Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/serQ9zMxRl6FsNII_I4dmQ3vE8E.roa
File: serQ9zMxRl6FsNII_I4dmQ3vE8E.roa (raw, json)
Hash identifier: ZO0X7/iqRH50Sa8gIhahmHeyfrz9o0AQtgINxQfTpMA=
Subject key identifier: B1:EA:D0:F7:33:31:46:5E:85:B0:D2:08:FC:8E:1D:99:0D:EF:13:C1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188BEBEE889F6F2BDC34231A57FD3DEEBDB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/serQ9zMxRl6FsNII_I4dmQ3vE8E.roa
Signing time: Thu 15 Jun 2023 11:09:22 +0000
ROA not before: Thu 15 Jun 2023 11:09:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:be:be:e8:89:f6:f2:bd:c3:42:31:a5:7f:d3:de:eb:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 15 11:09:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b1ead0f73331465e85b0d208fc8e1d990def13c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:7b:51:b4:ba:55:5d:aa:aa:4e:c3:d9:c5:40:
51:9f:04:dc:f6:8e:3a:61:43:98:bf:26:f5:7a:97:
c1:61:1d:4c:5b:64:30:4c:e5:31:35:91:28:d3:10:
bc:73:1e:a9:5a:d6:dc:c9:0e:ad:72:29:be:de:84:
0a:2b:87:f8:b0:8f:a3:d2:80:5f:b4:ea:ab:26:c3:
ef:fd:27:78:3a:eb:ff:5b:b6:a1:2a:c7:2e:7a:e7:
91:1e:66:a9:a6:23:2f:16:40:0d:3d:f3:1e:8a:3c:
d6:8a:57:5c:fa:1e:c8:ce:3a:66:57:b8:a1:c8:a7:
54:13:f8:7e:6b:56:ca:a5:57:ff:75:63:8f:2a:fc:
50:72:a6:eb:4f:8a:2a:8d:4c:00:27:fd:97:06:69:
6c:da:3f:f7:6c:0f:64:6f:06:3b:23:22:fe:b7:43:
9c:c1:ad:eb:5a:72:1e:35:ae:ea:46:d1:4f:fe:aa:
a9:9e:57:da:11:42:74:72:83:66:06:f5:68:db:4a:
bc:4b:c6:17:01:e2:24:5b:fa:62:42:30:40:01:43:
a4:a8:be:fd:1d:06:8b:fd:52:03:8c:2d:ad:52:53:
7d:b0:a1:74:b3:83:7a:7c:7e:c3:d6:87:5b:de:38:
44:ee:de:79:28:1b:c2:77:c6:b3:8a:1a:61:58:3b:
f3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:EA:D0:F7:33:31:46:5E:85:B0:D2:08:FC:8E:1D:99:0D:EF:13:C1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/serQ9zMxRl6FsNII_I4dmQ3vE8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5b:12:a3:02:4b:13:56:c7:4d:38:68:f9:ec:7e:73:3d:f0:a9:
70:0f:7c:51:5c:68:50:93:24:9d:93:42:38:dd:82:94:f5:cc:
93:f1:6f:c6:0f:f5:96:c6:a2:1b:c8:e0:21:69:43:88:1f:31:
39:b8:0b:64:67:41:01:8c:b9:5e:27:c9:0a:74:e1:58:ed:3c:
03:75:79:d8:e3:ad:03:c8:e6:1f:a9:db:b8:6a:05:7d:3a:9e:
f3:25:01:15:46:49:db:d1:81:af:00:56:27:a5:0a:c1:69:4d:
07:15:ea:13:d8:ca:f5:5d:59:0b:16:57:25:ea:fb:3c:f5:b8:
f3:9d:3d:8f:cb:d3:ee:6e:33:bf:7e:be:56:63:3f:97:33:06:
01:d6:fe:e2:23:2a:1d:11:f7:e0:87:9d:79:84:eb:59:3f:81:
fc:bb:a8:a0:85:e0:2b:72:48:64:45:cc:50:6d:ce:b4:b1:38:
b0:de:1a:18:54:5f:77:dd:33:c1:d5:3f:e8:14:45:95:3a:d0:
65:03:e6:a4:ed:e5:5a:0e:e5:33:c3:ff:4f:ce:a4:5f:69:cc:
77:17:dc:ca:8b:f3:12:41:61:5b:c7:ea:46:c7:1b:9a:41:06:
26:eb:2f:4e:de:77:6b:1e:a5:5b:48:3f:56:56:c4:7b:91:b8:
4b:3a:f0:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 03:47:19 2025 by rpki-client