Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2HfskGREPp5FcojKFa92_n-IkiQ.roa
File: 2HfskGREPp5FcojKFa92_n-IkiQ.roa (raw, json)
Hash identifier: NKxhZk6f53CJIRlXCmq2p9/cZNQgvOYNkFYzqeOjJTA=
Subject key identifier: D8:77:EC:90:64:44:3E:9E:45:72:88:CA:15:AF:76:FE:7F:88:92:24
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018890D53641A2A3099BD4F5B6AED5F532C3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2HfskGREPp5FcojKFa92_n-IkiQ.roa
Signing time: Tue 06 Jun 2023 13:11:12 +0000
ROA not before: Tue 06 Jun 2023 13:11:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:90:d5:36:41:a2:a3:09:9b:d4:f5:b6:ae:d5:f5:32:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 6 13:11:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d877ec9064443e9e457288ca15af76fe7f889224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a6:8d:01:0e:1e:54:b2:67:1d:46:f9:cb:e9:
f8:02:1e:fa:58:a9:3d:83:5a:e6:32:b4:43:6f:2b:
a6:68:fa:cc:56:bf:5c:e8:f2:6b:a0:18:ac:6b:cf:
58:9c:d8:b4:62:f8:ff:da:c6:55:ee:33:38:eb:42:
f3:48:13:b2:56:44:42:47:7c:06:40:88:12:91:07:
93:3b:b7:36:02:3e:89:40:e8:d5:1d:3d:02:1c:45:
b5:67:e8:2e:bb:02:21:36:d7:53:77:a5:56:ed:24:
2b:2d:3f:f6:ff:79:e3:1c:1e:70:29:f4:23:fb:9e:
a9:cf:4d:df:95:30:e3:c2:09:53:b2:94:4f:fa:db:
55:1e:89:c6:47:1c:55:24:27:cc:d7:c6:1a:29:c5:
d2:cf:d3:2c:f3:78:9f:37:eb:79:05:e2:44:f5:ea:
cb:75:44:71:94:2e:02:65:c2:eb:fe:6c:08:66:d1:
07:c7:e0:91:8b:25:22:a2:19:7c:0c:6a:77:da:20:
cd:a4:f8:3d:ec:0c:b3:5e:6b:25:4c:51:5d:97:4d:
e6:cb:d9:a6:da:1c:f5:c7:62:16:e6:1a:f4:da:1c:
6d:79:4e:fc:8a:b0:6f:61:58:8c:3b:45:ec:da:43:
13:4d:e6:17:87:c0:aa:88:bb:71:22:05:9a:90:3c:
a6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:77:EC:90:64:44:3E:9E:45:72:88:CA:15:AF:76:FE:7F:88:92:24
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2HfskGREPp5FcojKFa92_n-IkiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2f:92:e8:1b:2b:42:79:25:a2:0e:d0:16:0d:37:bb:e2:19:2f:
cb:aa:9e:27:ff:d5:a4:e2:16:c6:d4:e9:40:7b:2c:be:09:fa:
98:bb:53:eb:c7:e5:45:a4:b5:61:22:91:ef:23:13:1f:e9:64:
ca:07:86:11:34:3a:2a:ab:83:fc:d2:73:17:76:96:fa:96:15:
53:32:30:20:8e:95:95:bb:68:4e:50:f0:46:a8:8b:26:26:02:
61:99:c4:fd:6f:aa:08:94:55:4c:6d:a4:f7:b5:39:ff:e7:df:
f0:cb:5b:d1:7a:37:5f:c9:dd:a3:2c:94:e8:d3:b8:b0:50:98:
f4:65:01:84:ab:54:4a:66:05:23:26:44:b6:44:a5:ce:0f:33:
14:68:cd:b7:cf:a3:9d:e3:9a:1a:43:72:e4:e9:55:f2:2a:6f:
07:e9:58:27:a6:89:ec:4c:22:5d:2c:87:31:c2:b9:56:9e:b6:
6b:cf:4d:02:57:56:e7:cf:21:62:17:56:63:d4:99:05:8a:da:
09:89:f9:ee:5b:90:42:ef:ee:e9:f4:bb:63:64:f6:a7:e1:87:
6b:8e:98:fb:90:fc:48:eb:ec:98:38:73:5f:de:09:b4:7c:bf:
56:40:99:23:c7:21:85:ed:28:5c:86:7e:12:0d:b8:eb:32:eb:
af:42:6d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:01:10 2025 by rpki-client