Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5A4vnpXOD2r6tO3pxJ2FhRu-2l8.roa
File: 5A4vnpXOD2r6tO3pxJ2FhRu-2l8.roa (raw, json)
Hash identifier: Jpf2PeJrj3FAFdGmSiHRJlkLqvvMoYVkETfmql439sA=
Subject key identifier: E4:0E:2F:9E:95:CE:0F:6A:FA:B4:ED:E9:C4:9D:85:85:1B:BE:DA:5F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189E039E9637E4132D34E8D4E76EB4856E1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5A4vnpXOD2r6tO3pxJ2FhRu-2l8.roa
Signing time: Thu 10 Aug 2023 16:13:58 +0000
ROA not before: Thu 10 Aug 2023 16:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e0:39:e9:63:7e:41:32:d3:4e:8d:4e:76:eb:48:56:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 10 16:13:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e40e2f9e95ce0f6afab4ede9c49d85851bbeda5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a1:93:ed:5c:4a:62:f2:18:28:04:fd:1e:36:
4f:f6:40:8a:86:0f:df:b4:8f:04:0b:20:22:e8:4b:
99:5d:90:0c:27:56:65:8f:16:7a:8b:58:a4:63:3c:
18:c9:ab:d5:a2:fb:ed:84:ec:9d:09:ab:9b:c2:ba:
ed:bc:18:2d:67:c6:1a:11:48:01:a0:6f:de:38:9c:
3b:c9:30:1d:83:52:1e:ea:78:14:59:07:40:62:a1:
24:c5:1e:8a:ca:a1:76:76:3e:a0:2c:b8:67:c8:0b:
24:37:a2:82:6b:f9:d7:17:29:9b:71:b8:5e:cd:64:
45:a0:c9:6e:37:5e:35:62:e4:e5:6f:04:15:55:be:
6a:8f:5a:13:f9:55:5f:d7:40:99:ef:69:0b:a7:5b:
ac:38:49:b3:1f:d7:cb:66:29:f1:94:6f:39:c4:09:
4c:6b:45:ec:32:2b:92:77:66:6e:6c:0a:b8:4e:9c:
f4:c4:c5:bc:a3:fc:31:51:c2:c5:70:de:c6:16:aa:
6b:41:9b:72:2e:e2:ea:35:f8:e4:9b:87:93:65:3a:
b5:d3:69:25:06:cf:d7:af:f2:c4:fa:3b:80:d8:dd:
65:33:c4:f1:26:fd:f7:a0:c0:15:c8:d2:a4:72:8a:
e3:22:ff:22:8e:6f:7f:db:c9:5e:cd:e4:f4:2c:3e:
fa:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:0E:2F:9E:95:CE:0F:6A:FA:B4:ED:E9:C4:9D:85:85:1B:BE:DA:5F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5A4vnpXOD2r6tO3pxJ2FhRu-2l8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
93:0b:4d:b3:7f:2a:75:6a:a2:51:92:ae:e7:c3:f3:e2:f5:71:
55:8e:3c:98:09:f1:96:1b:f0:2a:a4:7e:e5:a2:53:ec:8e:7e:
b3:8e:45:90:00:9e:d4:db:b5:54:be:1f:4e:1d:08:8c:3b:55:
a5:ad:ca:da:f0:59:36:b6:0c:c7:d6:1e:38:6d:7c:95:ef:33:
30:ef:6d:e4:2c:d8:c5:e7:96:28:58:8b:fe:26:de:55:e4:df:
20:a5:ac:3b:7f:59:b5:87:14:47:66:84:38:92:c5:ab:14:e3:
ad:27:b6:d6:af:6a:cd:58:b1:9a:ea:a0:c3:e4:49:d5:f5:7c:
42:9c:20:92:92:b4:a7:97:80:74:2f:ba:06:14:95:c4:fc:d6:
d6:0c:88:d7:36:09:0e:d9:64:81:1c:03:76:ff:f8:b6:5d:90:
f2:38:71:04:44:3c:16:06:d8:54:9c:bb:47:32:81:e1:f9:a7:
84:c9:56:1c:a8:b1:50:52:34:eb:de:4e:77:7b:a4:5a:0a:e2:
a1:30:f8:f5:26:50:b2:1d:f1:bc:5e:eb:bb:59:c2:33:87:ca:
8a:21:49:7e:5b:ec:28:fb:42:40:6e:72:df:1e:1c:b9:0d:af:
3b:06:61:7f:e2:bf:cd:ae:27:ae:16:29:2d:e3:91:39:26:55:
0b:ec:6a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 04:04:22 2025 by rpki-client