Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2Unzgn7pc482u9FWAMWqb950o-s.roa
File: 2Unzgn7pc482u9FWAMWqb950o-s.roa (raw, json)
Hash identifier: f/JU3UWtaa3GRrW7kAQ50CLLfBpgd/wqui1knf4kY3k=
Subject key identifier: D9:49:F3:82:7E:E9:73:8F:36:BB:D1:56:00:C5:AA:6F:DE:74:A3:EB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01888274CBB8D5F0F432F93ABCE312B16E74
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2Unzgn7pc482u9FWAMWqb950o-s.roa
Signing time: Sat 03 Jun 2023 18:11:12 +0000
ROA not before: Sat 03 Jun 2023 18:11:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:82:74:cb:b8:d5:f0:f4:32:f9:3a:bc:e3:12:b1:6e:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 3 18:11:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d949f3827ee9738f36bbd15600c5aa6fde74a3eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:d7:35:41:f2:aa:b3:1d:ff:bd:79:69:09:2b:
15:78:fa:c6:e0:13:ba:3a:12:a0:10:56:6c:35:6f:
ac:33:26:18:81:e5:e5:a6:3f:ef:c4:5b:c9:61:be:
9f:c1:76:3d:46:ac:c4:97:b1:0f:ec:2f:b5:61:6e:
e3:41:e1:1e:78:b4:f4:0f:5b:55:c8:ba:c6:73:04:
d4:ca:08:6d:74:38:7f:17:e4:15:0f:f1:88:da:24:
29:b5:3d:f5:8f:7f:03:5a:71:d8:a4:91:94:86:ce:
14:03:6e:22:7d:dc:63:3f:0a:57:d1:ef:d2:24:f4:
47:35:99:e5:88:d7:0c:92:1a:f1:4c:64:03:37:f3:
52:ca:f4:31:ea:b4:8e:bb:93:9c:95:b8:ef:70:29:
ec:bf:60:d8:ad:77:bd:75:9d:39:40:e4:26:fd:d1:
23:0a:63:6b:06:05:01:2c:81:e0:01:a9:12:2e:ab:
85:de:49:81:07:97:d0:94:a5:c8:57:14:ec:71:0d:
8e:de:9b:41:90:33:c3:26:51:ba:b6:6c:85:3d:c0:
d1:c1:dc:b0:1e:63:27:09:ab:c0:68:34:51:84:37:
76:af:e4:54:71:35:78:a8:95:f3:80:e4:0f:72:70:
8d:3e:b6:1f:68:8f:9b:fe:e9:e7:bb:5b:21:16:b1:
ed:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:49:F3:82:7E:E9:73:8F:36:BB:D1:56:00:C5:AA:6F:DE:74:A3:EB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2Unzgn7pc482u9FWAMWqb950o-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b2:d6:30:ff:3e:b2:d1:ae:f9:30:f8:6a:22:26:16:a1:93:dd:
8f:54:bc:12:bb:dd:84:79:89:55:b8:f9:91:4a:2f:0a:59:d1:
48:46:0c:78:5a:79:48:34:dc:50:ea:da:f6:89:8f:f0:3b:54:
bf:66:0a:ba:77:4b:9f:3e:12:c6:fd:fa:9a:f3:31:79:e8:06:
3b:75:5d:dd:61:e9:46:46:6e:d4:33:9b:6c:25:10:38:be:c8:
23:46:f0:11:19:72:6a:9e:78:b8:43:f3:1c:a7:dd:ca:82:f5:
6d:67:19:d7:48:49:f0:ad:91:e2:1f:1b:f7:85:cd:28:57:3b:
b1:7e:2c:74:88:15:70:72:3c:73:06:98:62:f4:1c:30:5a:65:
4f:31:c3:d4:5f:fb:2c:d5:cc:82:7d:34:a6:47:44:2f:ed:3c:
b3:87:a4:54:b5:8f:a6:e1:9b:49:e3:a1:de:6d:11:79:a8:74:
5d:cd:5b:4d:a5:3e:5e:86:72:1e:f8:b2:cc:67:a3:79:65:d4:
0f:48:ab:f2:97:85:78:72:cf:65:c4:cf:34:32:69:1b:ad:a4:
eb:5b:34:19:c0:59:38:e2:02:74:b2:4f:d1:b0:3b:35:94:f1:
37:91:19:f5:35:f7:bd:a3:ef:1d:ce:bc:a7:e2:a9:8c:70:e1:
cc:c1:4b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:36:25 2025 by rpki-client