Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-0PoLijTECEC6n7esXg3uvV1Db4.roa
File: 1-0PoLijTECEC6n7esXg3uvV1Db4.roa (raw, json)
Hash identifier: YmMeqkFqJz/gfQbTWgsh2VQKUxjbsx7Sed0qhtEDoGE=
Subject key identifier: FB:43:E8:2E:28:D3:10:21:02:EA:7E:DE:B1:78:37:BA:F5:75:0D:BE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187B10620DBA7043C458C86165D4573BE65
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-0PoLijTECEC6n7esXg3uvV1Db4.roa
Signing time: Mon 24 Apr 2023 02:09:41 +0000
ROA not before: Mon 24 Apr 2023 02:09:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b1:06:20:db:a7:04:3c:45:8c:86:16:5d:45:73:be:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 24 02:09:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb43e82e28d3102102ea7edeb17837baf5750dbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:35:da:52:83:ca:8e:2b:04:f6:7f:53:d6:3f:
24:ad:5b:bb:96:90:33:e8:cf:cd:0e:81:0a:cb:dd:
9f:32:22:0e:12:b8:3e:6d:dd:91:05:98:6c:72:8c:
71:0f:8c:aa:cb:c4:fc:cd:b7:ce:56:e1:f3:07:76:
00:99:d7:40:17:64:29:5a:dc:2b:31:f7:f0:2c:66:
8a:20:01:59:05:ed:c3:bf:ef:b0:b8:74:6f:ca:6a:
d9:3e:e6:bc:39:7c:85:ba:49:83:25:01:04:ee:80:
59:2a:2a:bf:07:3f:22:d6:3b:dc:5e:ef:80:6b:c7:
42:b4:a1:69:58:eb:cd:53:34:1c:fa:e5:1b:6b:12:
1d:cc:19:fd:83:c8:76:17:a3:1c:a0:4b:b7:3e:ba:
b8:de:1b:1a:b2:27:a6:53:af:88:6d:e8:9e:66:a0:
75:0e:ee:d2:a9:c0:07:d4:6d:c2:ca:b7:b8:de:f1:
b7:08:e0:83:ff:ea:3e:69:52:fd:21:cb:ed:94:dd:
c5:d2:86:76:03:6b:28:45:87:12:12:70:b3:6f:0c:
30:6b:25:92:0a:3b:1c:54:5d:a2:bb:12:ee:78:7a:
55:01:5d:74:3d:ce:bb:d1:21:90:bf:d9:22:d6:20:
0d:39:48:23:a5:61:a9:87:99:fa:94:6d:8e:d1:7d:
44:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:43:E8:2E:28:D3:10:21:02:EA:7E:DE:B1:78:37:BA:F5:75:0D:BE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-0PoLijTECEC6n7esXg3uvV1Db4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8e:f7:aa:89:bb:5a:ec:f5:ae:5b:5b:4a:c1:24:51:f1:0b:da:
34:4f:2f:54:3c:9a:31:8d:0f:7f:9d:71:0c:38:07:34:04:a8:
b0:3b:6f:b9:07:51:f0:a6:ee:d5:72:94:97:be:48:24:37:17:
71:a3:f4:eb:1c:25:6e:c1:98:6f:6a:00:1b:02:a0:55:0a:ad:
f6:53:bc:33:26:c7:d9:68:2c:a7:e9:75:99:d9:14:cb:c1:f1:
cd:b3:08:2f:61:40:1e:d8:37:cd:1c:4a:45:d0:c2:ad:7c:b7:
26:b6:6a:e8:08:28:d9:16:25:c5:39:35:da:ba:66:49:ef:be:
57:6a:e5:74:4a:25:60:54:ad:7f:d1:93:62:10:bf:3b:66:86:
20:63:0e:fb:f2:e6:2c:6c:fb:27:27:36:99:a6:bc:19:10:be:
39:98:78:23:d6:c5:5f:35:16:9e:07:61:91:60:1a:d7:ef:b8:
1e:44:9a:82:f0:ad:96:9e:56:8b:75:26:a7:1c:4b:78:b9:3f:
c0:09:ac:3f:2e:eb:22:1a:55:3c:61:c8:2b:d2:05:e5:ae:19:
c5:f1:00:73:b3:c7:13:86:c5:d9:44:b7:1d:e7:45:bd:72:1d:
a8:18:f7:10:bd:7f:0d:91:b5:b8:c9:9a:e0:12:f0:3a:a6:97:
d8:11:5d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:01:06 2025 by rpki-client