Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4H-obOOKwDYarJeCi1ZDk6j0A_M.roa
File: 4H-obOOKwDYarJeCi1ZDk6j0A_M.roa (raw, json)
Hash identifier: zk3vLhPj/ixpfxLW2D9sujrF2fspEiDCXcuXc4jse7A=
Subject key identifier: E0:7F:A8:6C:E3:8A:C0:36:1A:AC:97:82:8B:56:43:93:A8:F4:03:F3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186684C5251CE59A9F17516A6F5F8898326
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4H-obOOKwDYarJeCi1ZDk6j0A_M.roa
Signing time: Sun 19 Feb 2023 06:11:17 +0000
ROA not before: Sun 19 Feb 2023 06:11:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:68:4c:52:51:ce:59:a9:f1:75:16:a6:f5:f8:89:83:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 19 06:11:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e07fa86ce38ac0361aac97828b564393a8f403f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:50:da:c9:d8:68:6e:58:f9:41:6a:f1:2c:a1:
b8:c0:30:c6:6b:f1:d8:9f:00:f7:45:4f:c1:eb:0e:
ec:be:5a:15:d6:8c:01:7f:d9:74:31:51:77:2c:46:
70:07:db:55:a8:08:06:0d:7f:25:48:ff:f0:0a:ff:
0a:d9:19:c2:b0:b6:d6:f8:b9:71:f9:c0:3d:25:32:
3e:ae:61:b0:cc:1c:ca:a9:82:06:39:d4:83:9c:fd:
9a:61:07:a5:5c:f4:07:b7:6b:4c:43:35:55:f9:65:
6f:91:b4:41:00:b1:24:84:88:ed:55:67:4a:0d:be:
9b:37:ad:4e:ba:ea:2a:34:42:58:b1:4b:1d:eb:0a:
98:f3:b4:37:65:92:89:7f:58:a9:9e:c2:cd:27:64:
87:0c:6a:14:7a:40:10:19:4a:cc:2b:e3:90:f8:eb:
ab:d0:6c:7c:a8:aa:74:92:4c:51:b0:8c:ca:27:c9:
61:08:20:81:a5:76:63:fa:73:94:c5:7c:06:00:22:
c9:55:2f:49:ac:23:30:09:09:18:1d:c7:5b:e6:cc:
9b:15:a1:c9:d6:71:3a:da:88:df:72:c5:c3:69:c9:
3f:a1:b2:26:72:48:b9:18:57:a4:2f:f9:4d:55:cf:
56:dc:f6:95:9b:82:68:67:ec:f7:53:91:0a:ba:3b:
93:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:7F:A8:6C:E3:8A:C0:36:1A:AC:97:82:8B:56:43:93:A8:F4:03:F3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4H-obOOKwDYarJeCi1ZDk6j0A_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ab:61:96:af:66:1c:45:15:59:5d:ad:e7:9c:e8:b7:96:ed:4a:
1a:1b:f9:d2:79:2c:93:c3:dd:95:43:41:c4:6a:44:3e:3d:7e:
fb:1b:08:af:fa:21:5b:45:75:36:7f:10:a8:d8:39:8f:09:6a:
68:83:97:ed:11:d1:49:92:98:66:09:f4:0c:57:b4:58:be:22:
3d:ff:f2:4f:10:b7:e9:97:42:84:69:d3:8c:08:21:4a:e3:f3:
a5:5e:9c:b9:56:87:fe:b8:2d:79:74:9a:30:17:c8:58:ca:eb:
08:79:ef:7f:37:69:0e:d4:10:01:1e:6c:00:60:c7:92:83:73:
f2:43:2b:a8:0a:32:9d:b5:94:54:14:6d:72:08:42:c7:2b:ac:
d1:6a:d6:96:15:06:24:77:b6:0d:4b:36:a2:d4:38:71:73:76:
4b:25:b8:12:76:5f:75:c4:9d:a0:1f:a2:df:c3:87:5d:b7:08:
bd:7c:37:6a:51:1f:a6:0a:4d:17:25:1f:df:f1:6f:cb:1a:71:
cb:eb:e0:89:4c:41:7d:de:c5:1c:ff:c2:50:0d:51:5b:79:fb:
6d:1a:5d:20:a9:82:dc:d9:56:30:96:a3:9d:6c:c6:94:ea:be:
a5:14:70:19:89:13:21:bd:c4:d0:24:86:6b:b0:18:af:d1:6d:
2d:a1:87:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 15:56:42 2025 by rpki-client