Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0NVHiRGG58t05qwu3FAbYFJubLc.roa
File: 0NVHiRGG58t05qwu3FAbYFJubLc.roa (raw, json)
Hash identifier: IEJjHkNq61nSl/ZMcMimXwAXDQta7olcn/I9szzUdsw=
Subject key identifier: D0:D5:47:89:11:86:E7:CB:74:E6:AC:2E:DC:50:1B:60:52:6E:6C:B7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018893D72C5900A234A0F1EB020E676CD506
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0NVHiRGG58t05qwu3FAbYFJubLc.roa
Signing time: Wed 07 Jun 2023 03:12:12 +0000
ROA not before: Wed 07 Jun 2023 03:12:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:93:d7:2c:59:00:a2:34:a0:f1:eb:02:0e:67:6c:d5:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 7 03:12:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d0d547891186e7cb74e6ac2edc501b60526e6cb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:72:eb:bd:2e:9b:8c:d8:1e:e4:9e:0f:37:01:
e9:6e:cd:1c:bf:5a:13:97:71:93:c3:a9:27:1b:1d:
c5:8e:e7:36:13:c5:d1:89:96:44:ba:16:ba:95:0e:
69:68:23:a8:97:ef:b9:cf:13:aa:13:6e:80:3d:07:
07:92:30:69:6c:b1:26:5c:d3:28:d9:1c:a5:55:3c:
c1:02:fc:8e:c4:b1:5a:d1:92:a3:45:2a:9e:c6:60:
ea:9b:5e:ae:1e:fb:71:f6:e9:2e:72:e5:49:48:12:
79:4f:1d:7f:32:63:86:0c:1f:e5:f3:52:3d:22:12:
b0:41:a1:30:36:b2:79:93:c6:f1:76:b2:0c:19:6e:
73:db:5c:da:ec:ef:a5:c0:17:d2:0d:0b:80:a2:b7:
f2:60:70:81:f2:31:18:f7:e8:a5:75:7a:a0:d0:11:
6f:64:97:c7:b7:35:9b:df:63:18:52:8b:2d:26:fe:
f2:b5:6f:c2:dd:74:34:a2:0a:59:62:81:6a:4a:fa:
c6:18:06:a2:a6:77:07:c0:e6:3f:ea:e8:57:cf:55:
ed:73:46:61:9f:73:94:24:10:f0:94:f9:5b:fe:ad:
c1:26:00:fc:c9:df:bd:44:2a:19:1a:94:e2:ee:bf:
49:b0:b9:bc:e2:43:bf:d4:6e:cc:ac:7d:fd:e7:a4:
fb:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:D5:47:89:11:86:E7:CB:74:E6:AC:2E:DC:50:1B:60:52:6E:6C:B7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0NVHiRGG58t05qwu3FAbYFJubLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b4:a4:4d:2f:28:33:0a:ea:d0:a9:6b:3a:11:5f:4d:74:ff:83:
96:c7:8e:58:54:54:6f:89:58:0e:c7:9a:1d:c1:e0:06:fa:31:
6d:b4:59:21:97:0b:cb:10:0b:73:2e:24:70:68:90:72:9d:47:
32:fd:73:fd:13:ea:cd:a8:25:49:ad:b5:1a:cd:e1:ce:22:38:
e4:87:b5:42:95:3c:65:91:1d:96:16:83:57:b8:b9:a2:a9:05:
af:93:3a:92:a2:b5:db:9a:27:a0:75:39:30:88:00:2e:5a:af:
0f:ae:28:ae:f5:0e:87:ed:b9:a3:cb:f3:79:6a:e3:62:7e:ae:
99:b0:8d:97:46:c6:a3:4d:d0:73:9e:67:d5:bf:7b:25:c3:b7:
ce:fa:90:ef:9a:8a:a1:a1:4f:e5:8d:b3:04:23:ee:30:d8:bc:
7b:d8:11:4e:2e:a6:ad:70:a4:68:27:6d:7f:12:c9:4c:52:9b:
89:e4:11:68:cc:04:54:46:71:d1:a9:01:2f:fe:1c:2c:bd:ed:
a8:e4:28:50:cc:20:3d:db:62:fb:34:b3:6c:28:41:c3:76:37:
23:07:13:48:0b:7b:d8:96:5e:89:79:ab:47:5a:8a:c1:3d:42:
9a:b2:b5:55:1b:59:b7:45:23:71:3a:5f:83:39:89:d0:c8:5a:
37:c2:b8:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:13:58 2025 by rpki-client