Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9igiU_e6Nz6XOV6riHtUHwEx8Jk.roa
File: 9igiU_e6Nz6XOV6riHtUHwEx8Jk.roa (raw, json)
Hash identifier: Gh52EYbuLbiItVBoPhEc4mTLe0bL0yUE9tt5oA/eFpY=
Subject key identifier: F6:28:22:53:F7:BA:37:3E:97:39:5E:AB:88:7B:54:1F:01:31:F0:99
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01876659EE579F1345B771E58D3FAB68BDFB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9igiU_e6Nz6XOV6riHtUHwEx8Jk.roa
Signing time: Sun 09 Apr 2023 14:09:42 +0000
ROA not before: Sun 09 Apr 2023 14:09:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:66:59:ee:57:9f:13:45:b7:71:e5:8d:3f:ab:68:bd:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 9 14:09:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f6282253f7ba373e97395eab887b541f0131f099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2c:ab:8f:32:29:88:14:72:18:50:ad:3d:95:
53:65:ad:26:41:6b:e3:d3:7e:91:b8:db:5f:f5:60:
ca:71:66:51:b3:67:8e:f4:a7:41:85:6c:bc:e2:5d:
56:39:bc:23:3a:30:96:c7:53:8b:81:48:17:6e:15:
55:1c:b8:13:7a:8a:c5:06:d0:6b:c9:bb:b7:7b:62:
15:d9:02:d2:f9:d0:f0:1c:b9:77:dd:8b:07:08:fe:
70:ea:82:ee:5f:b3:30:bc:a7:06:7e:db:0b:f0:e1:
63:91:af:aa:9b:bb:1f:7e:38:74:6f:25:5d:5b:9c:
51:e2:29:29:f0:47:67:fc:c0:23:69:f2:5c:73:86:
b9:d5:92:07:29:77:9e:af:b2:08:55:20:8d:f7:1d:
74:9b:63:19:ed:23:d8:4d:8d:fd:77:be:6b:e3:85:
33:b0:d3:bf:07:bd:bd:c6:ca:10:12:cf:fd:8d:8a:
30:26:2e:97:2f:c0:a7:89:62:5e:95:99:ca:1e:e9:
28:5f:33:cd:80:7d:33:cd:37:c2:68:01:0f:1f:ca:
f5:c1:3a:52:97:bb:53:26:2f:c8:f1:3d:ac:58:a5:
26:d4:d6:9a:da:0c:7d:70:75:e8:82:39:5b:f9:20:
e5:99:29:64:73:77:51:a4:b7:61:2c:ca:b3:eb:0d:
c3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:28:22:53:F7:BA:37:3E:97:39:5E:AB:88:7B:54:1F:01:31:F0:99
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9igiU_e6Nz6XOV6riHtUHwEx8Jk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
70:d6:e1:d6:00:b2:cb:79:20:2d:b1:bb:c1:41:87:a3:48:9e:
98:a9:d0:78:e0:45:4e:5a:7c:89:b5:bf:94:53:36:75:b8:ce:
36:02:92:c9:a4:4f:93:30:46:c4:a6:a1:14:10:01:93:8f:89:
fc:9f:59:de:c1:35:c4:b3:a9:22:b3:e1:ec:a6:8d:9c:01:42:
ca:99:51:27:ae:17:9d:4b:9e:90:b6:70:18:67:a9:e5:82:dd:
88:9b:2d:08:44:12:c4:f9:5d:81:91:9b:40:b8:b4:b3:f3:54:
62:c2:20:6a:af:9a:23:88:bb:ba:f9:17:a3:ae:4c:68:1d:0a:
df:06:44:77:c8:7b:3c:5d:70:0b:e7:3e:cd:fc:87:a8:77:50:
8d:08:27:96:a7:76:04:9d:8c:53:a5:23:fb:0d:3a:87:bd:0b:
7b:74:bc:30:3e:0a:c0:a9:87:7c:8a:16:5e:7f:bb:d2:38:04:
01:80:b9:af:d4:cd:c0:20:5c:51:0a:1c:9b:9c:e7:44:04:59:
3d:ac:ca:31:93:62:26:aa:ab:69:d0:c8:70:24:ea:7f:1e:46:
64:e9:5d:af:32:b4:3c:cb:69:a4:ab:0a:05:ee:db:f3:a7:33:
b7:ba:a1:bd:58:5c:22:56:24:61:7a:51:5a:30:79:22:7e:13:
37:03:53:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:08:00 2025 by rpki-client