Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0wDmbQjgJATMgkoinpN46kEpRT8.roa
File: 0wDmbQjgJATMgkoinpN46kEpRT8.roa (raw, json)
Hash identifier: GiLU/ibxS6rNmLFA5AveUp13NSiixquMDX1sHzMKzkc=
Subject key identifier: D3:00:E6:6D:08:E0:24:04:CC:82:4A:22:9E:93:78:EA:41:29:45:3F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185BE5A38FE281515EBBB41D666432618FD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0wDmbQjgJATMgkoinpN46kEpRT8.roa
Signing time: Tue 17 Jan 2023 06:11:01 +0000
ROA not before: Tue 17 Jan 2023 06:11:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:ba40:6692/128 maxlen: 128
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:be:5a:38:fe:28:15:15:eb:bb:41:d6:66:43:26:18:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 17 06:11:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d300e66d08e02404cc824a229e9378ea4129453f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:35:f1:6f:b3:7b:7c:1c:09:c8:64:e6:e7:91:
25:d8:f7:4f:b7:4e:7f:2c:2a:44:33:13:1c:72:1c:
81:dd:ce:03:9a:8b:5e:cf:3d:b9:ab:a4:26:c8:01:
65:1c:32:23:2f:f5:e8:f9:eb:2f:18:bd:ea:4c:bd:
20:75:fc:b2:f5:e6:71:2f:09:58:40:c3:46:fc:01:
0a:2d:df:a4:2b:b3:8a:e0:b2:7e:dd:90:8c:5a:05:
df:27:5d:7e:2b:52:8c:9b:82:3a:f7:e1:96:7a:de:
c4:75:e5:d3:1e:75:71:80:a6:39:33:b2:3d:4e:e6:
30:f9:3e:7d:2e:68:5c:cc:d3:92:e3:36:bf:25:02:
9d:7f:4d:b4:21:65:d4:4d:45:15:e6:7d:df:56:14:
7f:a3:13:d6:3a:62:ec:85:01:d5:13:cc:08:47:c4:
f7:e0:54:7f:ec:dc:b3:c8:99:46:d2:3a:db:f2:f6:
8f:6d:f8:9f:6e:82:79:3e:bb:60:a9:d1:86:9c:78:
ba:3d:64:63:55:46:0e:d3:7d:c8:1e:f2:22:e2:f9:
c5:e5:0f:81:bb:60:04:bf:bb:b2:48:27:30:a3:1e:
5d:34:3c:d0:f5:b9:9b:40:3d:df:56:4f:47:3c:74:
d4:61:6b:e8:40:25:d0:41:c0:77:bc:dd:34:89:0b:
35:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:00:E6:6D:08:E0:24:04:CC:82:4A:22:9E:93:78:EA:41:29:45:3F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0wDmbQjgJATMgkoinpN46kEpRT8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
75:4c:0a:7d:ca:db:db:e5:16:a8:1e:f0:d7:1a:3b:a3:62:fb:
e3:f2:57:05:0c:0d:bb:30:9c:e6:43:cf:63:d4:fc:90:52:68:
39:44:b6:29:49:a6:18:3a:fb:c3:3f:0c:52:d4:f3:dc:22:56:
71:59:20:f0:15:4d:3f:b1:5a:6b:db:e1:0a:b9:2c:7c:ca:ed:
96:7c:dc:99:0a:2d:87:b9:f3:50:6e:fa:b4:d8:a7:93:da:29:
bd:b2:f7:8e:44:6f:16:b0:b3:be:ec:e8:50:bf:0d:a7:d0:8d:
90:c5:1c:7d:55:ae:57:e0:45:9e:dc:f5:e9:34:9b:9a:0b:22:
e7:d0:0a:99:08:e2:79:9b:24:4e:95:c4:a8:f5:32:57:26:8c:
73:b9:a2:ec:6a:ae:c2:24:0d:e3:3d:64:53:de:b6:af:bb:8c:
34:36:f6:d3:76:ab:e4:fe:71:a3:81:f3:c9:21:a5:84:fc:00:
cf:15:20:6d:d5:c4:f4:9e:a4:16:64:9c:0b:22:e2:36:8d:41:
aa:78:ef:ab:b2:c7:b4:d9:4b:76:f6:40:9c:eb:d6:de:cd:ca:
e6:b5:86:47:54:97:8d:6b:0a:ef:cb:f8:1e:4e:59:e5:c7:90:
86:b5:e9:00:03:85:30:13:6e:dc:a3:f2:18:d4:7a:1e:36:d3:
cb:8e:b8:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 03:35:32 2025 by rpki-client