Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/98v1Qi8_PWtwCM36naolCTY0xF0.roa
File: 98v1Qi8_PWtwCM36naolCTY0xF0.roa (raw, json)
Hash identifier: WL8awqA6PPilRVbpkuG7bXpcI5CLSpUCCgKh0BHAwvw=
Subject key identifier: F7:CB:F5:42:2F:3F:3D:6B:70:08:CD:FA:9D:AA:25:09:36:34:C4:5D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018888A85083EFDC6DCA7BFAE529566C692D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/98v1Qi8_PWtwCM36naolCTY0xF0.roa
Signing time: Sun 04 Jun 2023 23:05:12 +0000
ROA not before: Sun 04 Jun 2023 23:05:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:188:88a7:bd43/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:88:a8:50:83:ef:dc:6d:ca:7b:fa:e5:29:56:6c:69:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 4 23:05:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f7cbf5422f3f3d6b7008cdfa9daa25093634c45d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fe:79:85:84:53:97:e4:2d:a3:ee:ef:7d:8c:
72:b7:9e:14:a5:be:19:8c:b1:1f:6d:e4:48:ff:1a:
59:b2:4e:08:bf:b3:80:6c:cb:84:1d:eb:c1:71:8a:
5e:92:82:d8:55:c2:b8:67:90:8a:e5:ea:2f:03:b4:
ae:6b:18:0b:fa:80:7f:25:b0:c4:68:fe:68:a9:2f:
51:93:ad:03:22:6e:d2:95:d3:98:da:d9:b7:04:af:
81:22:21:1f:79:7c:38:08:00:cf:73:25:d7:01:f4:
09:26:7b:b9:aa:a1:d5:ff:a4:cf:fb:db:2e:df:b2:
90:54:ad:80:b2:00:7d:6b:2c:dd:31:a9:43:56:dd:
5e:e1:63:7d:df:9d:20:88:3c:3c:97:28:e3:62:71:
7b:0e:7d:d2:de:8a:54:a5:e4:6f:6c:d2:12:10:6a:
ba:1e:21:93:32:84:fb:76:39:68:b5:2c:d5:fd:b9:
72:c2:04:8e:be:ee:9b:1a:f6:b2:89:be:2e:4e:75:
38:ce:db:1f:87:65:96:71:d3:f9:d8:b6:34:a0:c6:
ea:49:f6:47:c1:55:89:59:98:16:27:4c:bd:19:a1:
15:10:50:20:f5:07:ff:82:44:6d:44:6d:56:67:56:
ff:a6:53:69:9d:b2:12:0e:df:67:26:44:1f:c6:5d:
e6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:CB:F5:42:2F:3F:3D:6B:70:08:CD:FA:9D:AA:25:09:36:34:C4:5D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/98v1Qi8_PWtwCM36naolCTY0xF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
82:83:ba:07:87:15:ae:05:f2:fe:f6:e8:d9:2d:2e:72:33:f4:
50:5c:43:5a:f9:74:a5:e2:59:2e:e4:01:33:4d:bb:c4:be:5d:
01:85:8e:39:f7:63:37:a9:0d:4a:b9:f7:e6:ea:ee:6f:e3:00:
0d:68:8b:9e:6a:28:d9:e9:91:df:a2:40:8b:a4:2a:c5:ff:f5:
49:85:9c:4e:63:59:89:8e:f9:be:aa:65:da:76:10:1d:16:61:
90:05:40:f8:c6:7e:3f:b6:41:e6:5d:14:3e:3c:26:bf:2f:5e:
b7:70:48:94:75:da:46:17:b3:54:04:31:99:4f:25:d9:bf:5f:
ff:0a:eb:55:f6:19:db:a1:f4:6f:07:39:01:5d:cc:0d:33:e7:
80:4a:bc:6b:82:3b:c9:2b:57:ca:35:c8:74:90:37:73:1c:71:
41:73:aa:64:71:15:08:5c:85:d1:62:0c:c8:94:25:87:b7:22:
1c:f7:ab:d1:ad:0e:9b:f5:f4:35:f0:c0:4b:f0:6c:3c:f1:c8:
94:8c:d6:e9:0a:9c:89:57:ed:2a:ad:5c:ba:96:41:aa:25:ce:
1c:a7:96:33:ac:95:ac:27:d8:94:ea:c0:98:b2:40:08:91:62:
4b:fb:43:ec:a9:5a:b5:9b:62:f8:61:c1:f0:2a:20:bc:d0:5a:
2c:1f:d3:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:27:47 2025 by rpki-client