Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1RBzHZU1lX5DGOyGa0gwI1rHhvA.roa
File: 1RBzHZU1lX5DGOyGa0gwI1rHhvA.roa (raw, json)
Hash identifier: L3vJKhO9RCvyCewdUVGfL5wWHT4QcUOpW+5NC9wgI+U=
Subject key identifier: D5:10:73:1D:95:35:95:7E:43:18:EC:86:6B:48:30:23:5A:C7:86:F0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01897E8F4D16E8D664347785BB80625E0E62
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1RBzHZU1lX5DGOyGa0gwI1rHhvA.roa
Signing time: Sat 22 Jul 2023 17:04:27 +0000
ROA not before: Sat 22 Jul 2023 17:04:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:189:7e8f:2352/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:7e:8f:4d:16:e8:d6:64:34:77:85:bb:80:62:5e:0e:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 22 17:04:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d510731d9535957e4318ec866b4830235ac786f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a8:83:9c:71:82:6f:c8:98:40:9c:ef:e8:ec:
71:39:f6:3c:fe:f8:42:92:15:42:d0:66:b6:3a:eb:
41:15:8d:58:87:fa:0e:f0:14:f5:0e:b0:92:8b:ee:
af:66:24:f7:64:ff:a0:4b:6d:bc:46:38:89:39:97:
0e:66:03:8d:e0:8c:9e:18:7c:61:e6:6c:77:93:cf:
fc:d1:99:dc:b8:46:c4:7a:cd:ed:46:81:06:7c:ff:
cb:f5:81:0d:09:0c:ec:1e:32:2b:91:db:61:c1:f2:
ea:d4:b6:4c:87:10:7b:3b:b8:cd:68:b3:3c:ff:43:
dd:cd:ff:25:c1:cc:59:3e:0e:70:6a:d1:08:fb:51:
bd:33:68:57:4c:c5:e4:32:a8:4a:17:82:1e:45:71:
62:98:d3:62:f0:4f:e0:15:b6:df:ef:2c:98:dc:71:
b6:73:11:c0:ed:05:c7:ef:c8:3f:d3:ee:9b:5f:24:
73:dc:f5:c0:82:0e:84:00:f7:1e:93:d2:d4:3b:18:
a4:d2:ea:e6:00:e4:a1:48:1b:81:7c:ba:ac:1e:4d:
57:aa:fc:8e:20:f8:28:76:0d:99:df:bd:63:ae:b2:
70:18:ed:54:f2:f9:f8:77:34:c1:6a:dd:91:f6:04:
cb:01:42:da:a6:ab:3d:3a:97:f9:fb:aa:1c:2f:2e:
9e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:10:73:1D:95:35:95:7E:43:18:EC:86:6B:48:30:23:5A:C7:86:F0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1RBzHZU1lX5DGOyGa0gwI1rHhvA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3f:78:bf:9d:30:2f:e9:c5:9e:5f:c5:a6:a4:5b:ad:3b:93:04:
69:f1:e5:90:99:d7:04:39:ff:f6:19:65:fc:54:56:af:85:98:
b9:17:bf:44:2d:a7:43:79:ab:b3:84:1b:53:dc:3d:a1:1f:c2:
f7:59:f7:0d:6f:ba:ba:75:96:7b:e7:d2:d7:2f:cc:e7:11:20:
2c:0c:cd:77:45:35:57:a0:3c:9a:22:4e:e1:8c:2c:cf:a3:68:
a1:95:21:9e:12:31:32:a4:78:e7:ee:8f:09:34:6e:ef:66:c9:
eb:39:28:0f:35:e4:35:80:d8:bb:98:5f:72:f6:6e:2b:3e:42:
f9:35:97:0b:0d:04:6e:f4:ee:9a:e5:5c:3c:d4:b7:d8:00:c8:
b3:9f:83:b1:83:9e:ec:63:a0:a4:a2:0f:bd:8d:2d:d8:06:ee:
ab:ec:85:3d:23:c1:ba:36:9a:22:39:d1:1a:99:b7:cc:87:7b:
fa:3b:22:38:37:c9:87:d0:b6:d0:b5:08:36:a5:0e:a0:d1:31:
e9:6b:cc:ca:e3:75:58:cc:8e:58:ea:7c:8c:ee:ec:11:8b:30:
94:ea:22:be:a3:4a:10:e9:32:41:7f:93:ea:8f:6d:8e:34:fd:
27:a1:28:79:20:db:b3:3e:87:ae:e0:55:51:b2:16:8c:17:46:
57:dd:7f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 21:44:07 2025 by rpki-client