Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sajCuTAIYhqoeP3Bg8P7CBM91eI.roa
File: sajCuTAIYhqoeP3Bg8P7CBM91eI.roa (raw, json)
Hash identifier: 8RRKCG7Utm7J78LcgA3Az01osa3eLIuYE81dEEbC7vw=
Subject key identifier: B1:A8:C2:B9:30:08:62:1A:A8:78:FD:C1:83:C3:FB:08:13:3D:D5:E2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187EFE48BDEB6A89EE080D8DE14F036EE48
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sajCuTAIYhqoeP3Bg8P7CBM91eI.roa
Signing time: Sat 06 May 2023 07:09:05 +0000
ROA not before: Sat 06 May 2023 07:09:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ef:e4:8b:de:b6:a8:9e:e0:80:d8:de:14:f0:36:ee:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 6 07:09:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b1a8c2b93008621aa878fdc183c3fb08133dd5e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d7:96:b7:03:90:ba:e2:6c:30:44:09:42:9c:
08:0e:08:69:03:28:2e:8a:c8:9c:44:64:a5:da:88:
ee:50:a2:06:ac:ec:3f:5f:79:18:41:5c:df:b3:24:
fc:ad:99:cb:fb:f9:42:78:e8:8c:c9:e7:03:a1:97:
6d:b8:ab:02:ea:49:ec:4d:3d:23:28:d8:dd:ac:4d:
ad:22:6e:3e:06:92:aa:ed:89:f1:41:d2:32:e0:e1:
63:b2:9c:dc:6f:52:b2:08:66:a3:bd:56:80:65:e8:
89:62:b8:c8:72:f2:60:ca:03:ad:3a:89:7e:2f:05:
1e:d8:77:62:80:93:8f:6b:83:a2:c6:f3:13:9c:23:
26:20:90:b4:8c:cf:75:b2:d7:eb:a5:90:c8:a7:88:
c1:f5:86:6c:08:86:54:aa:48:aa:dd:b9:e9:9a:35:
69:d8:e4:5b:06:ae:9e:44:14:f0:6e:94:d2:1c:68:
97:65:09:61:53:4f:d9:2e:fb:11:ea:d4:15:3a:16:
74:66:f8:66:8b:98:16:a4:a5:80:43:06:96:ac:0c:
5f:48:42:55:6d:cc:41:28:71:29:cb:37:58:34:a5:
f6:29:37:2e:b0:db:a4:c8:90:7f:83:e0:48:15:07:
36:bc:c8:6a:f2:e4:e1:c7:cb:89:95:13:8e:06:31:
64:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A8:C2:B9:30:08:62:1A:A8:78:FD:C1:83:C3:FB:08:13:3D:D5:E2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sajCuTAIYhqoeP3Bg8P7CBM91eI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0a:e3:1a:d1:c6:8a:34:a7:18:a5:93:1f:bf:16:5e:bb:5f:dc:
66:41:b6:99:ef:1e:67:d9:07:b4:06:c8:ac:ce:b0:c4:06:d2:
89:fa:d1:b6:c7:f8:91:65:27:48:66:98:fa:5d:32:55:ff:2b:
92:96:9e:de:34:4e:31:bd:8e:11:9b:0a:a9:88:27:89:06:bf:
c5:c1:34:f5:ea:6a:04:22:6d:40:20:80:a8:2e:0f:ed:5b:7b:
42:30:37:3f:a1:35:79:1a:a8:7e:7f:ec:91:00:27:16:9e:58:
37:7d:de:8a:cb:56:f8:9b:22:e0:19:40:62:56:2d:50:fc:b9:
09:d3:83:ba:60:7b:1c:8c:2c:80:46:8a:7d:eb:0d:96:30:e6:
53:93:40:94:25:b5:de:0a:f0:0e:c7:7e:59:89:1d:b4:a4:ae:
85:0f:b2:18:ff:8a:57:71:4a:a4:24:07:46:4e:6e:90:d6:b9:
8a:37:54:d2:0b:b3:66:db:d7:fd:48:6d:2c:33:b6:ea:f0:00:
2f:68:e7:0c:86:95:f2:f4:77:b7:b5:22:e7:f9:2b:5e:61:ad:
ff:cb:e9:bf:f2:a1:69:fe:1b:c4:e2:6f:f4:3c:4d:5f:9f:be:
ed:fb:1e:8c:94:7e:db:ec:45:a5:60:21:7b:80:a9:db:93:b3:
3a:21:b8:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:27:47 2025 by rpki-client