Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/A8vrUttY2pt9hqbAM3wLETTZjYo.roa
File: A8vrUttY2pt9hqbAM3wLETTZjYo.roa (raw, json)
Hash identifier: KJvwPdd8KBsNoAGfrpSQr6jkt3z2+2lP5/bnHoAx6pI=
Subject key identifier: 03:CB:EB:52:DB:58:DA:9B:7D:86:A6:C0:33:7C:0B:11:34:D9:8D:8A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188A07D63B8362F333FE7B5C732FFBE8992
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/A8vrUttY2pt9hqbAM3wLETTZjYo.roa
Signing time: Fri 09 Jun 2023 14:09:12 +0000
ROA not before: Fri 09 Jun 2023 14:09:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:a0:7d:63:b8:36:2f:33:3f:e7:b5:c7:32:ff:be:89:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 9 14:09:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=03cbeb52db58da9b7d86a6c0337c0b1134d98d8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:46:b7:06:20:da:7b:64:17:78:6d:d6:f0:d6:
13:ce:72:94:77:5c:f2:ff:2b:95:6f:b5:b8:c0:eb:
ea:0d:5c:ed:58:68:e3:e2:59:73:5e:77:bc:f3:db:
9d:18:d7:b2:c9:67:9d:2a:e9:d2:a9:75:48:02:04:
e4:32:07:c3:5c:75:ff:a1:00:9c:03:34:91:c0:7a:
dd:49:97:e7:df:15:ad:78:8d:c6:8f:e3:f5:02:86:
6b:47:bb:6e:66:d6:fe:eb:51:e2:27:0b:73:3a:0e:
c3:42:01:92:3b:f9:25:51:13:2b:ca:39:46:c4:9e:
1e:5c:e0:a1:b0:d2:1b:2f:40:ae:d0:29:d7:e2:c5:
50:68:4e:fc:4f:35:ee:58:4c:27:b8:be:c0:41:3d:
da:ef:a7:d8:2c:b4:0f:b2:21:49:18:28:4e:34:fe:
76:89:ee:2c:a9:70:14:d0:37:34:c7:53:68:96:c1:
a4:ed:4f:bf:b0:b9:f8:83:63:40:cd:6d:5e:8b:0e:
a9:91:0c:ef:4f:d1:2d:62:ff:e2:37:c1:26:ed:86:
18:c2:7c:66:98:97:6a:c4:0b:17:ef:32:8e:9a:8d:
47:84:b6:33:65:e0:3d:fc:06:df:fe:c8:ff:79:81:
75:32:37:af:8c:25:eb:55:06:69:08:73:e4:d7:5a:
7c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:CB:EB:52:DB:58:DA:9B:7D:86:A6:C0:33:7C:0B:11:34:D9:8D:8A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/A8vrUttY2pt9hqbAM3wLETTZjYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
32:0c:07:1a:67:84:94:d5:f1:c9:78:89:b2:8c:b7:7f:04:08:
56:b0:ef:66:46:16:ab:14:f9:e1:45:fe:91:5f:0a:71:fc:5b:
6a:b0:fd:f3:bb:69:ad:1a:6d:48:41:a6:dd:65:d7:f6:73:40:
ad:b7:6f:6f:6c:3a:14:aa:f5:eb:87:3c:17:42:a8:70:0e:2f:
f1:40:66:af:9f:50:fa:42:bc:ba:2f:04:b6:f4:44:9f:ec:a9:
b3:25:23:77:e9:bf:5f:4e:b4:3b:fa:b2:1c:aa:9c:52:35:b7:
d5:d1:6d:cd:8f:c9:4a:a1:03:23:d8:ef:03:99:b6:f5:b7:14:
3a:64:ba:71:88:41:b1:73:01:d0:45:cc:7f:74:64:2e:c7:d4:
ba:2d:b8:2e:f9:7f:9c:3b:fa:d6:90:09:08:92:23:11:31:fd:
7a:ea:a8:23:77:c5:45:9f:c8:12:5d:29:5b:6a:c3:67:be:26:
af:76:d4:33:4d:fb:01:7b:ba:9f:7d:e2:dc:90:a8:e8:58:53:
d0:81:f6:63:a9:a9:59:ed:c2:7f:48:32:31:cc:3d:cc:66:ed:
e4:6d:37:da:0f:75:cc:79:1a:4f:e3:c4:14:35:28:ae:d3:1e:
14:cf:86:89:32:4b:7e:21:72:fc:d9:67:b7:6b:76:5e:44:55:
e1:c2:0c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 19:55:50 2025 by rpki-client