Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-0IUvrEK9OHuTMnMUFs0fmTWuR4.roa
File: 1-0IUvrEK9OHuTMnMUFs0fmTWuR4.roa (raw, json)
Hash identifier: wwkqecEAiROfFwIOGHzBSAuLmnlqC6RCSTJsHbnkusg=
Subject key identifier: FB:42:14:BE:B1:0A:F4:E1:EE:4C:C9:CC:50:5B:34:7E:64:D6:B9:1E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188DA6D11D84A93826A3C8FD1F811198568
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-0IUvrEK9OHuTMnMUFs0fmTWuR4.roa
Signing time: Tue 20 Jun 2023 20:09:20 +0000
ROA not before: Tue 20 Jun 2023 20:09:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:da:6d:11:d8:4a:93:82:6a:3c:8f:d1:f8:11:19:85:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 20 20:09:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb4214beb10af4e1ee4cc9cc505b347e64d6b91e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a5:8e:97:2d:a2:0a:48:36:bd:ff:5a:9b:94:
a5:5b:7b:54:8a:39:f6:04:1e:bc:07:a6:80:bd:fd:
e3:ed:41:f7:52:18:45:c5:3c:3b:0f:b1:3a:7d:da:
c8:4e:d9:45:e3:7a:a1:39:78:33:59:57:fb:b2:69:
93:40:3b:fb:f6:11:38:56:53:ca:ff:8b:a9:cb:dd:
20:4f:04:9d:da:de:a5:21:6b:60:33:f9:31:c8:26:
fd:17:22:98:8b:2e:69:27:40:5b:90:c1:7b:1f:c6:
a2:78:a4:ea:17:59:11:3c:f6:19:64:6a:62:62:dd:
aa:ed:b6:e1:53:e6:76:13:17:b2:8c:1a:c3:2f:70:
5a:f6:cf:25:7f:e3:55:74:77:f6:ca:95:40:d4:ee:
24:49:41:00:03:92:45:bb:72:ba:95:e8:c5:6f:0c:
61:86:51:8c:e4:82:6f:a4:8b:61:b5:d0:da:b1:42:
e3:b9:4a:d2:b1:25:e7:07:db:d7:a8:df:4c:34:0b:
d1:c3:49:bf:86:43:61:e1:c4:64:d3:2d:64:de:f0:
1e:73:e2:2d:de:e2:0a:6c:d4:9b:d3:d0:13:67:36:
be:80:c1:9e:ce:eb:d0:14:b6:c5:98:f3:3d:6a:0b:
9f:db:64:65:70:6d:ed:df:33:2a:18:a3:5a:12:31:
8d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:42:14:BE:B1:0A:F4:E1:EE:4C:C9:CC:50:5B:34:7E:64:D6:B9:1E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-0IUvrEK9OHuTMnMUFs0fmTWuR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
35:fa:83:e7:f3:0d:81:1a:91:34:1c:72:27:bb:1a:58:e6:87:
78:2f:86:46:2b:8b:aa:55:ea:42:84:86:d9:2c:81:55:fa:0b:
9c:52:2d:38:2a:68:02:48:ea:de:22:d7:90:f2:3e:b5:85:dc:
66:59:36:a2:cb:00:48:07:13:76:f9:c3:2e:70:42:ba:93:64:
54:82:9d:99:e7:89:2e:b5:ac:b0:d4:8d:40:9a:bd:02:93:6a:
30:96:f2:0e:38:bc:b2:cc:d0:9c:86:95:8f:25:0f:9b:55:4b:
a9:ae:ce:54:3e:9f:a3:09:49:2f:5b:70:94:16:06:8b:3b:cb:
9c:be:58:d4:fd:52:9e:39:1e:a4:fd:e4:a3:3e:46:52:65:5c:
d2:1e:0f:d2:aa:51:e1:a4:e2:2b:1c:a8:5f:c5:4f:98:a1:47:
f6:9b:3c:85:7c:b6:b7:45:b0:34:da:56:ec:a0:c5:80:99:ec:
31:e1:8b:9d:56:77:4b:e9:00:50:3c:e0:04:86:25:7d:c3:04:
ec:5b:54:62:31:d6:de:79:e9:70:d7:1b:ae:df:18:e1:34:90:
3d:f7:5e:92:49:ab:a1:43:21:3b:38:91:5b:4d:51:8d:5c:ab:
03:e7:32:db:02:c1:75:4e:2a:ee:cf:a9:be:93:5e:38:f9:e6:
1b:de:fd:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 06:05:40 2025 by rpki-client