Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/47JiHKVW5pTOfHSXN3__7Ho4p0Q.roa
File: 47JiHKVW5pTOfHSXN3__7Ho4p0Q.roa (raw, json)
Hash identifier: Gb3Hu07f/MVIEO1BgdgDWd5j6El5knALNOaP5sB2I7w=
Subject key identifier: E3:B2:62:1C:A5:56:E6:94:CE:7C:74:97:37:7F:FF:EC:7A:38:A7:44
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018850732B10D0F43F021551A5995CE3A2C0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/47JiHKVW5pTOfHSXN3__7Ho4p0Q.roa
Signing time: Thu 25 May 2023 01:08:24 +0000
ROA not before: Thu 25 May 2023 01:08:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:50:73:2b:10:d0:f4:3f:02:15:51:a5:99:5c:e3:a2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 25 01:08:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e3b2621ca556e694ce7c7497377fffec7a38a744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:9a:21:1b:f5:62:0b:5f:bb:06:da:dd:10:21:
96:cc:86:a3:88:fd:95:bb:b0:ac:a7:1c:b7:cc:29:
57:a3:c8:b5:fd:1d:71:19:4d:42:7b:c0:71:63:e2:
a7:48:f0:e8:74:c3:cd:ce:9e:6a:47:61:07:64:f3:
92:b3:c1:55:15:d7:a3:13:f2:30:e6:4d:2b:37:3e:
fd:40:09:bc:ee:d5:ec:31:25:d8:df:c9:ac:25:30:
82:1d:8a:3d:d0:dd:95:e3:a9:1b:57:03:cf:42:c5:
1d:1b:4e:5b:7f:01:ed:a3:40:8d:23:67:1d:ec:84:
65:74:f0:95:37:51:f4:5c:2e:4c:ac:25:34:09:91:
e7:ba:7d:ab:f4:03:c4:c8:13:e2:c2:79:0b:cd:61:
3f:94:86:10:6d:4c:41:9a:35:a8:36:88:c3:b5:79:
59:10:22:cc:9c:a9:91:5c:24:d4:fb:e4:86:ad:ea:
5e:29:1d:32:ff:44:88:c7:13:65:7e:e5:85:1e:e6:
a9:16:65:0f:c1:b1:17:44:63:5d:71:08:3c:fb:e6:
d2:56:4d:01:9c:c7:09:53:cf:37:c9:84:45:14:22:
4a:f6:88:57:63:04:b0:3e:bf:bb:aa:99:7b:10:54:
fd:3c:b9:65:d9:aa:6d:9c:5b:8a:c7:e4:8d:35:43:
8c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:B2:62:1C:A5:56:E6:94:CE:7C:74:97:37:7F:FF:EC:7A:38:A7:44
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/47JiHKVW5pTOfHSXN3__7Ho4p0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
54:5b:35:72:fe:31:4b:c6:1d:3e:90:0f:74:d8:3c:fa:3c:0c:
98:8b:37:f6:39:c1:b1:46:06:d6:40:a7:38:60:ca:e9:f0:e5:
9f:83:b0:d3:78:8a:12:f2:16:e3:e5:49:6b:9d:dc:ff:8a:ff:
ce:98:f9:e1:f9:4e:6d:f3:cf:bd:34:76:30:16:ef:25:32:e2:
1e:2f:f0:ec:68:b7:30:90:a4:2d:fd:9c:07:33:92:9b:83:1c:
54:09:38:62:4b:56:93:27:3d:ec:25:4e:f8:52:97:81:93:08:
93:8e:9c:58:52:06:26:05:88:74:e9:91:ec:11:55:da:01:fc:
d2:a8:a1:40:99:23:f6:e5:50:f5:3c:e2:83:a1:b0:c5:9b:91:
4d:6d:06:72:08:1c:8a:be:b4:d9:55:d4:39:fd:a2:61:e8:5d:
76:b3:88:46:dc:25:45:ce:46:e6:5e:cb:39:c4:7e:5a:48:41:
fb:0e:55:a1:f3:6f:4f:b5:dd:5b:f7:4f:84:9a:58:b9:80:1a:
cd:a0:ab:71:fc:fe:c5:7e:7a:6e:d3:86:dc:2c:ef:50:b1:66:
c7:34:b4:7c:f3:1a:53:df:7c:1e:f7:c9:f3:e4:87:37:cb:b9:
2b:21:7d:75:e7:11:58:b9:8f:50:2a:f4:51:bc:a2:84:40:45:
ff:f1:58:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 04:11:41 2025 by rpki-client