Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4zJ0g38lPY2fRXSGWaBiWBb_PuQ.roa
File: 4zJ0g38lPY2fRXSGWaBiWBb_PuQ.roa (raw, json)
Hash identifier: UYYwoEXv826Ana52Xic5ZqryvatwnYEuUzA2ToHuJCU=
Subject key identifier: E3:32:74:83:7F:25:3D:8D:9F:45:74:86:59:A0:62:58:16:FF:3E:E4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189D2082E6962C46A7408EE089EFBBD7278
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4zJ0g38lPY2fRXSGWaBiWBb_PuQ.roa
Signing time: Mon 07 Aug 2023 22:04:58 +0000
ROA not before: Mon 07 Aug 2023 22:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
2001:67c:64:ffff:0:189:d207:89f9/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d2:08:2e:69:62:c4:6a:74:08:ee:08:9e:fb:bd:72:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 7 22:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e33274837f253d8d9f45748659a0625816ff3ee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e9:86:39:c8:fa:fc:47:b8:95:ee:1b:b9:41:
c1:e1:3c:15:ac:53:3f:8e:2a:d2:28:2a:84:b2:77:
6d:87:4f:a3:d8:cb:f9:50:4f:20:63:80:a3:99:c0:
36:15:4f:b1:e9:2d:33:4d:2f:f2:13:b7:1c:c5:ac:
ef:14:cc:25:c7:b6:b5:ba:fc:24:f6:d8:99:09:f3:
a7:55:ef:f7:44:c6:62:72:8b:7e:71:8c:c9:ec:0c:
26:6d:d6:9f:c2:ad:fa:08:b5:d7:2a:21:c8:78:8a:
db:fd:0b:e2:47:6c:0f:3d:03:07:1a:20:00:ee:31:
cb:9f:4d:e8:f0:02:0a:0f:80:13:02:07:41:03:f7:
f8:b4:d8:ba:d1:74:96:7f:98:aa:89:d0:49:2a:12:
27:e2:98:89:24:a6:ea:d6:8e:a9:b3:8e:f7:4b:1e:
70:d1:69:1c:fc:85:bd:4f:92:67:dd:f5:8c:2b:18:
86:4a:08:b2:68:f2:84:b8:04:e3:6d:06:d0:ff:2b:
5b:13:d0:23:00:c3:03:03:d3:33:a7:47:38:79:0c:
fe:75:d0:91:3d:0a:52:54:61:40:00:c4:e5:1e:14:
e6:57:3d:b4:7b:fc:36:12:a2:83:ab:50:1f:98:71:
26:0f:17:89:38:ff:0c:59:c3:7f:79:78:48:5f:6b:
81:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:32:74:83:7F:25:3D:8D:9F:45:74:86:59:A0:62:58:16:FF:3E:E4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4zJ0g38lPY2fRXSGWaBiWBb_PuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
aa:f3:0d:60:ae:32:a7:85:68:42:53:e2:4a:1c:27:98:9b:63:
f9:49:bd:be:d1:e5:a9:e5:ca:47:38:23:28:fd:f6:1f:44:5f:
3e:61:c5:18:e8:56:c9:60:dc:92:4a:32:3a:d6:6b:fb:08:2a:
73:e5:48:13:5f:c8:fc:32:b4:a2:8a:56:03:be:ce:f3:25:b7:
15:96:3b:3c:47:62:f8:17:9c:bf:4b:a0:12:66:05:9c:a4:34:
2b:1a:fe:34:33:3b:5a:f8:e3:f4:44:14:ff:60:70:1a:df:00:
63:cd:65:b1:6f:f8:b3:32:12:dc:f0:66:61:a2:4f:a6:6c:a7:
e0:60:97:cc:c8:b0:8d:9b:a2:ee:1e:d7:56:e7:ed:53:37:5a:
52:03:2e:df:fd:20:f5:24:e8:9f:e6:46:00:f8:f0:6e:02:e4:
56:64:fd:5f:43:34:8e:a8:c6:30:d4:26:f0:e6:22:ae:45:db:
17:6c:9e:38:56:66:91:84:1b:e9:a3:85:eb:66:57:a1:5e:05:
ae:58:0a:41:97:9a:67:02:7b:2c:06:36:74:39:42:29:b3:25:
b8:3a:9d:78:30:71:05:0b:21:f8:31:ba:30:2b:f0:46:90:d2:
e2:ed:b9:b9:72:3a:be:9d:16:93:3d:8b:f6:8d:6b:57:c6:d2:
14:93:94:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:26:31 2025 by rpki-client