Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/47GvDdNh0dC9xkCbEJt7eQcH_88.roa
File: 47GvDdNh0dC9xkCbEJt7eQcH_88.roa (raw, json)
Hash identifier: mF2uYwb6XCGIqE58UzOanY5+qwC8GZy9W1FJKOZogwg=
Subject key identifier: E3:B1:AF:0D:D3:61:D1:D0:BD:C6:40:9B:10:9B:7B:79:07:07:FF:CF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189C18B96843169F92B66C60EE68A240A9A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/47GvDdNh0dC9xkCbEJt7eQcH_88.roa
Signing time: Fri 04 Aug 2023 17:14:57 +0000
ROA not before: Fri 04 Aug 2023 17:14:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c1:8b:96:84:31:69:f9:2b:66:c6:0e:e6:8a:24:0a:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 4 17:14:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e3b1af0dd361d1d0bdc6409b109b7b790707ffcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:79:9e:da:72:50:1b:cd:11:8b:3d:37:c5:87:
c3:3d:3e:1f:55:5a:3e:38:1d:bd:6b:20:f6:64:c8:
f8:c4:41:d0:8a:58:09:20:99:6b:14:51:7d:db:a9:
af:7d:0f:d0:f2:78:38:bb:f6:74:64:33:82:7d:1a:
6e:eb:55:1b:8d:90:33:1e:0d:ff:1f:cb:c5:0f:8f:
54:f7:77:ef:57:e8:2e:62:98:e7:f1:e6:00:d3:28:
e9:1a:43:08:10:a3:d5:c7:40:3f:64:bf:e1:cb:e9:
34:63:c3:f9:6e:a2:66:d4:f5:2f:3f:d8:b4:32:49:
94:06:ba:ab:f9:48:88:23:26:c7:5f:f0:b8:7f:d6:
ec:a2:57:9e:bd:61:1a:2f:92:87:1a:20:6d:6b:0b:
3e:64:b5:89:f4:ff:60:76:ff:55:39:51:d6:97:75:
1b:85:cb:df:79:c6:d9:83:60:ae:22:cb:05:81:23:
b5:c5:4b:b4:43:ca:e3:20:ee:f3:ab:29:ca:5f:40:
5b:16:d0:5d:48:92:c5:c6:be:40:27:ea:35:66:d1:
38:ee:f3:0c:82:4d:8c:e0:a1:3c:12:c6:43:17:7a:
c8:a0:6b:38:45:9c:7c:3f:db:61:29:52:fd:14:96:
01:23:df:e5:42:cc:11:38:c9:c5:f6:f4:37:49:27:
d1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:B1:AF:0D:D3:61:D1:D0:BD:C6:40:9B:10:9B:7B:79:07:07:FF:CF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/47GvDdNh0dC9xkCbEJt7eQcH_88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ad:27:7f:c9:51:3b:30:06:00:28:50:2a:05:f9:31:13:b2:7a:
9e:03:94:ce:c4:85:5e:e7:03:45:3a:58:d9:5c:ac:6f:27:5a:
69:5b:0a:f3:d9:17:dd:df:da:11:a7:83:c2:20:a9:46:17:d0:
c5:98:bc:3a:8f:6a:c0:f0:54:0a:ea:07:d3:f1:42:6e:ec:08:
1f:ce:ca:8f:d3:91:9d:10:3e:a6:59:c1:ca:c8:94:ac:2f:de:
59:89:fd:25:d1:28:f6:8d:b6:32:c1:f0:21:38:c7:b7:05:d2:
6d:12:a3:a6:e7:44:2c:bc:eb:9e:c4:fd:ec:2d:b2:0e:8f:e7:
18:f4:e3:b1:d9:28:62:61:b5:be:48:4c:1c:47:75:67:2d:e9:
ae:7a:51:c0:fe:13:ef:82:dc:3e:72:10:e9:10:a4:a9:62:81:
35:67:ca:cb:ed:aa:f0:2e:57:ca:e8:70:92:56:9b:fd:7a:34:
d3:6b:0b:07:f7:52:ae:84:b0:65:06:d8:18:08:ad:75:4d:c1:
07:ac:67:2f:08:4b:13:03:dd:d1:a5:c1:3d:af:80:13:d2:a4:
b4:bc:b1:2c:b7:f5:9e:d2:42:35:76:d7:c0:c3:6c:b6:20:60:
01:8e:27:35:e3:21:48:c0:17:be:89:3d:9c:cf:4d:3c:31:03:
57:53:6b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 20:53:59 2025 by rpki-client