Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2AjW-erCKR6fuB8TAs3ZMbhyCFw.roa
File: 2AjW-erCKR6fuB8TAs3ZMbhyCFw.roa (raw, json)
Hash identifier: QD4shVPeun89MzZSORSzarTgmSMA2xiMwKI++i8GBQo=
Subject key identifier: D8:08:D6:F9:EA:C2:29:1E:9F:B8:1F:13:02:CD:D9:31:B8:72:08:5C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01893BA3634F57DF08530083332FEBDC8CF3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2AjW-erCKR6fuB8TAs3ZMbhyCFw.roa
Signing time: Sun 09 Jul 2023 17:11:50 +0000
ROA not before: Sun 09 Jul 2023 17:11:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:3b:a3:63:4f:57:df:08:53:00:83:33:2f:eb:dc:8c:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 9 17:11:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d808d6f9eac2291e9fb81f1302cdd931b872085c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c1:57:99:e3:c8:2b:50:fb:e2:c5:30:8e:7d:
6f:bc:21:9f:14:3c:fe:d1:49:f3:c8:fb:9a:c2:a6:
64:5e:c9:4e:a1:2e:15:69:27:08:0b:04:d7:3a:e4:
d0:7d:09:53:75:d2:46:05:90:4d:f3:e2:f5:8f:3f:
0e:94:13:e6:d4:8d:cf:df:40:42:51:2b:ec:08:b2:
0b:34:eb:10:33:13:6c:98:fd:3b:62:c7:d9:3c:c5:
a3:a2:8b:5e:77:b8:ee:fe:4e:33:c3:27:1a:1c:87:
85:41:13:35:c2:b7:65:ea:0f:49:4f:63:85:c6:6b:
0c:09:dc:86:59:e8:9e:ae:8d:5b:72:86:45:02:c3:
43:a5:4b:e9:34:bc:eb:53:f0:f7:b5:4b:f3:0d:5e:
c8:c0:93:42:48:52:70:04:6c:28:6d:ef:4d:3e:b8:
9d:52:b3:5b:8b:24:ca:50:5e:b5:5d:33:44:67:52:
42:59:01:ba:3d:08:27:1f:dd:ff:52:f3:26:29:09:
7d:b7:df:ef:fd:c6:af:76:ff:47:a9:0b:1f:28:a7:
ef:d0:cc:13:c2:cc:07:6c:f4:7f:be:28:3d:70:44:
80:c7:20:1c:e6:31:9f:0e:51:2f:38:f6:4e:86:40:
22:63:d3:59:63:7d:b5:16:f8:67:bb:65:5a:2e:90:
ef:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:08:D6:F9:EA:C2:29:1E:9F:B8:1F:13:02:CD:D9:31:B8:72:08:5C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2AjW-erCKR6fuB8TAs3ZMbhyCFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6d:c5:d2:35:3f:90:5f:57:94:02:21:e9:22:ac:f8:a8:f9:fc:
f1:1e:fa:50:41:f5:3e:e0:61:22:56:28:61:f8:dd:51:84:43:
ba:bd:17:67:f9:82:5c:bf:9d:06:ae:b2:32:3d:1d:85:96:ca:
8d:24:c6:19:d1:2a:00:fa:a1:c4:ff:55:02:4f:32:57:d4:5f:
1d:08:93:a9:96:e4:c8:eb:af:7d:2c:ee:7b:ae:d6:25:1c:41:
ee:eb:05:43:b1:06:12:ff:52:41:a1:0c:18:a5:95:c6:85:8a:
12:ff:49:7b:b9:f1:99:a3:79:7f:ff:80:9c:db:5b:32:77:da:
99:97:88:67:db:ce:d9:83:a3:96:04:1b:e0:bf:88:e8:b6:ac:
55:f0:a8:48:1d:e8:fa:1b:02:84:1e:12:b6:fe:e6:b2:9f:b6:
8c:86:c7:c7:de:52:c6:d2:68:ef:c4:ba:a6:be:6c:3e:99:ef:
03:a1:93:22:57:65:f7:15:3b:18:37:8d:d4:32:a5:fe:ba:63:
04:2c:5e:f6:e0:1c:68:5a:6b:ba:26:a2:1c:70:d6:f6:86:49:
9f:a3:47:18:6a:0b:94:c1:68:22:27:27:6e:93:52:f0:19:1a:
8e:94:a1:27:bf:54:eb:5e:2d:f8:23:eb:8b:51:b7:84:62:75:
e9:52:e2:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 11:59:47 2025 by rpki-client