Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4kGQxbuJdPfLH8gu-jqTw-KH-Mo.roa
File: 4kGQxbuJdPfLH8gu-jqTw-KH-Mo.roa (raw, json)
Hash identifier: kyYcKRmkwGRPnj1WhHzX5Wlgm2zV8WM5W07Yy7teSu0=
Subject key identifier: E2:41:90:C5:BB:89:74:F7:CB:1F:C8:2E:FA:3A:93:C3:E2:87:F8:CA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189B73C1FF03418E7E8FD2E2A5F62D406BE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4kGQxbuJdPfLH8gu-jqTw-KH-Mo.roa
Signing time: Wed 02 Aug 2023 17:11:58 +0000
ROA not before: Wed 02 Aug 2023 17:11:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b7:3c:1f:f0:34:18:e7:e8:fd:2e:2a:5f:62:d4:06:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 2 17:11:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e24190c5bb8974f7cb1fc82efa3a93c3e287f8ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e9:fc:30:7b:9b:35:a2:62:af:3b:ac:05:c0:
79:70:34:6d:a2:be:d3:6c:6d:ae:98:c1:6f:4c:6d:
79:be:44:4d:1f:9b:26:6a:c0:0f:08:fa:67:61:ae:
4a:17:cf:e5:ff:07:f4:fa:04:be:7c:40:75:23:58:
bd:ef:36:1a:99:f1:88:a5:2a:69:af:d5:26:35:4e:
c8:07:04:df:ca:53:e3:81:8e:eb:13:e3:01:f4:6b:
f6:a2:53:01:f9:26:60:ae:c3:c1:11:d1:ce:d7:92:
f8:52:6e:49:fe:8a:46:83:e9:80:a0:31:05:12:7d:
1c:33:fa:2c:44:80:1e:d7:f3:fb:07:47:c4:64:7f:
20:ce:e9:30:a1:66:00:66:a6:54:cf:81:d1:d0:38:
d1:f5:91:3b:0e:20:41:46:00:5c:56:96:95:9e:88:
fc:5c:7b:75:ad:b9:dc:a6:a0:b4:a1:43:89:71:ae:
10:14:37:23:f1:53:e5:f4:36:5b:1f:2b:f0:53:56:
7a:f5:75:90:34:04:ed:f0:5f:29:06:0d:13:43:f0:
8f:4f:2a:f9:e1:b2:64:7b:09:36:d7:35:0d:ba:44:
2a:4d:29:c9:79:6e:e3:de:16:90:ae:71:e3:5d:e5:
cb:4d:7f:26:10:a4:12:18:4c:00:58:28:40:a0:d4:
59:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:41:90:C5:BB:89:74:F7:CB:1F:C8:2E:FA:3A:93:C3:E2:87:F8:CA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4kGQxbuJdPfLH8gu-jqTw-KH-Mo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
27:c3:80:f9:ee:4d:33:47:84:5d:17:47:67:14:2d:c7:78:45:
15:a8:49:7d:30:06:5f:6a:cd:3b:62:8f:c6:5a:e2:54:22:ee:
ae:05:de:21:4f:58:af:13:7a:df:0c:51:93:fe:59:c4:10:71:
f2:41:15:1e:d7:83:7a:86:6e:8b:82:62:13:2e:84:c7:bb:43:
29:ef:e2:34:17:53:d4:3b:83:58:df:2e:2e:a6:bb:eb:12:27:
39:76:d8:e0:7e:84:03:eb:d3:bc:53:e0:39:81:3f:1d:78:85:
af:53:39:36:ae:60:af:64:c0:31:b5:a5:96:6f:44:a8:19:ff:
74:e4:aa:23:91:cd:02:94:9e:ec:dc:98:7e:8a:ee:72:cf:dd:
e4:c8:aa:44:14:8a:ba:73:3a:2e:0a:4e:4b:19:cb:1c:a3:1c:
10:00:d7:a6:a4:07:b9:3d:40:ed:cd:fc:b1:3e:af:a4:67:0a:
8f:85:a4:79:28:75:d5:c5:ac:a1:cb:98:44:8c:36:dc:03:0e:
f1:ba:57:86:c2:d7:64:9d:e8:55:8a:73:df:b7:dc:5f:50:30:
ef:de:1d:06:55:49:32:fc:2b:63:70:da:85:ee:53:33:91:78:
9f:e9:b6:ca:87:a6:04:87:d1:e8:9f:64:16:b1:fb:4d:15:c9:
5c:c4:a6:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 09:57:17 2025 by rpki-client