Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sexPsiR5W4as6Xgi2rVfKzPcQ_8.roa
File: sexPsiR5W4as6Xgi2rVfKzPcQ_8.roa (raw, json)
Hash identifier: g/ktBivkfsa7xgcBpNDJg/V6UOjqdtY5pyxVxTfiZA0=
Subject key identifier: B1:EC:4F:B2:24:79:5B:86:AC:E9:78:22:DA:B5:5F:2B:33:DC:43:FF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01888F1BECEE9A30B5D6271BB55C9C0DC4BF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sexPsiR5W4as6Xgi2rVfKzPcQ_8.roa
Signing time: Tue 06 Jun 2023 05:09:12 +0000
ROA not before: Tue 06 Jun 2023 05:09:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8f:1b:ec:ee:9a:30:b5:d6:27:1b:b5:5c:9c:0d:c4:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 6 05:09:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b1ec4fb224795b86ace97822dab55f2b33dc43ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:1f:ce:d5:e5:b6:3d:f6:01:bb:b8:37:b5:be:
ac:c3:83:8b:d2:b0:4f:d2:9b:cf:42:dd:d8:d4:5b:
9d:ef:76:74:ec:93:72:84:7e:7c:c1:47:76:bc:7c:
ba:53:ea:18:a6:cb:d1:6d:29:e6:27:12:d3:93:8b:
16:d0:df:5b:f1:b7:34:c8:19:d8:ff:da:35:1a:25:
48:b6:21:cd:2b:60:76:6f:16:5f:8c:e5:5d:7f:16:
63:33:0b:b7:7c:03:65:6c:46:e5:c5:81:4a:1e:67:
ec:d2:54:a9:4d:4c:f2:bd:9c:a5:08:37:a7:e2:4d:
b4:2a:ca:1a:fa:31:0b:26:2c:45:38:1b:aa:ed:87:
a5:0c:da:b5:ae:62:cb:42:ed:89:20:01:76:28:c8:
46:18:53:65:0d:e8:23:b3:7e:8b:d3:9d:0d:72:bf:
ec:29:bd:89:25:09:7a:fa:61:60:3f:65:90:10:17:
82:b8:82:78:69:43:77:f9:9d:9b:33:98:93:22:0b:
63:02:7f:3d:84:d4:4d:76:0f:5d:5b:50:c2:d4:9f:
97:02:91:ab:32:4f:ca:73:d9:93:28:5c:18:a0:5f:
de:32:3b:3b:20:c1:43:09:a8:b4:4a:11:47:b1:ca:
6d:5d:18:90:d8:28:bb:c3:3a:b2:1e:9f:e3:d1:0f:
88:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:EC:4F:B2:24:79:5B:86:AC:E9:78:22:DA:B5:5F:2B:33:DC:43:FF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sexPsiR5W4as6Xgi2rVfKzPcQ_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
94:3d:b3:75:3c:2e:72:23:e4:cc:e0:93:15:86:4f:69:fd:90:
7b:78:77:a7:55:a8:40:f1:66:4c:75:e6:48:59:e7:43:f0:c5:
e4:a1:50:6b:35:a1:bf:4f:d8:1f:f8:82:ea:78:a2:9c:47:38:
0f:b3:fd:47:a1:f5:2a:0e:a9:ca:f7:ab:10:34:5f:0d:d6:3b:
99:ee:20:44:db:36:2b:50:fe:bb:65:67:60:24:5e:40:84:30:
64:cb:80:f5:c8:06:82:81:f1:b1:81:82:c2:a7:27:a6:87:0b:
1c:9a:77:8f:85:41:b3:93:e6:53:d8:6a:19:e1:19:82:73:0d:
82:c0:f1:87:f1:79:7d:4e:d3:a9:1d:24:18:a9:fa:02:98:57:
0d:2a:e1:47:56:da:ca:fd:b1:2c:0a:da:a6:05:bb:ce:fc:0b:
48:08:6e:5d:aa:50:f2:77:12:a8:bd:bd:17:8e:3f:82:1c:22:
a4:ab:8a:94:ff:c1:74:08:ad:0c:40:2a:81:d7:c9:2c:28:83:
de:98:4c:79:eb:67:d4:45:b0:ee:cf:e9:ac:5b:24:5f:bf:c8:
ea:ec:14:d4:3a:10:80:27:8b:af:06:20:e2:15:64:14:8a:e3:
fe:48:e0:34:73:4d:d9:22:1c:97:76:78:3c:49:2e:4b:71:57:
62:27:a4:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 09:43:40 2025 by rpki-client