Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/slWQpIeHWJKZB-_OKU-9tVu58YM.roa
File: slWQpIeHWJKZB-_OKU-9tVu58YM.roa (raw, json)
Hash identifier: JnASXepQFLEtt3/COZJVYtZI0HqBrc8eGZfTHSVsqcg=
Subject key identifier: B2:55:90:A4:87:87:58:92:99:07:EF:CE:29:4F:BD:B5:5B:B9:F1:83
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01877FE2C95E2CD08FE713A5AB82B47A0215
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/slWQpIeHWJKZB-_OKU-9tVu58YM.roa
Signing time: Fri 14 Apr 2023 13:09:41 +0000
ROA not before: Fri 14 Apr 2023 13:09:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7f:e2:c9:5e:2c:d0:8f:e7:13:a5:ab:82:b4:7a:02:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 14 13:09:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b25590a4878758929907efce294fbdb55bb9f183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2e:6b:08:83:d3:af:de:30:bf:6e:95:f1:73:
b3:cb:76:50:d3:f1:7c:e6:20:51:d9:0a:93:11:d4:
46:56:b7:aa:f6:81:fe:e1:24:1b:38:66:64:5c:43:
b2:a1:22:93:a5:19:86:75:5e:df:46:43:61:55:0c:
e6:f0:38:87:7e:dd:44:fc:97:61:67:32:04:5d:f2:
21:b8:8d:5b:98:ad:17:45:03:fa:a4:10:d6:32:cd:
4c:34:ce:e5:be:8e:d8:f2:e4:5e:00:97:bd:b3:ea:
17:c7:81:23:65:31:7d:8a:67:11:48:af:d9:f6:65:
ad:ac:31:7b:40:aa:d3:10:0c:1f:42:00:65:69:71:
07:e6:a8:13:92:fd:74:2e:dd:54:97:9f:46:45:8d:
0c:42:71:c7:30:a5:5d:70:38:a0:19:0e:f8:39:76:
5a:4c:91:78:54:a4:c2:a0:ae:61:93:77:34:13:94:
66:07:6d:b0:d4:16:33:a5:eb:74:ad:e9:04:4d:46:
17:5d:b1:92:cf:b5:c6:76:a4:59:39:b0:6a:44:40:
17:a9:6d:51:a3:5c:be:b1:e5:5a:42:93:11:d6:e6:
1c:0c:fd:99:a8:73:c2:68:2d:db:cf:0d:c0:96:98:
b8:dc:06:17:6a:d5:38:b8:45:62:f1:e0:07:b5:d1:
27:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:55:90:A4:87:87:58:92:99:07:EF:CE:29:4F:BD:B5:5B:B9:F1:83
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/slWQpIeHWJKZB-_OKU-9tVu58YM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
02:a0:ab:4a:52:6e:7b:54:de:03:31:10:b2:06:bd:2f:86:65:
4c:29:3a:9c:87:14:1f:d5:fd:87:00:fa:e4:8c:44:bc:15:f6:
2c:31:b1:4e:a3:5a:70:a6:1d:fa:5b:c3:ae:dd:1e:31:4b:64:
b7:ab:9b:17:7f:ea:63:dc:4a:72:9c:ef:06:76:e0:e8:7d:c7:
e8:98:87:26:f0:ed:10:ef:fd:ba:28:1c:eb:54:a2:d2:86:bb:
1c:cc:ae:f0:e8:bd:77:6e:63:ff:ba:29:c4:ce:75:bf:46:7d:
bf:23:22:4d:b2:d3:10:2d:e7:e2:c4:c7:d4:1c:51:a9:d9:c3:
af:0a:01:75:26:8f:ca:d5:b5:8d:64:9a:98:11:f5:d6:02:10:
02:c5:05:5e:70:81:56:19:3f:5c:a5:51:05:3a:47:a0:25:1f:
bf:c9:5d:5a:22:5e:74:a8:b0:ff:ae:ef:0b:0b:47:f4:74:ea:
ed:d2:b4:17:44:90:a8:9a:60:66:d4:f0:45:b0:49:2f:29:f3:
2a:68:8d:18:33:a5:73:51:42:2d:89:f5:ec:56:9c:4d:0c:a2:
b0:c0:95:2a:ad:c9:ea:6b:e8:2b:68:09:4c:46:a7:a1:99:7e:
0a:a7:c3:91:56:68:bb:1e:1f:62:e5:de:bc:7a:5a:83:54:ba:
1a:86:9b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 08:32:40 2025 by rpki-client