Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5zLkS-Z2txN7OsTMBOPnpazaKaU.roa
File: 5zLkS-Z2txN7OsTMBOPnpazaKaU.roa (raw, json)
Hash identifier: KxN65p41N5fNXzPzxo1bUlzYZdxfX25NBRDWxdF3bQs=
Subject key identifier: E7:32:E4:4B:E6:76:B7:13:7B:3A:C4:CC:04:E3:E7:A5:AC:DA:29:A5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187149477E17C8F1D4055010D819D1B7C15
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5zLkS-Z2txN7OsTMBOPnpazaKaU.roa
Signing time: Fri 24 Mar 2023 17:04:46 +0000
ROA not before: Fri 24 Mar 2023 17:04:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:187:1493:f5dc/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:14:94:77:e1:7c:8f:1d:40:55:01:0d:81:9d:1b:7c:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 24 17:04:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e732e44be676b7137b3ac4cc04e3e7a5acda29a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:6e:00:cb:02:60:76:4d:ff:da:55:66:69:1d:
fc:84:e7:b8:cd:7b:33:f1:4c:3c:8d:b8:91:84:0e:
e6:38:0e:63:88:e5:4a:e9:c9:d9:14:f9:9b:84:15:
67:b9:12:9b:93:5a:83:db:ca:c4:b3:28:01:a4:dd:
8b:ac:2c:e2:7b:95:f7:bd:f1:fb:a2:93:63:a6:c1:
7d:fd:00:7c:9f:e9:9c:73:19:97:40:05:f9:6b:82:
25:2c:50:70:fa:f8:f0:c7:f8:5a:96:1c:ad:43:0e:
a8:f0:39:b8:f4:42:fa:10:1e:c0:ca:d1:79:7c:a8:
bc:16:63:4c:0f:57:fc:b9:c4:e8:a7:1f:b5:6b:9a:
74:d9:34:5f:60:0a:e8:32:5d:05:a7:e0:a0:56:ee:
58:55:48:e2:cb:0a:02:19:03:15:12:10:a5:e6:8d:
6c:ba:ee:0e:59:47:f1:a2:ce:af:b7:ed:d7:55:e3:
08:f2:79:ae:42:a6:de:b3:8e:bd:71:36:d3:8d:50:
9e:ad:97:9c:62:66:33:d6:02:f3:75:62:6a:93:53:
ab:d7:e1:c6:2f:f4:24:50:9c:16:c6:c2:bb:f5:f5:
d9:31:fd:da:c7:73:2b:38:46:43:e3:20:48:c0:7c:
00:09:61:18:eb:f6:1e:b4:d0:43:15:bf:2b:8b:2c:
a3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:32:E4:4B:E6:76:B7:13:7B:3A:C4:CC:04:E3:E7:A5:AC:DA:29:A5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5zLkS-Z2txN7OsTMBOPnpazaKaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0f:05:68:18:f4:16:1c:eb:63:ef:f5:d6:90:28:ef:c9:bc:d4:
2c:5e:86:33:50:86:e5:28:13:a4:04:01:73:a1:69:a8:de:8f:
26:1f:cf:9e:a0:bd:ed:f8:ae:16:0d:82:4e:eb:13:73:18:ce:
23:0a:bf:04:ff:05:23:8d:e0:27:d2:97:28:f9:c1:28:ab:f7:
d9:2f:c0:3d:df:fc:e0:3b:43:48:28:39:4d:5d:ec:b3:f0:d7:
93:97:fd:f3:3e:19:2f:42:8f:a4:6e:51:c9:ce:5f:e9:86:ff:
23:c4:49:2d:81:75:94:a7:f4:53:62:da:22:6a:6a:fa:09:b1:
f2:13:44:8f:0e:8e:22:89:30:41:55:1f:c8:65:52:10:bc:89:
67:70:d8:ad:ed:2b:0d:dd:37:45:63:a4:bc:97:7e:7f:35:1e:
8a:44:8e:74:37:16:f0:26:8d:bc:81:36:2f:c4:39:13:03:c0:
7a:59:e9:f3:b4:aa:df:56:23:ed:f4:70:b0:ea:42:c7:45:cf:
89:82:84:29:ab:6a:69:4e:c2:f6:7e:b9:90:04:c8:2f:5e:ec:
4e:0f:6c:60:89:6b:d2:b5:a3:0d:90:59:4b:20:00:7c:21:c9:
78:8a:ba:55:81:f9:58:86:be:0e:63:b2:e9:57:57:43:98:d8:
0c:69:40:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 21:05:23 2025 by rpki-client