Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/52wv-bB7mBtakYlKWIwEfH-ZMXU.roa
File: 52wv-bB7mBtakYlKWIwEfH-ZMXU.roa (raw, json)
Hash identifier: Aj+IKlFrGecktIR37wPDOssJPNdqpxbUJzDtkH5AMHA=
Subject key identifier: E7:6C:2F:F9:B0:7B:98:1B:5A:91:89:4A:58:8C:04:7C:7F:99:31:75
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A450BA0C40A224FDC6BC9D5BB90C3382C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/52wv-bB7mBtakYlKWIwEfH-ZMXU.roa
Signing time: Wed 30 Aug 2023 06:05:04 +0000
ROA not before: Wed 30 Aug 2023 06:05:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:450b:67bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:45:0b:a0:c4:0a:22:4f:dc:6b:c9:d5:bb:90:c3:38:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 30 06:05:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e76c2ff9b07b981b5a91894a588c047c7f993175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:97:43:ea:bf:78:27:ab:91:7e:f3:cc:27:82:
16:a7:26:d6:99:a0:f6:52:9e:f0:11:a4:ff:9f:ee:
7e:fd:b3:40:52:18:f9:dd:79:a1:db:5c:00:47:a0:
e4:b9:e5:4e:43:fa:b5:46:be:f5:4b:88:7b:96:bd:
dd:f4:e5:24:cb:bf:6f:67:20:26:23:d1:95:d6:7a:
b6:1a:82:f5:73:87:49:b8:b7:1f:06:f9:81:5d:1c:
0b:5d:b0:c2:02:fb:bc:80:ae:0d:c8:99:b4:4e:cd:
82:56:6e:26:7b:98:57:f6:5e:43:65:af:52:20:24:
cf:7d:af:ea:eb:c6:4e:a5:23:6c:74:6d:0d:9b:d7:
46:4a:38:ee:21:2d:71:fc:83:3f:28:eb:ba:e6:91:
28:fc:3a:56:99:e1:e0:fc:1f:2f:cd:82:0e:1d:20:
7b:02:1b:d0:89:a0:15:6e:66:53:25:6b:c8:f0:39:
58:5f:2d:fe:21:34:55:2b:fc:f6:18:b4:39:e9:a9:
29:fd:82:61:74:0e:9a:4a:01:6e:79:fe:78:a7:cc:
4a:38:1e:f3:d8:50:a8:fa:5c:62:4f:5c:ca:5d:ef:
7c:72:d4:b6:28:ab:96:89:35:89:23:c1:ad:1e:89:
db:d5:ee:5f:bf:e9:d4:e7:38:cf:f1:c3:7a:ae:39:
d7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:6C:2F:F9:B0:7B:98:1B:5A:91:89:4A:58:8C:04:7C:7F:99:31:75
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/52wv-bB7mBtakYlKWIwEfH-ZMXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
98:11:77:6b:b9:69:57:ff:a1:45:c5:00:52:57:1a:db:3c:c6:
85:5b:28:e5:85:2c:08:10:2f:7b:5f:fe:ef:52:60:52:d9:18:
99:f5:4b:5c:87:04:87:c0:32:c5:b8:17:01:46:df:da:72:ed:
34:57:16:2d:d7:93:96:a3:09:c4:34:21:49:70:57:40:6e:21:
18:02:4a:e4:57:59:1b:cd:8e:0a:c5:f9:61:af:e1:c3:5f:2a:
70:ab:0a:6a:a3:ce:8e:bf:5a:40:31:c3:31:b0:a5:1a:93:9f:
04:eb:96:4b:be:8f:ac:32:26:27:43:e7:c5:03:24:b4:2a:fe:
79:86:f0:dc:d6:8e:79:78:88:c1:c6:fb:62:34:f6:50:a2:73:
88:92:68:a8:af:fd:75:2c:57:41:8c:3a:37:fa:c8:b4:81:94:
3c:49:ad:68:eb:8d:af:2c:b1:32:5a:c4:80:59:15:65:52:09:
f1:2e:d9:7c:0b:87:dc:58:8a:17:6f:3f:12:09:38:78:b4:5a:
c7:1f:ee:4f:61:d5:a0:e8:94:6f:7b:a5:12:ae:2c:66:6d:b8:
b4:da:18:b1:7c:78:a7:af:4d:8f:6d:65:11:1b:7c:7c:15:3e:
e0:7f:3f:d6:a5:33:82:0d:ee:14:2f:73:46:1c:ca:63:17:9e:
20:8e:6c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 22:49:46 2025 by rpki-client