Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9FeBdnieWDJ758D5p64S65nCD7g.roa
File: 9FeBdnieWDJ758D5p64S65nCD7g.roa (raw, json)
Hash identifier: GJhfsrRxr6JJfijEgxPEc7kq5R6/53lvpbg/6Zu5vmw=
Subject key identifier: F4:57:81:76:78:9E:58:32:7B:E7:C0:F9:A7:AE:12:EB:99:C2:0F:B8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187E4EFA4A3C2ABE185BB7AAADE50DCF84F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9FeBdnieWDJ758D5p64S65nCD7g.roa
Signing time: Thu 04 May 2023 04:05:23 +0000
ROA not before: Thu 04 May 2023 04:05:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:187:e4ef:28b0/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e4:ef:a4:a3:c2:ab:e1:85:bb:7a:aa:de:50:dc:f8:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 4 04:05:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f4578176789e58327be7c0f9a7ae12eb99c20fb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c4:5f:6a:cd:ad:5f:10:05:c9:b8:43:1a:2b:
46:89:1a:70:35:4f:6e:84:3f:41:24:fc:99:21:51:
95:95:00:d5:16:b7:ac:ff:f2:b0:8f:e5:b8:67:82:
e5:7f:c6:21:64:3f:a1:7f:6f:db:53:cd:2f:ed:9a:
ca:39:a5:42:e9:e6:6d:ab:cb:8d:34:84:49:61:9c:
e9:64:5c:f7:d2:e7:1a:a9:e4:cb:b7:6c:86:f6:35:
5d:e3:e9:ff:c8:52:d5:42:fb:cd:74:39:14:e5:99:
52:6d:82:a7:e7:9d:ea:11:4a:58:2c:17:98:ff:00:
eb:54:8c:ff:b2:12:b4:aa:e6:af:99:c6:51:8d:3d:
af:9b:d4:c7:ca:48:6e:29:72:f5:75:71:08:3b:a4:
3e:cd:7d:7f:92:b1:fc:3a:7b:6b:5d:23:eb:fe:a0:
2e:35:fe:17:72:04:3e:cb:28:72:8d:41:67:f8:76:
a3:3e:21:79:6f:5e:5a:2d:ac:b6:67:59:3f:b5:55:
39:35:39:21:17:fd:1d:b4:26:0d:37:1c:42:e2:27:
50:3a:11:59:1f:89:86:83:5c:dc:e2:6e:6b:b3:ac:
0e:c3:bb:8d:24:b2:3c:a3:25:c4:07:7a:3e:c3:06:
a4:33:ef:c5:1c:84:7b:94:f3:54:42:e6:1b:d8:c0:
2a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:57:81:76:78:9E:58:32:7B:E7:C0:F9:A7:AE:12:EB:99:C2:0F:B8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9FeBdnieWDJ758D5p64S65nCD7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
96:83:ea:df:d0:cd:a6:06:12:d0:86:72:0c:85:16:ad:7a:e1:
11:79:48:b5:bc:38:96:2c:4f:43:73:19:5f:a9:32:5a:8e:d4:
4b:30:44:ae:39:62:53:da:a7:23:f3:6a:2f:5c:ca:b6:9a:9b:
fd:a5:44:37:dc:5b:81:e5:2c:91:33:84:f0:35:75:53:01:09:
0f:f8:69:71:80:16:59:83:43:bc:fc:2e:58:67:87:dd:15:70:
c3:c8:f9:ae:d2:11:fc:c5:a8:4c:e8:0f:88:5d:4b:8b:33:6e:
2e:c2:c2:ef:df:56:87:74:f8:26:45:63:08:3c:c3:5f:1d:09:
b3:14:1e:4b:d7:86:2b:8e:62:8f:0c:50:16:fc:9f:84:d8:df:
7e:4f:ec:56:75:32:02:9f:a5:2d:39:78:09:83:26:0d:9c:44:
ac:a3:34:ec:63:1b:11:3c:f3:2b:d1:21:c3:f1:94:14:38:1b:
a5:64:69:0d:46:f7:9f:88:28:a4:e9:06:c0:fa:c0:c7:de:25:
14:04:2d:9c:22:79:37:43:8c:73:37:61:7e:ac:ff:8d:7f:4b:
97:98:a8:50:3e:96:af:05:75:72:1e:b7:aa:f4:39:ab:0a:a3:
58:52:07:bd:f1:16:b1:5f:9d:2c:bc:fa:8c:d4:69:c9:58:58:
3b:3c:e9:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 08:48:21 2025 by rpki-client