Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0mCCXSL-usnAnHN_VE6irQE1Dds.roa
File: 0mCCXSL-usnAnHN_VE6irQE1Dds.roa (raw, json)
Hash identifier: h57XmDPJZhobHlpW4p+xZ3i+7LOWZ60hppN5QVtsFxo=
Subject key identifier: D2:60:82:5D:22:FE:BA:C9:C0:9C:73:7F:54:4E:A2:AD:01:35:0D:DB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189FB77EDAC82671AE82E6511F55FA5BB15
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0mCCXSL-usnAnHN_VE6irQE1Dds.roa
Signing time: Tue 15 Aug 2023 23:11:28 +0000
ROA not before: Tue 15 Aug 2023 23:11:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:fb:77:ed:ac:82:67:1a:e8:2e:65:11:f5:5f:a5:bb:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 15 23:11:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d260825d22febac9c09c737f544ea2ad01350ddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b2:45:d0:73:cb:fa:78:ee:26:f4:90:8b:76:
52:9e:98:8a:77:f9:65:22:7b:4d:67:08:1f:ff:14:
89:b6:fc:85:d3:ed:4a:71:1d:21:9b:b2:b2:4e:8b:
08:22:91:19:c8:8c:ff:e4:46:b3:27:2a:60:1e:e7:
bb:c2:ad:c0:cc:40:39:66:6b:31:f9:f5:0f:ea:ff:
7f:2a:5e:8c:73:1a:c4:fd:f4:6a:1c:e3:c2:dc:1e:
29:fe:c2:19:09:f1:c2:d3:2f:d9:d2:0f:88:9a:05:
4c:8c:f3:bb:08:63:24:02:59:49:8a:ba:2a:64:04:
6e:9c:33:95:e3:8f:f1:15:8b:a6:16:f5:08:64:06:
5a:f0:80:b3:f5:27:20:1b:2c:d0:e7:61:09:7d:6b:
e4:9a:ec:4e:21:ee:20:5e:6c:9c:a1:db:4f:54:64:
fa:4c:3a:91:51:fc:21:75:e9:3f:4c:12:43:0f:f8:
c3:5f:84:6b:f9:71:74:2d:38:a0:2d:a7:73:aa:f2:
92:11:51:4d:9b:94:2e:09:c6:1f:08:ee:dd:52:f0:
32:6e:fb:58:62:a7:3a:f9:98:2d:03:19:85:39:88:
df:28:91:77:2f:4e:0a:17:d7:73:e3:fb:a9:2c:35:
5c:6e:68:5c:9c:d9:57:27:50:a8:6c:3e:21:8e:8f:
ff:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:60:82:5D:22:FE:BA:C9:C0:9C:73:7F:54:4E:A2:AD:01:35:0D:DB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0mCCXSL-usnAnHN_VE6irQE1Dds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5e:4f:a4:32:23:87:78:40:af:8e:b2:da:83:62:b1:b5:93:09:
4b:49:c5:9a:68:fc:22:d6:62:5e:d5:2e:5c:c1:0f:e1:26:53:
9a:56:b4:ec:72:18:6e:32:ae:98:51:f0:03:e7:2a:63:07:04:
ad:48:75:8b:c9:8c:63:45:c4:4d:3d:10:cb:28:28:d0:94:8b:
72:58:13:95:23:8a:f5:3a:75:25:38:0d:d9:7e:a5:fd:92:4b:
bb:51:10:cf:ca:07:a5:aa:1d:ca:3a:10:ce:b4:e0:5a:6f:83:
88:4d:28:7f:e2:63:5c:73:aa:d1:b6:5b:be:19:b4:86:1b:c2:
d7:c7:02:f2:66:68:b1:91:ea:7d:08:3f:95:fc:85:3d:67:23:
32:df:6d:c7:ff:d8:9f:82:56:bd:21:1c:67:3b:d8:22:a7:c3:
60:40:42:49:81:8a:98:ad:a6:13:04:84:50:ec:3d:03:ad:d6:
e9:b3:7f:6a:e7:70:77:47:79:64:32:75:e3:dd:07:86:84:b5:
37:ca:35:ca:34:03:fd:f6:73:6b:1b:00:d2:68:39:f0:ce:24:
17:c0:5c:34:8f:84:34:79:e2:b3:00:fe:9f:3d:5f:64:45:91:
8e:fc:a8:ee:fc:fe:af:83:64:f3:a9:bf:ec:1f:80:f2:24:ad:
15:95:54:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 21:54:01 2025 by rpki-client