Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/t1CNLm_0f9jDtvjpWw--gKfIRtU.roa
File: t1CNLm_0f9jDtvjpWw--gKfIRtU.roa (raw, json)
Hash identifier: Yq/O5Ud3F1b32xOdFgBJabvh63XbmP+upK9MKXNkVdM=
Subject key identifier: B7:50:8D:2E:6F:F4:7F:D8:C3:B6:F8:E9:5B:0F:BE:80:A7:C8:46:D5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188D20F659AB2D3345F3D5B1E2117FC2F9F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/t1CNLm_0f9jDtvjpWw--gKfIRtU.roa
Signing time: Mon 19 Jun 2023 05:10:04 +0000
ROA not before: Mon 19 Jun 2023 05:10:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d2:0f:65:9a:b2:d3:34:5f:3d:5b:1e:21:17:fc:2f:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 19 05:10:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b7508d2e6ff47fd8c3b6f8e95b0fbe80a7c846d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:db:ce:51:54:7a:d2:b1:b6:c7:8e:0d:9a:10:
dd:1c:35:b6:36:3b:c8:c0:42:a4:fc:4b:48:5e:89:
0c:b0:57:8a:bc:85:72:bb:26:48:db:1b:32:2a:98:
0b:fb:f4:ce:bd:cd:4a:c0:f1:56:a7:bc:57:6d:24:
19:57:be:69:20:40:7f:06:6f:a6:75:a3:af:64:cf:
2d:bb:08:56:a3:f4:05:83:57:42:07:c6:9a:db:46:
8a:42:91:e3:b7:ab:c5:5e:ea:43:3f:1a:de:91:57:
14:30:5c:ac:32:ef:39:4c:3e:56:ae:b7:0b:04:00:
fa:e6:90:ed:f9:c1:7f:23:dd:c7:18:44:9b:d7:87:
b5:20:3f:cb:14:1b:01:cd:27:0e:8c:b6:ea:02:f6:
fe:b2:bc:2e:09:1e:81:62:fb:91:00:a5:08:ee:6e:
2f:96:e8:e4:14:df:23:6e:15:8c:df:14:e9:6f:76:
95:00:6a:48:2d:b1:df:b6:f6:2a:79:18:af:54:d2:
2b:1b:a9:b0:2e:c9:f3:2f:7c:b8:ab:e6:b7:e9:a8:
4b:5b:57:dd:15:55:73:2d:bd:b4:1a:86:0f:0f:3d:
ed:48:75:f0:a9:e5:6b:44:26:fd:18:7c:af:7c:13:
d2:81:78:6b:3e:e5:56:e4:9b:98:96:fb:54:9c:ac:
49:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:50:8D:2E:6F:F4:7F:D8:C3:B6:F8:E9:5B:0F:BE:80:A7:C8:46:D5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/t1CNLm_0f9jDtvjpWw--gKfIRtU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
44:3c:ed:8a:fb:be:30:b1:dd:fc:44:82:68:06:2d:ce:47:b4:
f8:7e:8a:f2:9c:c2:40:63:a7:cd:94:06:77:84:d9:5b:7e:55:
ba:69:a5:8b:33:b9:40:ec:ec:a3:bf:dc:7b:37:1c:34:ec:d9:
be:6a:ff:16:39:45:91:01:d7:9c:43:79:2a:94:ff:68:0e:3d:
05:ab:47:36:00:30:9a:c3:1f:04:00:42:c5:76:bd:ca:f5:30:
b2:5f:59:fd:02:e5:f8:eb:0a:1e:f5:89:05:e1:fd:c6:f4:1c:
01:b8:6a:b8:bc:99:89:2b:fa:83:16:70:1a:c4:50:73:4e:db:
fe:07:92:78:91:24:eb:05:1a:4e:49:62:5f:9b:3a:99:6c:4b:
d2:f1:13:c4:2b:01:fb:42:d7:fb:63:4a:dd:66:db:8c:51:ec:
37:3d:f6:dc:c5:33:8c:c8:48:27:72:8f:9f:b5:43:90:15:e7:
a9:eb:b3:b6:49:dc:70:76:58:c4:77:71:63:cf:b2:77:ec:7f:
2d:2a:e6:d5:0a:f9:2b:95:01:81:e3:38:e1:4a:24:b0:90:98:
7c:a8:8f:8a:52:c8:a3:49:fa:47:6a:7f:a0:33:d9:4b:63:94:
94:2b:97:c4:a7:2d:7f:e5:09:1b:f5:a2:92:f1:06:fd:ae:6c:
cc:17:4c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 05:31:10 2025 by rpki-client