Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/49-CA2PkLlPwy63YY-yWopKMH8U.roa
File: 49-CA2PkLlPwy63YY-yWopKMH8U.roa (raw, json)
Hash identifier: b1OdtDBXLFsfg7zhXzCSkw70dqPpirV3DUwwJcr4gLA=
Subject key identifier: E3:DF:82:03:63:E4:2E:53:F0:CB:AD:D8:63:EC:96:A2:92:8C:1F:C5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188172A042C90FAB5A50537959559F0DC3F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/49-CA2PkLlPwy63YY-yWopKMH8U.roa
Signing time: Sat 13 May 2023 22:10:09 +0000
ROA not before: Sat 13 May 2023 22:10:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:17:2a:04:2c:90:fa:b5:a5:05:37:95:95:59:f0:dc:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 13 22:10:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e3df820363e42e53f0cbadd863ec96a2928c1fc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:34:5c:60:3a:f8:5a:77:18:7b:0b:37:c3:1f:
fc:af:b7:98:b4:9d:22:55:56:59:af:ec:d9:b0:3e:
86:83:01:5c:b0:29:22:22:53:85:02:69:1b:a2:d2:
af:c7:04:f7:57:a7:3d:e1:fd:f4:59:93:1f:1f:bd:
54:cb:a3:f4:a0:73:d5:5c:e5:01:d0:2f:4b:2c:e1:
43:f2:9b:e8:e2:dc:5a:66:3b:8d:40:5e:b7:e2:60:
c5:12:57:55:5e:1e:84:6c:da:a6:c3:d9:b3:60:e7:
8e:b7:c4:14:a4:ac:8e:d8:fe:bd:25:40:c9:0e:b9:
95:57:76:83:7b:5d:74:3f:10:82:fb:b1:f0:89:c3:
d7:60:91:08:1c:67:bb:a7:54:d5:72:6f:b4:5f:11:
14:47:7e:81:2a:53:86:f4:8f:44:74:91:4f:d4:27:
d3:bb:64:4a:46:11:c9:1d:95:56:02:54:20:09:b3:
31:3f:a9:40:d4:13:46:90:3d:f2:25:28:71:4d:20:
4a:6c:d8:ea:fd:f9:81:17:68:00:eb:d3:5f:2e:8c:
dd:d5:eb:ca:79:eb:74:10:d6:2b:29:27:52:e2:3a:
a3:6e:ac:f5:18:f1:ae:41:11:9c:c2:f2:02:5a:f8:
42:df:cf:bc:b1:27:0c:4f:8a:a5:5c:57:af:90:5c:
50:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:DF:82:03:63:E4:2E:53:F0:CB:AD:D8:63:EC:96:A2:92:8C:1F:C5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/49-CA2PkLlPwy63YY-yWopKMH8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3d:f8:98:87:bf:da:d6:6a:c4:8f:80:fa:a4:ff:37:19:de:48:
70:02:80:84:62:b0:f6:20:7f:6f:5c:4d:d9:e8:aa:0f:f2:16:
42:c8:3f:c2:7d:c5:1e:d9:c1:fb:79:3f:fc:d3:5d:8c:8b:e7:
5f:bd:4a:8f:69:9b:2e:e4:0c:c7:76:5a:88:7a:48:f1:38:1a:
90:26:4f:a1:a1:15:1b:db:0b:ed:16:6d:78:94:5a:08:d7:d8:
49:6f:72:e1:c3:a7:ee:77:d9:5b:9d:94:e9:6f:bd:50:92:4c:
f9:ff:bf:42:4b:6c:14:fe:65:f9:84:06:d7:6b:07:84:e1:43:
4a:77:47:f5:7a:a4:1c:bd:24:5a:31:50:cb:de:54:c9:f8:36:
d0:2b:ac:45:71:c7:c0:60:6d:bd:82:e9:c2:77:22:86:92:80:
d6:fb:44:f1:e2:50:3d:48:d2:c5:9c:83:f2:40:c9:b1:7d:a0:
08:4c:e3:16:0a:03:4d:f3:72:c9:3c:a5:85:77:0d:5b:96:6d:
fc:f8:15:8b:12:db:ab:19:67:c0:15:2a:21:c4:c7:5a:94:c1:
50:d7:99:e5:ab:49:7c:4b:e8:81:19:56:a0:0c:53:38:c4:91:
8b:66:3f:65:52:05:1a:14:5a:8b:98:9d:d2:1e:71:dc:a1:e9:
44:44:83:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:49:44 2025 by rpki-client