Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-07WhQQQsiAKkuOeVyPkHVg96xM.roa
File: 1-07WhQQQsiAKkuOeVyPkHVg96xM.roa (raw, json)
Hash identifier: WvbdRy4NDK3Ib6ERe72Ab9Lc4HkOJZreYOfnNtrSjSs=
Subject key identifier: FB:4E:D6:85:04:10:B2:20:0A:92:E3:9E:57:23:E4:1D:58:3D:EB:13
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01867EA1C8A681683EC679998C04569118AD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-07WhQQQsiAKkuOeVyPkHVg96xM.roa
Signing time: Thu 23 Feb 2023 14:16:17 +0000
ROA not before: Thu 23 Feb 2023 14:16:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7e:a1:c8:a6:81:68:3e:c6:79:99:8c:04:56:91:18:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 23 14:16:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb4ed6850410b2200a92e39e5723e41d583deb13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:58:15:1a:99:87:fb:56:e8:87:57:59:9d:1d:
8d:3d:bd:8a:5d:95:30:ac:a8:9c:69:f7:35:00:0d:
8a:4f:19:72:08:a3:0d:82:67:be:c5:b9:d0:43:ce:
19:35:c0:d7:03:91:b0:47:8c:a3:95:3e:df:91:50:
88:42:7d:40:ff:ae:5e:a1:76:0b:23:ba:7b:40:b8:
22:83:47:6f:f2:f6:88:f6:d0:34:d1:c0:0e:f3:55:
c9:27:12:6f:e2:ef:b4:4e:26:28:13:3d:43:4b:75:
66:df:9d:a3:1a:83:40:60:04:0e:3f:4a:29:34:f2:
4d:47:6c:8c:3c:13:d8:f2:77:4c:bb:65:da:68:bf:
2a:be:10:18:6b:90:b3:85:1c:a9:28:24:0d:cb:9f:
48:f8:85:80:fa:6a:a3:f9:35:06:45:03:65:e9:54:
ee:79:0c:e0:ed:2f:8b:df:02:53:dd:5b:69:aa:6c:
2b:c5:27:41:4f:a6:8d:b5:96:f3:a5:c1:5f:24:ee:
89:bf:d9:78:5b:32:25:79:2e:27:d2:a5:36:db:3c:
7d:a9:fd:e5:03:ef:2b:39:ac:22:64:7d:e6:66:fd:
ae:b2:5b:fb:27:7c:35:2f:ef:0f:45:e3:85:10:80:
83:b5:4b:5a:8b:5f:b9:56:62:3a:4f:23:99:16:79:
d7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:4E:D6:85:04:10:B2:20:0A:92:E3:9E:57:23:E4:1D:58:3D:EB:13
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-07WhQQQsiAKkuOeVyPkHVg96xM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8a:97:c1:00:16:f4:89:88:62:f1:cb:75:71:27:8f:81:f2:48:
1b:7c:9a:18:07:52:8f:ae:07:51:75:dc:3b:b1:4a:87:5d:bb:
ee:05:d7:50:99:b5:31:3e:76:81:2d:ea:aa:ed:d0:a4:93:82:
3a:d6:d6:7f:6a:b3:6b:20:88:99:6f:d3:12:65:54:0e:76:e6:
04:77:c6:f5:c1:7a:79:e4:1c:7d:ca:4f:e5:75:ea:fb:81:58:
9d:95:51:2b:fd:f5:18:2b:e5:0c:22:ae:21:00:86:29:ce:f7:
e1:03:cf:45:46:ae:41:13:7b:6b:67:57:a2:08:5a:25:3c:c9:
18:57:7f:28:6f:50:a5:64:2c:20:2c:95:ab:d1:cc:68:06:38:
8a:9e:c0:6b:54:73:2f:b0:dd:8e:c9:ba:77:ce:80:f6:63:33:
b8:57:d2:fb:9e:97:0d:45:df:eb:5a:9a:bd:a2:6d:cc:ba:e1:
df:51:7d:d3:94:28:12:a2:aa:bf:d7:8f:00:3a:c7:cd:2e:c8:
07:69:17:f3:3b:df:2b:27:35:61:83:8c:20:72:04:71:b3:6d:
7e:3f:37:a6:64:74:c2:be:9b:8d:af:ca:ad:80:f9:ae:1d:06:
4d:d7:39:74:4a:96:90:52:1c:46:07:6d:10:6f:77:4e:88:7c:
06:31:f1:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:13:39 2025 by rpki-client