Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/424ByYnwekyfzwLVeAnd-EckA7I.roa
File: 424ByYnwekyfzwLVeAnd-EckA7I.roa (raw, json)
Hash identifier: eB/SXuPZG/FOTTirdQpbiUGBW3NJeF9aAM0VLbFO0uw=
Subject key identifier: E3:6E:01:C9:89:F0:7A:4C:9F:CF:02:D5:78:09:DD:F8:47:24:03:B2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01897E6096C0EF6A1AF8BFE990B4E587467F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/424ByYnwekyfzwLVeAnd-EckA7I.roa
Signing time: Sat 22 Jul 2023 16:13:26 +0000
ROA not before: Sat 22 Jul 2023 16:13:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:7e:60:96:c0:ef:6a:1a:f8:bf:e9:90:b4:e5:87:46:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 22 16:13:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e36e01c989f07a4c9fcf02d57809ddf8472403b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8f:b0:7d:1b:aa:e4:01:66:aa:28:36:50:d3:
38:a3:bb:68:81:c5:74:8e:28:e5:eb:1a:37:5a:ae:
94:86:bb:34:da:c0:fb:14:1c:63:6f:29:47:05:80:
e0:19:52:4a:fc:e0:d1:f3:d3:0d:9f:e0:b2:e7:3a:
ac:97:e0:d6:83:0b:5f:5f:fe:96:03:cd:f3:08:e9:
fa:b3:c8:fc:92:0c:46:2d:c4:d5:ce:ef:f6:65:6b:
9b:32:dd:16:70:58:60:36:f3:09:30:f8:5b:fd:01:
09:8b:07:64:e6:e4:5c:f8:f0:99:e5:72:63:48:2f:
7e:bd:36:f8:d6:fc:a5:22:4c:37:ac:db:ed:c2:17:
47:e8:fd:9d:ba:6a:24:9d:22:c2:f5:fd:e8:b8:d8:
8e:b8:36:fb:de:4e:06:71:3d:f0:14:55:c7:31:5a:
67:bd:9b:d8:c4:73:00:ea:0e:c4:23:f5:33:17:96:
ba:66:be:91:36:e4:d5:b2:90:9b:ea:f3:cf:fe:23:
c8:79:01:15:ef:12:16:3c:e5:50:a7:b5:23:b4:9c:
10:0b:aa:bd:3f:36:32:95:a4:6a:13:0d:30:d3:d8:
7e:1c:92:68:6f:96:ad:79:a3:3c:53:d9:37:12:55:
e9:d5:91:91:bd:4c:d5:4d:20:51:d0:2d:ee:16:01:
43:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:6E:01:C9:89:F0:7A:4C:9F:CF:02:D5:78:09:DD:F8:47:24:03:B2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/424ByYnwekyfzwLVeAnd-EckA7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
41:b1:1e:bf:42:7b:c1:06:80:0b:79:36:a1:b2:72:62:ef:fe:
c0:31:d3:29:47:a7:96:3d:4e:56:d3:1b:d9:7d:be:5d:25:85:
22:a6:13:6a:f0:b4:aa:41:56:a5:ba:94:2b:35:ac:13:21:48:
23:5b:57:fa:8c:a1:dd:d6:b9:d4:f8:48:13:fd:27:d3:c5:14:
dd:8d:b2:f6:24:78:1a:93:7c:42:89:c1:4e:1d:1c:eb:e6:b1:
32:f3:44:ba:60:95:c2:64:1d:31:ce:de:03:12:2d:bb:9b:f4:
44:38:78:cf:2f:9f:d4:ff:61:01:27:c2:9d:37:2b:a5:e2:05:
c9:57:05:7f:cc:7e:90:2d:f6:65:df:b4:60:c8:65:c7:d6:92:
28:1c:38:92:33:d9:c2:58:09:26:d3:06:a2:40:06:f0:99:29:
c5:0d:48:05:08:a7:ae:bc:b6:bc:2d:9a:25:79:81:59:d4:26:
ad:df:6e:bb:29:b8:1e:ce:ce:c0:43:cf:ab:39:23:ff:fd:ae:
5d:57:9a:90:8f:21:5f:cd:cc:d4:a0:eb:a1:bc:dc:d6:37:64:
07:b5:1b:68:88:e2:fa:81:68:2f:70:b5:42:46:69:88:46:55:
cd:85:77:3d:43:31:b6:43:ad:bf:b3:f9:e0:2e:58:c9:64:db:
be:9b:94:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 12:04:43 2025 by rpki-client