Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0c2TMGk-GdEuZwmnj23-7kbzoV8.roa
File: 0c2TMGk-GdEuZwmnj23-7kbzoV8.roa (raw, json)
Hash identifier: Mi/XDfJb6lFJAVzwgf6xx2bNUwbGZAaArv04+ffEgig=
Subject key identifier: D1:CD:93:30:69:3E:19:D1:2E:67:09:A7:8F:6D:FE:EE:46:F3:A1:5F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188939D7DE6EA991CA51DDB1FE7FDB0FFFC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0c2TMGk-GdEuZwmnj23-7kbzoV8.roa
Signing time: Wed 07 Jun 2023 02:09:12 +0000
ROA not before: Wed 07 Jun 2023 02:09:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:93:9d:7d:e6:ea:99:1c:a5:1d:db:1f:e7:fd:b0:ff:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 7 02:09:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d1cd9330693e19d12e6709a78f6dfeee46f3a15f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:9c:71:9b:4f:9d:8e:19:60:dd:e0:ec:51:60:
75:a3:68:b1:8f:1c:3d:5f:b4:9e:0b:a8:71:cb:30:
0d:63:ed:d4:44:aa:dc:77:1e:09:18:d2:e0:f7:1d:
ed:c1:33:b9:86:48:fc:98:d4:d2:11:3b:e8:99:ac:
c7:80:7c:8f:8c:49:b8:f2:f3:21:3e:67:7d:0a:51:
64:83:72:b2:bc:b4:c6:85:50:ee:e4:ea:4e:05:58:
5f:35:a5:d7:a8:0d:6f:72:87:a8:50:3a:89:43:1e:
80:bf:f2:91:02:ea:a6:30:47:83:97:5e:73:2a:ad:
be:69:df:bd:16:24:8f:1d:fc:de:b2:02:f8:e0:a7:
22:b7:0a:65:20:a2:54:25:7c:95:20:ff:d1:7f:0f:
cb:cc:eb:7b:fd:28:17:2c:1b:75:92:49:c5:f2:13:
1f:fd:4d:d5:44:85:99:cf:23:f2:de:29:4e:92:19:
ad:d3:12:de:9e:22:ce:ca:3c:a0:e9:d4:8c:3c:01:
a6:09:12:3f:d1:40:01:91:6d:42:47:60:56:42:ea:
cf:99:4f:c7:d7:71:0b:61:27:39:20:a4:9c:27:89:
7b:32:b9:b6:e3:2a:f0:d1:ab:b5:e9:36:d1:fc:55:
4a:67:f2:d8:37:2c:09:41:1a:94:06:df:83:b2:98:
16:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:CD:93:30:69:3E:19:D1:2E:67:09:A7:8F:6D:FE:EE:46:F3:A1:5F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0c2TMGk-GdEuZwmnj23-7kbzoV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
26:63:56:7a:81:3a:14:d1:7e:02:39:9c:00:e4:8a:e5:c9:e9:
09:6b:e4:3f:6d:5d:c1:01:8f:07:27:4b:ba:97:26:98:5a:a8:
d1:d8:1f:c1:5f:fd:01:ae:de:51:6c:de:68:15:55:02:64:39:
6c:1b:06:dd:b3:93:8e:72:fb:93:2a:f3:b0:09:12:1f:72:2e:
e3:0a:81:5c:ef:f1:08:92:2e:2b:44:b2:72:39:c9:07:7b:37:
1d:fc:d9:f5:e2:36:57:e9:36:b9:f4:29:af:f8:d1:fc:b8:1c:
7c:bd:ab:9e:65:1a:0e:52:ac:90:2d:d7:3d:02:c7:df:6c:59:
81:60:e4:b6:b7:2f:22:2f:96:80:ee:bc:9b:9d:1d:f4:fa:eb:
38:80:a0:52:97:e7:88:69:d7:fa:38:0f:ff:43:32:c3:c2:e2:
19:ca:14:5f:d6:c4:c8:38:78:cc:15:40:08:31:ac:21:f2:2c:
ab:0c:65:54:02:9c:10:c7:4b:e5:91:3c:e0:6e:df:a1:ac:f1:
b6:11:e6:03:6d:da:31:08:43:7a:6d:54:1f:c2:b4:3d:41:7c:
2a:b1:88:a1:18:c7:ca:da:d4:c6:86:6e:1a:6c:33:db:ac:7a:
e9:d9:ac:6b:e3:a0:83:c1:b8:09:d7:44:ea:70:2b:e8:8b:86:
22:4e:81:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:34:53 2025 by rpki-client