Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/61kFbPP0jpl3mK_EuWWFwjuBLBM.roa
File: 61kFbPP0jpl3mK_EuWWFwjuBLBM.roa (raw, json)
Hash identifier: 5QU+lIOEhTFckjEXiVlNCFBjCH1q/2VlJKepU5QX+RA=
Subject key identifier: EB:59:05:6C:F3:F4:8E:99:77:98:AF:C4:B9:65:85:C2:3B:81:2C:13
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189E2CDFE0E9CF8ECA3071C060DF37A1EB2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/61kFbPP0jpl3mK_EuWWFwjuBLBM.roa
Signing time: Fri 11 Aug 2023 04:14:57 +0000
ROA not before: Fri 11 Aug 2023 04:14:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e2:cd:fe:0e:9c:f8:ec:a3:07:1c:06:0d:f3:7a:1e:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 11 04:14:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb59056cf3f48e997798afc4b96585c23b812c13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a6:63:31:dc:2a:12:c2:59:eb:62:e0:0b:07:
7b:6e:cb:5d:cd:9e:7e:aa:1b:67:39:53:84:0f:ec:
95:17:a4:78:77:27:cf:a5:97:17:1f:85:f4:21:b3:
97:45:e6:ff:22:49:6d:05:eb:2e:b1:d1:c3:5e:8d:
eb:40:9f:74:37:10:43:c3:c3:59:2f:03:67:10:e9:
ec:7d:57:71:95:8a:27:e6:1b:59:c3:a8:ed:86:5e:
84:5d:0a:25:ba:07:34:13:32:c0:ba:a7:7c:36:d8:
17:5e:a9:ab:bd:00:01:71:b5:b4:79:f4:f6:ac:2e:
6b:31:93:8a:b6:e4:64:c1:7b:77:08:6a:c4:c8:8d:
52:72:e4:42:82:0c:50:fb:22:c7:a4:a2:f6:91:4b:
98:78:a7:93:5a:5e:0c:43:14:9b:5a:cb:1a:cb:40:
1c:40:5d:07:9a:39:d0:36:5a:95:cf:7e:9b:f8:5a:
81:8c:35:bf:48:9b:ed:d5:96:a7:12:0d:c5:4d:45:
e3:2a:1e:4b:85:fc:d6:78:74:02:fc:ca:6b:01:e1:
c3:93:af:56:a5:d5:ec:ed:d2:bc:76:90:64:34:8f:
1c:ad:4b:75:d3:fb:1d:a7:47:99:d1:0e:a4:09:cd:
3f:7e:86:1a:b7:4c:c5:e2:c9:e1:61:4d:26:79:85:
56:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:59:05:6C:F3:F4:8E:99:77:98:AF:C4:B9:65:85:C2:3B:81:2C:13
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/61kFbPP0jpl3mK_EuWWFwjuBLBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
31:b8:ad:04:1d:2b:2d:02:94:71:cd:cc:69:81:9d:07:8c:58:
9c:15:cd:fe:78:d1:36:a3:31:fb:af:c4:69:e5:30:fb:c5:af:
c5:c1:f7:67:f0:6b:79:a0:e7:43:09:51:5d:9d:26:83:d9:bb:
23:46:ed:e4:c9:f5:f3:7d:9d:c5:51:38:9d:4d:ef:2c:b0:7a:
db:7d:65:f4:bd:6e:e8:36:c5:95:82:b8:e5:fb:e8:c5:36:b4:
8a:4f:1f:31:86:59:60:06:77:a0:3c:ab:f1:b3:30:6b:33:66:
ad:e1:d0:43:f8:2c:cd:c2:5c:d3:23:0c:80:9b:dc:5b:94:42:
f6:ee:d4:ee:c4:21:85:49:de:d8:8c:1f:81:48:44:84:6f:7d:
03:b6:0a:56:9a:a5:8c:30:f0:97:5a:6b:24:e7:ce:ef:53:57:
04:50:68:c5:06:b1:36:c2:1e:9c:ac:56:37:9e:8f:da:5c:20:
ac:2a:e8:40:0c:f1:f9:54:90:af:b8:9a:e8:0f:0b:26:92:95:
19:f4:25:eb:45:fc:9a:34:da:3d:2c:3f:ac:d0:74:31:ac:eb:
8b:f3:82:f9:43:9a:28:36:7c:44:c0:ea:f2:92:48:bb:5c:88:
b2:0b:fa:4f:3d:49:84:05:6d:aa:00:24:50:ac:fa:3a:8a:45:
23:4e:b8:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 23:52:05 2025 by rpki-client