Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/z8NId8finA9kcQr2kJRF8ORXygU.roa
File: z8NId8finA9kcQr2kJRF8ORXygU.roa (raw, json)
Hash identifier: fJXyOsC1C2XvHD/zkmkHYPkZHIFFK9tsVlam4Pf7b64=
Subject key identifier: CF:C3:48:77:C7:E2:9C:0F:64:71:0A:F6:90:94:45:F0:E4:57:CA:05
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018964A04451C59F298D2E404862FCF7DA4D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/z8NId8finA9kcQr2kJRF8ORXygU.roa
Signing time: Mon 17 Jul 2023 16:12:52 +0000
ROA not before: Mon 17 Jul 2023 16:12:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:a0:44:51:c5:9f:29:8d:2e:40:48:62:fc:f7:da:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 17 16:12:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cfc34877c7e29c0f64710af6909445f0e457ca05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9f:21:db:2d:75:9d:a1:85:f1:95:c1:ac:e3:
ff:a4:7b:36:6b:16:e0:d2:cb:da:bf:59:f1:49:6e:
53:2c:41:08:77:b3:32:db:e4:6a:50:69:00:90:3c:
cc:69:ff:cb:db:ca:da:ed:4d:98:a2:11:75:db:af:
e4:d9:75:45:be:01:78:b5:3e:2c:c2:f8:84:a6:87:
55:20:8b:98:48:02:7d:b0:ba:24:72:ed:f7:87:ec:
2e:e5:c6:dd:47:5c:e6:ca:15:84:47:66:03:25:53:
65:28:03:57:de:13:15:14:dc:fb:09:04:28:a7:43:
ae:8c:3e:68:99:4f:15:d0:5a:e3:fe:16:7a:7e:26:
5c:2f:be:85:bf:83:99:de:64:86:0e:cd:9a:31:a6:
cf:03:03:fc:eb:d2:0e:d1:40:83:a4:70:22:d8:a2:
dc:91:74:9a:6d:9a:41:a4:0f:95:60:af:cc:ec:5c:
52:52:aa:a7:e8:f5:f5:7b:55:8d:d8:d9:68:35:60:
5e:28:b4:10:74:eb:f2:d6:c3:e4:92:b5:3a:ce:ff:
5c:61:16:be:22:14:6a:f6:68:25:17:58:df:d1:7c:
7d:a9:fe:d5:84:b7:92:78:32:ed:09:ba:22:1f:0d:
d3:27:7e:3b:75:4e:c5:7e:84:2b:31:e2:20:cf:40:
d9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:C3:48:77:C7:E2:9C:0F:64:71:0A:F6:90:94:45:F0:E4:57:CA:05
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/z8NId8finA9kcQr2kJRF8ORXygU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4f:63:08:d9:b5:7f:76:19:11:90:eb:cf:99:47:1a:d5:fe:bd:
a9:eb:48:2b:17:c9:23:a5:11:50:67:10:88:36:af:ae:de:7f:
ba:c3:c9:82:b9:88:c9:bd:a6:1b:98:a3:80:b3:f8:cb:70:02:
1a:ab:f8:40:ac:ca:b5:89:19:68:57:c7:9e:24:0f:0a:6c:12:
1f:49:86:0d:ff:42:31:b5:23:53:72:9e:bc:01:44:3c:d9:34:
17:0e:6f:46:cb:f7:d5:bf:5d:03:af:99:60:3d:7e:13:3e:1f:
6f:e0:d0:3e:9b:78:89:e0:eb:05:91:13:9c:b9:38:00:04:eb:
0d:8c:59:c7:a9:80:3f:af:9a:c6:01:9e:fb:8a:d9:4d:71:8e:
6f:4b:d4:46:07:61:5e:ba:0c:68:15:dd:83:78:22:b5:c4:36:
cd:b1:57:a2:a4:1d:2d:d6:ae:ce:45:8b:d6:1f:04:8a:89:b1:
19:f3:57:d7:97:a2:cb:3e:23:d0:69:28:58:a2:bc:88:14:d5:
2d:b9:f6:bb:b8:c3:51:c2:bc:3e:89:a5:dd:44:05:0f:5e:2c:
e5:b3:e6:dc:f4:c8:6b:81:20:2d:39:94:de:49:f0:c6:97:01:
a1:f4:51:fd:35:13:6c:6e:12:49:a5:8f:e4:ec:fe:de:73:6b:
f9:e5:76:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 21:58:46 2025 by rpki-client