4:41:6b:bc:8d:e2:eb:2d:d3:64:
12:a4:2b:95:c2:32:0c:71:1a:a2:3d:91:52:f7:0c:d2:5e:2d:
6b:34:72:a0:d5:fd:e7:07:9d:3b:5b:88:c6:b7:97:68:fa:e9:
a3:f5:ff:b5:31:f6:ec:00:43:e4:ad:14:f0:71:9a:a8:35:65:
86:f7:b3:af:ac:7a:a4:88:4d:fc:85:f3:b0:95:79:b8:41:1e:
e1:72:0a:bc:e7:7d:be:e8:05:20:16:81:0e:ae:f3:68:b7:34:
16:e0:d6:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 00:46:45 2025 by rpki-client