Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2aG121qFPC1CuCthmLD7SKUj8Rw.roa
File: 2aG121qFPC1CuCthmLD7SKUj8Rw.roa (raw, json)
Hash identifier: 2Rpfz42TKJKRSZCfT9CT8CFH06wZgiVza8RSfk6yNDg=
Subject key identifier: D9:A1:B5:DB:5A:85:3C:2D:42:B8:2B:61:98:B0:FB:48:A5:23:F1:1C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01896FF7EF0FFB7E65C4FF02C9BE17409EF3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2aG121qFPC1CuCthmLD7SKUj8Rw.roa
Signing time: Wed 19 Jul 2023 21:04:26 +0000
ROA not before: Wed 19 Jul 2023 21:04:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:189:6ff7:cca7/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:6f:f7:ef:0f:fb:7e:65:c4:ff:02:c9:be:17:40:9e:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 19 21:04:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d9a1b5db5a853c2d42b82b6198b0fb48a523f11c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a6:6a:55:05:5a:71:2a:8e:09:71:28:52:dc:
b9:2a:61:1c:f0:d3:01:2b:a7:f0:e6:57:5d:2f:3e:
a4:35:9a:e2:67:30:99:29:2e:4b:60:36:ee:9d:39:
68:bc:64:06:06:a2:e1:97:94:05:9e:04:f5:07:d2:
10:f2:97:77:64:c4:cd:50:89:e4:c1:c4:ca:e1:89:
a8:60:94:03:e3:09:05:c8:bb:66:1b:90:c0:97:d8:
43:17:a8:66:59:46:43:a4:d8:15:10:f8:5b:98:fe:
55:2d:80:5f:41:66:ef:6b:b2:6c:32:c8:50:8a:03:
f7:ff:ef:96:2b:d2:1f:07:55:0d:4f:7e:c3:6d:b4:
42:3f:90:17:f6:bd:8f:5d:55:01:cc:ed:90:26:df:
8c:47:5b:74:6e:4f:7f:a1:31:6a:0d:28:c1:31:6c:
f6:c3:40:27:a5:61:6a:07:5c:d8:73:03:1f:4e:53:
77:a4:f9:7d:d3:02:5f:b9:70:d4:2f:84:34:46:06:
f9:ff:08:50:ba:01:ee:4f:95:44:9c:6b:bf:72:50:
b5:9d:c1:0a:55:5b:73:47:60:be:1e:cd:c7:7c:16:
a1:ae:a6:4a:48:a3:52:bb:ef:36:63:7e:bf:92:81:
33:08:b7:48:02:3e:bf:52:57:b8:6e:18:50:dd:a1:
70:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:A1:B5:DB:5A:85:3C:2D:42:B8:2B:61:98:B0:FB:48:A5:23:F1:1C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2aG121qFPC1CuCthmLD7SKUj8Rw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a0:54:a7:43:03:28:5d:09:5c:4b:de:3c:2f:b7:29:44:3b:56:
30:85:bf:b2:21:bc:49:97:f3:bf:9a:36:2e:1a:a9:76:40:07:
55:ea:6a:32:01:0f:ad:9d:80:c4:b4:3b:da:d2:72:2e:81:53:
21:c4:f0:60:f2:2c:a7:4b:53:66:91:da:4e:69:10:c4:7a:42:
21:0f:41:a5:f4:ed:47:6c:b0:74:9a:48:2c:5d:3a:b2:c1:84:
d4:26:6c:77:cb:f3:a1:ef:1e:db:22:e2:68:2a:33:68:3c:04:
26:58:e0:6d:33:09:e9:cf:04:cd:2c:a9:4f:bd:0e:9c:68:01:
42:f4:0c:b6:74:1b:8d:c5:76:e4:ae:1e:e3:b7:ec:21:3d:4e:
1b:fa:f6:48:d3:3c:85:f5:15:26:56:01:bd:e0:c0:90:5c:6e:
1f:6b:60:07:9a:22:c9:5f:d2:c3:28:cc:3a:b7:06:33:72:4b:
e9:57:f8:4c:22:2e:80:1a:22:e5:7a:6e:17:0f:0c:b9:46:b8:
79:80:aa:91:96:1f:46:1c:12:c3:88:36:14:01:8e:1a:04:a7:
54:65:a3:6c:ef:e7:4c:15:64:25:8b:80:5a:d4:f6:60:e3:2b:
65:8c:b9:06:45:34:7e:14:44:07:83:e3:eb:5d:87:ef:89:a0:
ad:0f:9d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:48:20 2025 by rpki-client