Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4_lQSM6wga9iQK3rmpY0OFHxgG0.roa
File: 4_lQSM6wga9iQK3rmpY0OFHxgG0.roa (raw, json)
Hash identifier: kZh7M/YBmx5wUmEDymWuWl9uCQsJrmpnChOBWXid8JI=
Subject key identifier: E3:F9:50:48:CE:B0:81:AF:62:40:AD:EB:9A:96:34:38:51:F1:80:6D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01871426EAE4D985E4AD0D98BA7001FF7E11
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4_lQSM6wga9iQK3rmpY0OFHxgG0.roa
Signing time: Fri 24 Mar 2023 15:05:07 +0000
ROA not before: Fri 24 Mar 2023 15:05:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:187:1426:1c7b/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:14:26:ea:e4:d9:85:e4:ad:0d:98:ba:70:01:ff:7e:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 24 15:05:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e3f95048ceb081af6240adeb9a96343851f1806d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f8:6b:6b:db:80:f5:e8:fe:54:4f:da:94:de:
5b:89:e9:2a:bb:2c:53:6f:b0:7d:a5:d6:15:29:8c:
77:6e:f7:f8:ce:08:30:ac:37:40:2f:e2:06:a1:19:
6c:32:bc:62:c1:0b:a6:3b:82:47:46:c8:22:20:1d:
a3:3a:65:4a:34:fb:69:0e:5d:62:05:96:bb:6c:47:
73:19:7c:00:d4:f1:bb:5a:57:c3:0b:9a:5e:75:4f:
9d:da:cc:5a:b0:00:3f:54:a3:97:3a:76:87:10:1c:
c7:8e:eb:a4:cb:d4:5b:ff:fe:a7:ee:60:f6:97:01:
e2:4f:c8:48:f0:50:8b:e4:3c:af:a9:b7:29:09:51:
03:94:3a:01:ca:f7:df:b8:8d:2c:eb:4e:b3:46:1f:
5a:df:b2:dd:c2:9f:c1:62:02:52:cb:48:be:d5:c7:
e1:3d:bb:7f:7a:82:9f:6b:ad:28:ce:c5:a6:b8:73:
22:e1:67:07:76:e0:41:4d:85:54:8a:a8:f5:c6:1e:
31:c0:38:b5:15:e0:80:36:b8:3b:48:a7:44:79:32:
06:b8:fc:1b:fb:b4:5d:6c:31:c9:27:b4:b3:bb:ca:
0d:1b:7b:a4:37:8d:6b:49:ba:ef:da:97:c2:8a:89:
a5:2c:1e:42:be:e0:d4:b0:d1:96:8e:5a:b8:c2:25:
9e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:F9:50:48:CE:B0:81:AF:62:40:AD:EB:9A:96:34:38:51:F1:80:6D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4_lQSM6wga9iQK3rmpY0OFHxgG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5e:74:ab:1f:4d:bf:83:52:6b:11:0e:a9:b3:ca:e9:b2:bf:ad:
cd:6f:5b:ab:90:54:d0:ed:23:39:8f:6f:ca:12:e7:b6:53:a5:
d2:aa:32:0e:cf:11:cd:67:a6:e9:70:3d:fd:48:e0:26:e1:16:
22:e5:23:b4:26:2e:45:19:f5:10:b8:67:31:38:ff:99:59:0c:
c1:fb:ea:77:41:ac:f0:d4:24:d4:e7:36:00:d0:39:e8:41:3e:
10:01:43:36:73:17:51:67:d0:70:db:fd:44:9b:55:b4:ac:f0:
ee:c4:3d:3b:ff:76:cc:aa:f1:2b:8c:8e:42:49:7d:f4:a9:39:
8e:56:b4:71:c9:6a:f5:31:22:d1:78:8e:37:b1:ca:55:fe:0c:
af:ef:c7:57:51:35:06:54:0d:02:fd:91:ba:f7:55:ac:09:2d:
1b:42:37:83:c8:ca:83:63:7c:b8:bc:71:92:2d:86:34:39:5c:
dc:bb:10:fc:f2:21:8e:3b:35:b5:76:b4:64:05:e5:f8:ad:33:
58:a8:14:18:eb:20:c6:6e:c9:9a:a1:5f:42:7f:c3:93:5c:da:
8b:87:0e:60:26:5f:bd:fb:19:28:5c:fc:d0:c0:58:84:3a:3a:
b9:55:c2:bf:55:8d:24:fc:fb:47:17:82:d9:e5:6a:e0:d3:79:
5a:47:6e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 05:43:27 2025 by rpki-client