Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2ccnnGNM4QTaXgNRTNxl4LIRnzk.roa
File: 2ccnnGNM4QTaXgNRTNxl4LIRnzk.roa (raw, json)
Hash identifier: knGW6AxE+Dxkr3EJVSyuJ/KaBljPG6+mjU9/4Amb2hs=
Subject key identifier: D9:C7:27:9C:63:4C:E1:04:DA:5E:03:51:4C:DC:65:E0:B2:11:9F:39
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189A791A563ED1ADB4887FFE679666F1FD5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2ccnnGNM4QTaXgNRTNxl4LIRnzk.roa
Signing time: Sun 30 Jul 2023 16:11:27 +0000
ROA not before: Sun 30 Jul 2023 16:11:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:a7:91:a5:63:ed:1a:db:48:87:ff:e6:79:66:6f:1f:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 30 16:11:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d9c7279c634ce104da5e03514cdc65e0b2119f39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fc:36:0b:85:9c:34:c0:36:89:78:92:16:9d:
d3:e1:d2:0c:2b:0a:dc:2e:d8:76:9e:e3:f3:ce:9a:
00:39:68:fd:c7:8d:4c:c6:15:61:42:27:dc:b0:4f:
21:d3:e9:b2:46:9e:21:c6:65:89:fc:cf:16:96:ff:
eb:1c:ba:66:bf:a1:5a:6e:ee:af:6a:63:60:fd:25:
1c:00:1f:02:e9:61:fe:86:e6:b0:00:b9:25:da:38:
cf:79:ec:6b:3e:9b:1e:bd:86:fa:99:c8:4b:25:90:
4e:b9:c6:97:fc:69:26:dd:f5:03:1d:f0:44:b3:b2:
e3:2e:67:dd:6a:62:ce:55:ff:8f:ee:1c:17:4e:2a:
d7:d0:f0:0b:23:ba:72:c7:f0:7f:75:69:9d:07:9d:
2b:ac:2b:0d:ad:e6:0d:97:5a:38:e3:0e:45:4d:6c:
87:d0:66:72:25:18:fb:af:79:19:ad:4a:29:71:92:
01:32:cc:7e:ec:af:be:47:40:75:46:33:29:d5:09:
18:ac:2b:e3:ee:04:94:99:1c:9d:16:eb:34:53:1e:
94:5c:3f:5e:46:f2:98:d1:28:38:bd:ea:87:3e:09:
b0:af:32:c6:6d:25:9c:70:7a:e6:7b:20:84:13:bb:
47:29:0e:ba:75:eb:47:ef:56:7c:5c:a0:58:7b:b3:
ff:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:C7:27:9C:63:4C:E1:04:DA:5E:03:51:4C:DC:65:E0:B2:11:9F:39
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2ccnnGNM4QTaXgNRTNxl4LIRnzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9a:cd:15:75:81:94:bc:e8:8f:d1:cb:3d:da:5b:bd:fe:6f:57:
eb:ee:63:eb:56:a8:39:99:32:19:5c:80:8e:44:55:9d:1a:79:
a8:c8:48:f6:1a:9e:eb:b0:a8:9a:c4:2d:e9:cd:c4:0c:92:16:
fe:dd:05:17:a1:ee:9f:f6:f7:1c:e6:4c:be:74:1a:fc:2d:ca:
8f:1b:a4:e3:ae:83:44:bd:c5:6f:83:7a:67:ff:15:e8:a3:27:
be:db:6f:23:33:16:4d:7d:f2:0c:83:23:d3:6a:95:99:4d:f8:
0f:80:92:5a:7c:ba:60:3e:88:c5:31:ea:63:c6:5b:dc:30:cc:
44:84:4a:41:00:42:50:c3:3a:9c:47:81:35:2b:8c:d2:3d:4a:
3d:3b:7f:74:dd:02:74:df:9d:83:b0:1d:00:84:0c:53:5e:56:
11:83:fe:cb:fa:c3:f3:f5:47:a8:f9:2f:59:74:ce:35:54:91:
ce:10:1c:df:86:cb:ce:09:73:99:8e:3a:20:a4:90:9e:51:c5:
4d:dd:da:45:43:b4:10:44:54:bb:71:85:06:18:99:d5:0f:d3:
cd:d3:1b:41:67:36:48:58:14:e1:2b:12:c3:ca:96:e2:c2:69:
14:86:f1:05:17:25:48:16:d6:47:bf:03:83:fc:5d:00:14:b5:
4c:8b:a6:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:24:10 2025 by rpki-client