Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0A0eeYXc0MGoD93ruGUqZxFR4tE.roa
File: 0A0eeYXc0MGoD93ruGUqZxFR4tE.roa (raw, json)
Hash identifier: 4UVbtlly/BCa87oCWaUHJ0NvHg32zxDTp4X3DCii3T8=
Subject key identifier: D0:0D:1E:79:85:DC:D0:C1:A8:0F:DD:EB:B8:65:2A:67:11:51:E2:D1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186BE94FDBA5DF0D668610D8A2A7E188833
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0A0eeYXc0MGoD93ruGUqZxFR4tE.roa
Signing time: Wed 08 Mar 2023 00:18:00 +0000
ROA not before: Wed 08 Mar 2023 00:18:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:be:94:fd:ba:5d:f0:d6:68:61:0d:8a:2a:7e:18:88:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 8 00:18:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d00d1e7985dcd0c1a80fddebb8652a671151e2d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b2:3a:ab:01:82:ff:1b:af:88:31:1f:f3:0f:
94:c5:93:d3:6f:56:27:da:91:68:57:6d:94:76:ab:
ce:4b:4e:20:10:09:34:ba:de:77:6d:c0:d1:57:e6:
10:55:3c:8a:4a:27:df:ca:c6:2b:4e:e8:30:00:a7:
da:24:be:1b:e4:26:4b:33:65:0e:65:11:e2:6e:a7:
9c:5f:e2:a6:ee:7d:fe:57:1a:6c:9e:a4:f8:44:ff:
98:06:84:cd:de:9f:7e:14:97:07:40:62:9b:8b:78:
82:cf:cf:01:7b:e9:f0:09:da:94:ff:6c:bd:e3:d3:
cd:d4:58:c7:89:85:59:79:a0:3f:a9:06:61:8c:91:
af:fa:27:f1:d0:96:00:06:70:f2:20:40:4e:1c:a6:
de:89:ef:1e:e3:19:8c:a1:3d:d4:ba:68:f9:69:c1:
d7:9c:f8:c6:52:89:0a:1a:21:1f:7a:a8:af:96:f9:
f4:53:19:b4:98:a0:9f:3e:db:8e:6b:27:7b:49:b9:
58:de:52:2f:e8:48:61:47:31:11:08:7e:4d:50:6a:
71:7f:77:0f:18:e3:f0:de:8f:95:a2:19:19:9e:d0:
fd:97:74:09:b6:97:91:ed:bb:a9:26:b1:51:2c:53:
39:8a:27:4d:70:6c:d8:85:d0:12:81:3d:f0:6a:02:
c8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:0D:1E:79:85:DC:D0:C1:A8:0F:DD:EB:B8:65:2A:67:11:51:E2:D1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0A0eeYXc0MGoD93ruGUqZxFR4tE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
91:e9:14:0b:53:fb:a7:fb:1b:86:e0:bf:c5:ab:ff:6e:f0:cc:
fb:f1:77:77:6d:77:28:b5:d8:fb:8d:4f:d2:24:8c:4c:34:88:
7e:cb:82:ee:1e:25:a9:0a:39:a5:16:be:4f:48:28:52:39:c4:
33:a8:72:e0:cd:e8:f0:c8:90:ce:19:5a:83:c6:b1:ee:e8:80:
56:ec:04:82:3b:d2:83:f2:cd:73:97:cc:31:ca:10:26:0d:93:
eb:a8:2d:57:22:91:0f:16:75:03:9b:03:d2:f7:38:05:1e:e5:
f9:b3:11:0e:e0:50:a7:88:12:23:20:6c:d2:d2:90:c0:e5:38:
ff:54:d3:b8:1e:30:fa:fd:4e:db:e0:e8:ff:a4:63:3c:6e:f2:
32:d3:6a:fe:78:bd:0d:05:58:83:46:a3:25:93:46:47:0a:bd:
7e:ec:e6:6e:d2:6e:85:71:ae:0a:91:7d:88:68:a6:3e:7d:9f:
87:3b:93:da:f5:b0:b7:6e:c8:b3:f7:60:e8:10:9b:4c:96:6a:
78:37:c6:95:26:69:9c:58:89:f9:88:72:7a:0f:d5:ba:cc:7f:
81:39:eb:38:c4:69:b5:6c:5f:8b:f3:63:13:e5:e1:e2:96:78:
7c:b9:08:3d:57:6b:bb:50:58:57:d8:00:87:16:c2:3e:2d:5d:
51:e8:90:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:00:13 2025 by rpki-client