Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/91jVPeD1Vj0EL-HZd5BAvnS0YH8.roa
File: 91jVPeD1Vj0EL-HZd5BAvnS0YH8.roa (raw, json)
Hash identifier: ToocYOE5ThAnp4lEqHa0jdZEVOVXNhrwiDTKDIaqzcQ=
Subject key identifier: F7:58:D5:3D:E0:F5:56:3D:04:2F:E1:D9:77:90:40:BE:74:B4:60:7F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018997B0B3F4D0E1070234C0B6C67C29D19E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/91jVPeD1Vj0EL-HZd5BAvnS0YH8.roa
Signing time: Thu 27 Jul 2023 14:11:27 +0000
ROA not before: Thu 27 Jul 2023 14:11:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:97:b0:b3:f4:d0:e1:07:02:34:c0:b6:c6:7c:29:d1:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 27 14:11:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f758d53de0f5563d042fe1d9779040be74b4607f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7c:71:e6:ff:e6:64:af:3f:26:28:3e:c4:39:
04:3b:4a:56:26:9e:64:25:2b:a5:4b:3c:d0:4f:86:
ff:2f:ea:dd:f9:bb:dc:0c:d4:7d:53:87:d0:c5:17:
7d:f0:5d:54:c4:ef:db:be:27:2b:ec:e6:37:71:d5:
e7:6b:94:09:5c:34:be:d0:87:7c:85:03:b1:df:05:
00:ac:ee:63:e2:26:19:df:44:8c:03:3a:dd:ce:c1:
54:1c:7b:f1:68:9c:6f:7b:29:bd:de:a7:a1:5f:0e:
23:e1:f6:1b:ed:97:6d:25:77:08:55:61:05:0f:13:
07:33:2f:d7:51:ef:dd:e5:12:85:10:c4:39:c0:19:
58:0d:c8:5a:76:81:0d:e8:6c:ee:f4:8e:e8:12:22:
e0:77:d1:b9:af:a7:4c:f4:0b:e7:a7:81:90:81:64:
55:2b:25:3a:82:be:9b:9c:f7:41:89:d6:c1:2d:2e:
2c:12:2a:d9:7b:95:07:90:20:49:b4:10:a1:28:c1:
9f:48:95:16:68:3c:2e:a2:7a:df:4e:92:c6:38:ab:
b0:63:e8:b8:17:28:96:f9:f2:cb:76:f3:dd:ed:df:
cc:fe:42:bc:2f:cc:35:20:0c:fc:eb:10:30:82:00:
0f:de:a1:95:75:2d:e4:16:e8:e1:fd:bf:ac:c5:d8:
e6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:58:D5:3D:E0:F5:56:3D:04:2F:E1:D9:77:90:40:BE:74:B4:60:7F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/91jVPeD1Vj0EL-HZd5BAvnS0YH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5d:3f:ee:cf:0a:09:40:2c:a3:d0:8b:36:29:85:31:87:bc:d5:
01:3b:f7:70:01:5c:49:bc:10:35:dd:25:60:18:86:b5:8b:c2:
8a:e7:8f:67:42:c7:0c:c4:9d:66:c1:b3:b4:36:d2:03:24:b5:
61:9d:17:7e:46:0d:24:04:18:33:c6:2f:29:01:3e:cd:c3:a6:
29:17:3c:9d:e2:aa:33:bb:85:82:8c:d5:26:87:e2:b1:c0:50:
15:4f:ef:dc:0b:25:b8:86:a8:e7:5b:b0:9a:4f:4d:be:8f:1f:
a8:cf:0d:47:05:4a:3f:33:87:ca:f3:b3:df:ff:8a:39:6a:d2:
1c:dc:e1:2f:92:18:e0:c7:9a:5b:a4:fc:99:06:32:b1:33:a2:
56:68:81:1c:db:29:9b:fa:70:73:cd:be:b9:b0:c4:aa:a9:12:
a9:a3:d2:55:e5:12:ea:94:01:de:18:12:02:a5:df:27:ca:f5:
3a:f0:eb:9d:38:33:74:76:e8:4d:02:20:e5:29:5b:8a:2d:51:
f2:02:e5:9b:ea:d5:80:10:84:3e:c1:8d:8d:ec:59:1c:23:1e:
f0:18:5d:d5:bc:7f:c8:e6:27:3d:62:2e:80:8e:e6:a1:51:1b:
3a:5a:9f:0c:fc:5c:cb:d2:7d:09:6c:10:68:69:25:78:c1:31:
d0:93:a9:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 14:48:21 2025 by rpki-client