Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2lplhUv6zSGIi53jlzsyutlsol8.roa
File: 2lplhUv6zSGIi53jlzsyutlsol8.roa (raw, json)
Hash identifier: n06Ufdg2uSXfcz0EoLjEvoOzs4OEbxOgVcZJDr3NVVE=
Subject key identifier: DA:5A:65:85:4B:FA:CD:21:88:8B:9D:E3:97:3B:32:BA:D9:6C:A2:5F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187632109F5B222E4BA754B1F252C868605
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2lplhUv6zSGIi53jlzsyutlsol8.roa
Signing time: Sat 08 Apr 2023 23:08:42 +0000
ROA not before: Sat 08 Apr 2023 23:08:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:63:21:09:f5:b2:22:e4:ba:75:4b:1f:25:2c:86:86:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 8 23:08:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=da5a65854bfacd21888b9de3973b32bad96ca25f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a3:d6:32:26:d6:1d:c3:c8:ed:3c:eb:df:0a:
0e:73:6e:1c:a7:d6:63:d4:d6:a6:13:05:ff:e0:4d:
f3:b5:32:f9:09:62:61:b1:ea:2d:2f:b6:86:b8:91:
ff:d3:2d:d3:32:7c:1f:fa:3c:55:c1:ad:85:77:6c:
65:38:c1:59:6a:6a:c8:63:cf:8b:90:76:75:6d:93:
7b:71:24:b4:4d:97:85:db:a2:ff:a2:d0:f1:76:d6:
8c:04:e2:77:f3:bd:5a:8c:a2:2a:04:61:11:5b:c8:
f0:03:ad:91:1c:ea:70:ed:43:0b:4d:34:08:57:59:
bd:10:09:d9:d9:3e:fb:cc:70:94:f5:85:4d:aa:13:
f0:6a:c0:22:a0:09:37:d0:84:85:5b:35:c5:d5:d3:
03:66:e1:63:1c:77:27:47:e3:ec:3d:ed:7b:2f:ce:
69:b9:76:71:61:e0:75:84:32:b8:33:70:5b:68:b9:
16:c0:80:58:cd:aa:94:d1:75:95:1d:04:a0:6e:9b:
c2:82:99:5f:1c:11:ad:61:17:b6:29:75:2c:ea:42:
83:88:f7:82:37:b7:cc:d3:5e:d9:d0:ac:ba:18:ad:
d7:d3:de:a0:4d:c2:ee:b4:71:17:ea:95:18:33:d3:
90:78:42:0c:57:ea:87:ba:2d:88:6c:40:c6:cc:da:
e7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:5A:65:85:4B:FA:CD:21:88:8B:9D:E3:97:3B:32:BA:D9:6C:A2:5F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2lplhUv6zSGIi53jlzsyutlsol8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5b:41:a7:58:73:43:0f:7f:95:72:24:20:a1:ca:92:1a:11:c4:
39:d5:af:e5:4e:0c:0e:50:7c:f8:6e:98:73:39:47:e3:6d:29:
6f:89:75:ba:13:90:a1:4b:ca:1c:e3:99:b9:a6:c3:1b:02:5e:
7b:50:bb:49:b4:46:78:99:61:c1:21:2a:36:eb:03:14:74:a8:
64:f1:42:60:04:c6:7d:9a:7c:17:bc:12:03:09:81:61:9f:13:
64:ec:6c:15:47:e5:7b:77:cd:43:fc:83:0a:66:52:c8:0b:ef:
90:e4:4f:79:e5:65:d5:8f:a6:c1:39:89:19:8e:c9:c3:26:90:
55:1f:f0:17:79:96:72:c2:97:70:9b:6c:50:27:24:de:a0:3d:
ec:17:42:43:ad:16:a7:f8:7d:5e:03:4f:44:56:68:1a:53:24:
5c:79:fc:70:24:48:54:f2:46:07:7b:86:ea:24:36:5d:b8:09:
88:36:d7:aa:9e:d4:19:9b:c1:b2:f1:6a:1e:34:01:50:88:90:
fc:3c:89:97:2e:27:bc:c2:cf:3b:97:54:26:19:e8:1e:9a:78:
fd:b0:db:d9:4b:9b:09:c0:66:0f:3d:bc:9e:67:6c:60:6d:02:
f4:ea:f6:07:5f:1a:42:bf:91:a6:b4:ae:5f:ac:44:ce:cf:15:
e5:ea:fc:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 14:24:48 2025 by rpki-client