Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2-68fQi0gzTieApfkdNqQjPraNU.roa
File: 2-68fQi0gzTieApfkdNqQjPraNU.roa (raw, json)
Hash identifier: tDggiACSrBHvpaNtUhLnmJYqtKH7kJOwIOSzcr78FxU=
Subject key identifier: DB:EE:BC:7D:08:B4:83:34:E2:78:0A:5F:91:D3:6A:42:33:EB:68:D5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018974EDC8C9F3171CB68C2BDCC8CF1F8EEC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2-68fQi0gzTieApfkdNqQjPraNU.roa
Signing time: Thu 20 Jul 2023 20:11:27 +0000
ROA not before: Thu 20 Jul 2023 20:11:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:74:ed:c8:c9:f3:17:1c:b6:8c:2b:dc:c8:cf:1f:8e:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 20 20:11:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dbeebc7d08b48334e2780a5f91d36a4233eb68d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:4d:ca:e6:54:1f:8b:bf:a3:88:9f:f0:a6:21:
e1:6e:6e:3b:4e:4e:13:de:69:d2:c1:9e:9e:6c:a8:
ac:84:b0:e8:2e:05:dd:09:55:07:74:61:48:19:a8:
b7:c5:80:44:51:c7:9a:3e:52:40:24:06:50:76:7f:
f0:d4:45:e4:c3:30:06:a8:ff:21:80:3f:46:d6:42:
4a:0e:62:23:a4:1c:05:7a:93:2a:d7:8c:66:9a:5a:
8d:ef:56:25:ab:37:12:af:dc:a3:93:41:87:d7:d7:
09:9f:07:c1:26:3a:e6:94:16:94:35:9a:f8:a7:19:
28:fd:33:f5:12:15:4b:fe:d2:50:1e:ef:d8:15:7f:
4a:24:cb:94:92:ea:b0:2e:9b:5d:86:fc:14:70:77:
5b:9c:f4:fa:16:f9:5e:a2:5f:89:18:9d:6c:f7:74:
6a:37:e3:d0:ba:b7:c1:25:9a:91:77:6c:04:5c:b2:
28:98:bb:92:de:81:31:45:05:69:d1:d2:18:d8:e5:
26:c3:fc:81:6f:4a:ab:e5:ca:24:5f:18:c7:d7:82:
1f:e8:66:f0:10:59:12:7a:01:99:b9:31:b5:3b:5a:
08:1d:ea:05:8f:4d:3a:9b:1c:e2:9a:14:15:94:b0:
a4:22:3c:e9:3a:63:2d:76:10:50:5e:c3:61:32:2f:
7b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:EE:BC:7D:08:B4:83:34:E2:78:0A:5F:91:D3:6A:42:33:EB:68:D5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2-68fQi0gzTieApfkdNqQjPraNU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0a:c6:5d:c2:36:ab:7f:0c:be:ee:95:54:02:45:75:58:03:51:
fb:a0:e3:a1:59:fd:41:cb:2d:36:1e:d4:9e:ba:d6:71:c9:36:
72:fe:71:38:f2:3c:0f:9e:cb:39:03:03:79:02:eb:2f:ec:1d:
a1:e4:ed:6f:9c:80:47:31:54:cf:4a:76:75:6b:b1:62:ac:ad:
83:4a:3e:bc:e2:cf:40:7d:c7:e5:5f:23:84:95:b7:8e:cb:40:
f9:c5:af:fa:24:b7:a3:9f:3d:09:87:77:a4:8c:63:a0:78:9a:
43:2c:4d:87:65:07:5c:94:e2:68:c6:08:63:97:56:d2:99:99:
29:1f:86:20:78:84:1e:b2:03:4f:40:c1:9b:9b:23:af:c1:9c:
54:8c:8c:bc:35:9c:f7:6b:1b:2d:32:26:85:c0:3f:01:24:95:
bb:6b:8d:6e:7f:b1:16:d8:86:c3:e6:98:a4:b7:e7:46:8d:14:
fe:29:3b:11:96:61:d2:e0:92:cd:d0:f3:ed:60:8e:b8:d3:62:
dc:8c:08:87:9c:23:88:f2:d4:67:4a:43:70:3b:80:05:51:ad:
d1:63:ff:00:1d:2b:79:49:8b:51:db:f5:f9:ed:8c:88:d5:93:
c8:cc:de:f4:b2:5f:53:e7:b9:bd:35:3b:ac:8e:e4:28:04:01:
a3:ea:45:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:36:21 2025 by rpki-client