Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/slBDJP7gX4L3aKSpqmy2n2WPH98.roa
File: slBDJP7gX4L3aKSpqmy2n2WPH98.roa (raw, json)
Hash identifier: mVZZlAvK+GZJeKOneHQbKG8SJejJe7G/fQZEVF/Qq1c=
Subject key identifier: B2:50:43:24:FE:E0:5F:82:F7:68:A4:A9:AA:6C:B6:9F:65:8F:1F:DF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01870F003DFE24E9270714567E2ECD4D0CED
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/slBDJP7gX4L3aKSpqmy2n2WPH98.roa
Signing time: Thu 23 Mar 2023 15:04:46 +0000
ROA not before: Thu 23 Mar 2023 15:04:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:eff:eb71/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0f:00:3d:fe:24:e9:27:07:14:56:7e:2e:cd:4d:0c:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 23 15:04:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b2504324fee05f82f768a4a9aa6cb69f658f1fdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:dd:4c:14:eb:75:bf:9b:63:be:92:87:14:ef:
d2:73:e0:ff:dc:bc:6b:fb:46:cb:24:eb:84:cc:4c:
94:7a:53:7f:5b:7a:56:a3:b4:ca:09:6b:d0:51:20:
6a:b9:b3:3c:ae:eb:bf:c6:8d:94:b9:20:79:b9:1c:
a2:11:1b:53:20:98:e7:1b:b7:1b:b1:79:03:30:ab:
5b:8a:b7:10:54:21:b0:f8:0c:fe:3c:bc:44:27:c2:
18:b2:94:0a:43:1b:58:b9:c5:9e:ae:84:58:4a:02:
87:aa:d0:d5:7a:40:e4:a6:e8:d0:48:18:4b:1a:d3:
db:8f:90:24:7c:85:25:03:a5:ab:21:a0:4a:1d:1e:
df:9b:62:e5:b4:11:81:25:ed:00:fb:f5:20:bb:ce:
85:cc:76:90:e0:16:47:12:95:5d:6a:fc:4b:91:7d:
91:49:04:34:4d:24:2d:69:3e:16:ee:45:c8:31:a9:
1b:e1:2f:1b:c5:69:59:65:a0:36:03:22:15:fc:1b:
d7:d5:70:f7:89:4c:65:fe:ff:3e:ea:a4:78:84:06:
41:78:ea:e7:13:67:4d:d2:92:df:70:cb:c4:28:f8:
49:05:4c:19:b9:3e:a6:1f:f7:27:f9:ba:86:ac:b2:
7c:26:c4:65:88:2b:6b:88:66:bf:e5:18:27:93:6b:
45:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:50:43:24:FE:E0:5F:82:F7:68:A4:A9:AA:6C:B6:9F:65:8F:1F:DF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/slBDJP7gX4L3aKSpqmy2n2WPH98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
02:84:92:2c:e0:b2:00:df:ae:32:73:9f:14:aa:57:57:54:a2:
de:70:7b:42:57:5a:ac:55:b8:b8:a6:bb:7b:c7:84:ab:08:7d:
a2:af:99:3f:e8:cd:4a:68:fb:fa:04:f7:72:c2:21:4a:61:6c:
3e:42:41:0c:b1:f4:72:e4:5d:05:e4:67:bf:95:70:e0:85:92:
31:09:b1:e1:94:c8:ea:46:04:23:25:41:3b:9c:2c:5b:a8:95:
df:5e:dc:d7:22:a1:b5:3a:f1:30:47:af:85:ed:9d:b3:e6:ad:
f9:54:74:d6:91:8b:25:80:98:23:ee:97:4c:ee:45:71:3a:a8:
ac:d1:64:96:8a:62:88:62:11:5b:d5:be:5a:01:5b:0f:cd:d3:
c1:07:50:63:2b:99:8c:d5:6d:43:04:fb:8a:14:47:7f:bd:e5:
fe:0f:67:94:1f:ab:95:27:57:7f:45:72:49:ef:df:c4:86:29:
b9:1d:60:52:b1:69:12:32:6b:8d:a6:1e:87:04:8e:2b:c9:7e:
50:d4:bf:fe:af:70:c6:29:ed:37:85:9e:cb:6d:8c:d0:98:db:
3f:10:e7:28:0d:fa:1a:88:d5:e1:2a:a3:41:e0:d7:62:8f:ff:
e2:89:1e:6b:d5:97:ce:33:a8:ca:9e:ff:13:e5:bd:a2:47:dc:
8b:2d:04:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 13:36:44 2025 by rpki-client