Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/u5vHOXWIdWrCh5MyAWaiNq4ift4.roa
File: u5vHOXWIdWrCh5MyAWaiNq4ift4.roa (raw, json)
Hash identifier: +JBn8xwqAzSOcDOHJl4C12E5BKEzDqvniaoPEY0+k5s=
Subject key identifier: BB:9B:C7:39:75:88:75:6A:C2:87:93:32:01:66:A2:36:AE:22:7E:DE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187F2E9409DE2F9A2044224A427AD404000
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/u5vHOXWIdWrCh5MyAWaiNq4ift4.roa
Signing time: Sat 06 May 2023 21:13:05 +0000
ROA not before: Sat 06 May 2023 21:13:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:f2:e9:40:9d:e2:f9:a2:04:42:24:a4:27:ad:40:40:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 6 21:13:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bb9bc7397588756ac28793320166a236ae227ede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:17:e1:8b:f8:78:15:50:8a:92:00:23:19:55:
ff:fc:a5:f9:3a:6a:05:f0:2b:d8:46:b9:bd:a7:18:
2d:1e:9e:8a:d4:01:64:10:5b:0a:06:3b:a0:d8:11:
48:48:1e:d6:3e:65:06:71:67:31:de:e4:d4:a9:74:
12:4b:e0:d2:d0:0b:d4:10:bc:5b:c8:d3:a8:44:43:
81:d5:1f:34:94:2d:d8:f8:2e:ce:02:c6:4d:be:72:
e4:ee:7b:75:30:c7:5d:83:3b:ac:71:2b:e0:e4:4d:
d1:78:ee:19:56:19:36:63:23:40:70:e1:b5:f8:78:
d2:60:b3:a1:9c:30:3e:8d:d9:a1:0b:40:5d:67:6d:
55:de:ad:00:17:a0:d3:4c:f5:bf:63:30:f2:40:17:
1b:ef:a6:4a:59:11:52:8d:06:54:25:27:9f:df:3e:
eb:40:a2:24:29:7c:7e:6e:2f:47:b3:25:33:cf:b9:
b5:1c:3b:56:90:61:23:67:af:80:f2:c7:96:19:f2:
10:ec:03:fc:ca:9c:e3:d3:75:cf:91:58:31:b0:5a:
88:b9:c5:4e:99:be:ed:d8:18:30:dc:78:54:e4:fe:
0d:59:b4:f6:14:4b:5d:dd:2e:f7:4e:53:ce:14:f2:
86:63:33:d7:e5:00:0b:db:d8:51:bc:05:ed:2e:ca:
aa:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:9B:C7:39:75:88:75:6A:C2:87:93:32:01:66:A2:36:AE:22:7E:DE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/u5vHOXWIdWrCh5MyAWaiNq4ift4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3b:68:bf:7e:b3:fd:7f:65:87:d4:60:70:47:c3:e7:0a:3a:f9:
dc:e5:f6:20:88:7b:24:e4:6e:bc:fd:67:3b:23:61:d9:fd:bf:
e9:6d:41:04:5f:0b:65:e4:aa:9f:aa:7d:63:16:72:a6:35:a6:
3b:e8:47:4b:94:39:eb:6a:38:2b:15:c4:b9:90:55:70:3e:5e:
b0:33:e2:39:6b:27:0a:ef:81:f0:61:4e:6f:12:6a:ee:3d:1f:
85:20:e8:5b:bb:6d:67:3d:51:00:54:2e:9a:5d:44:d3:56:5f:
49:7c:69:0b:6c:08:1e:fc:95:c2:7d:f0:be:9e:9f:a9:01:4c:
16:f6:b1:8c:69:d3:5a:00:8e:e3:85:be:25:09:0e:e4:73:f8:
f3:99:ad:32:44:21:4c:d6:19:aa:c7:f1:ce:80:b2:31:55:16:
30:b3:75:98:d7:b1:38:ad:7c:b2:64:83:ab:39:42:64:dc:8e:
c7:83:43:40:6f:f6:fa:d9:ca:fc:00:fd:ac:23:82:7d:be:c1:
2e:3f:20:40:22:ec:33:d6:77:3b:9a:ca:f7:53:8c:76:11:37:
19:1f:bd:e6:4f:56:7a:d8:93:19:7c:16:52:31:52:a3:5e:4d:
6f:b7:6f:9a:ef:4e:77:e5:11:fd:d7:54:46:d8:eb:1a:7c:d2:
a3:15:1d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 01:32:30 2025 by rpki-client