Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-n8dlBqgw353X4ys6C8Luvr8_1o.roa
File: 1-n8dlBqgw353X4ys6C8Luvr8_1o.roa (raw, json)
Hash identifier: I1ByDJrWak6BnUIsAVvLKthXHmpQ9szD/POu2fYh50Y=
Subject key identifier: FA:7F:1D:94:1A:A0:C3:7E:77:5F:8C:AC:E8:2F:0B:BA:FA:FC:FF:5A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188CAF9BCF677DDB95766F620A257A1BBD7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-n8dlBqgw353X4ys6C8Luvr8_1o.roa
Signing time: Sat 17 Jun 2023 20:09:04 +0000
ROA not before: Sat 17 Jun 2023 20:09:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:ca:f9:bc:f6:77:dd:b9:57:66:f6:20:a2:57:a1:bb:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 17 20:09:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa7f1d941aa0c37e775f8cace82f0bbafafcff5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:48:20:73:b3:f1:d2:14:4f:d3:f8:bc:e8:7d:
69:8f:4d:6c:44:62:13:53:08:4a:08:d8:1f:42:6b:
c0:43:1b:f8:4f:e0:54:f6:60:ca:f0:bd:ab:56:bf:
c2:b7:c2:d6:2f:56:cb:25:23:4e:f6:61:cd:d2:9e:
c3:42:06:bd:ca:22:26:3b:ef:9b:cb:97:d9:70:03:
cb:f0:3f:79:4b:5b:76:a1:97:56:2a:be:7d:46:cc:
cb:41:7e:0a:76:b4:be:79:3d:f9:cf:3c:9a:60:49:
f5:f7:c8:75:4d:4e:fc:ac:da:90:67:8a:6e:43:76:
3c:02:41:be:4e:14:d4:96:be:5f:3f:37:1d:86:89:
7b:0a:81:99:63:8d:08:84:af:ec:0a:61:5a:9d:5d:
c8:1b:e1:5f:66:78:1d:c6:12:9c:b0:7a:94:14:77:
7b:c5:40:d9:2f:d6:d3:a2:a9:b2:1b:d2:d9:ba:bb:
f5:55:00:33:8d:0d:62:15:a5:6c:7d:2f:d9:cc:74:
1e:4a:31:0f:6c:5d:8d:31:5b:e1:3b:00:95:83:17:
b6:4c:89:7f:83:59:0b:69:1d:f3:54:e6:df:a8:76:
7a:1d:85:bc:cf:bd:8d:21:b1:16:27:8a:d0:86:42:
b5:83:dd:0c:8d:71:5c:d4:60:ae:8d:09:ca:32:0f:
f3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:7F:1D:94:1A:A0:C3:7E:77:5F:8C:AC:E8:2F:0B:BA:FA:FC:FF:5A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-n8dlBqgw353X4ys6C8Luvr8_1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
aa:30:5f:09:56:2e:9d:ee:ec:54:93:54:d1:28:3a:7d:ba:84:
6c:68:8e:f6:3b:17:8a:ac:d3:e9:d1:88:0e:86:85:c5:50:3d:
a6:d2:d8:fc:87:a7:1f:7c:e0:1b:fd:ce:71:1e:81:d3:82:f9:
89:01:05:d0:7c:cc:cb:25:51:11:a9:f4:9f:90:10:c1:bf:e2:
19:b3:a8:26:e0:a4:21:98:87:fa:21:b7:55:25:3d:50:ca:90:
b2:83:87:b2:6f:f3:1f:7c:44:2f:95:16:30:8a:db:c0:1f:db:
1f:8d:a7:9d:ff:02:64:8b:df:5d:b7:0e:f4:15:ff:ec:55:85:
f7:7f:cd:8f:e5:30:1f:d0:3d:e0:68:a0:de:20:d6:e4:cd:9c:
66:0f:9b:5b:11:0c:ff:42:00:c1:e3:8d:bd:93:4f:87:09:25:
a6:d9:b3:0e:08:ca:5b:8f:70:99:fe:cd:06:9f:73:a6:44:f4:
61:a2:54:98:d2:92:1a:6f:bf:b2:2a:5b:11:ee:23:7f:a9:2d:
06:15:90:68:27:c8:fa:fd:6c:94:aa:48:09:4d:77:eb:10:5b:
6b:22:66:5c:d6:57:2b:49:4c:43:32:31:e6:55:69:84:ee:87:
b0:61:03:ab:aa:9f:73:73:98:71:b6:e4:fe:ac:8f:98:c5:4f:
60:b1:b4:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 08:53:16 2025 by rpki-client