Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AIdHmf6Bas8d_BVIZAxYNECyjX0.roa
File: AIdHmf6Bas8d_BVIZAxYNECyjX0.roa (raw, json)
Hash identifier: 5CkZmyvsAXgkoBdxDJjcI9fBG47wLwTvyt2ggKpIMZQ=
Subject key identifier: 00:87:47:99:FE:81:6A:CF:1D:FC:15:48:64:0C:58:34:40:B2:8D:7D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187EA8317233EDE53A11FAD51D7CE57EE8A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AIdHmf6Bas8d_BVIZAxYNECyjX0.roa
Signing time: Fri 05 May 2023 06:04:32 +0000
ROA not before: Fri 05 May 2023 06:04:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:187:ea83:108f/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ea:83:17:23:3e:de:53:a1:1f:ad:51:d7:ce:57:ee:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 5 06:04:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=00874799fe816acf1dfc1548640c583440b28d7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:50:cb:be:56:c4:1b:c6:6f:75:e6:0b:0b:63:
af:ca:41:25:bc:16:f0:ca:19:07:6a:09:fe:8b:69:
88:76:ab:62:5d:bb:85:f8:7c:10:7a:16:35:4b:41:
23:19:49:43:d3:cc:ae:87:37:bb:c9:72:c5:8b:8e:
f0:74:d9:33:7e:f1:7b:f0:88:b1:0f:93:5c:b7:5d:
9f:db:e5:f0:a0:6a:b1:d6:e4:b0:f6:7c:5f:9c:94:
72:4b:77:33:74:b6:73:09:5c:4a:fe:0b:92:11:e4:
0a:70:39:82:4d:3a:37:8b:09:67:68:51:d9:3e:21:
24:3f:e4:8e:b8:b3:76:b2:15:6d:d5:bd:a1:ca:4d:
8a:2b:08:39:16:f2:40:60:ea:06:9b:81:6a:be:89:
bd:a2:a5:3a:2d:c5:6e:df:17:2f:b9:7b:e9:16:5d:
52:0b:76:4f:c6:b8:51:4f:a8:13:6a:a7:ed:c5:9b:
53:f9:53:89:77:69:4f:fd:d2:b5:1d:f3:22:a3:eb:
4a:ad:03:50:ca:a8:83:da:ad:1d:ed:77:b5:50:4a:
67:eb:38:34:35:7d:04:6c:fc:01:3d:b8:3e:78:18:
41:b7:64:24:79:28:35:d1:74:c2:93:11:37:2f:8f:
05:7f:b4:ec:20:a1:c3:29:ac:34:19:58:ee:2b:d0:
56:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:87:47:99:FE:81:6A:CF:1D:FC:15:48:64:0C:58:34:40:B2:8D:7D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AIdHmf6Bas8d_BVIZAxYNECyjX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
26:86:15:3e:42:06:56:cc:af:29:25:ef:41:bb:0b:51:42:32:
6f:4d:03:fc:9a:a5:4e:e6:af:e6:bb:93:51:56:09:c2:9e:72:
fe:05:b5:29:98:7d:8d:c2:31:58:5f:2a:c4:fd:49:da:56:68:
4c:a0:6a:c3:b4:a7:27:8d:8c:db:81:91:5d:83:6f:ed:24:5d:
77:27:ba:fc:37:04:1d:92:cf:dc:ef:3c:ab:b2:00:99:ba:17:
0e:d2:c4:67:89:db:74:84:e6:c2:e4:fb:96:4a:2e:72:c8:cd:
32:c5:64:02:56:e4:00:91:c0:18:a3:a8:01:2c:18:91:10:e7:
d1:c3:84:93:8c:e5:a1:ec:14:49:42:fc:73:70:90:e3:cd:cd:
1b:16:87:1c:27:01:b1:0f:09:d5:ec:26:b9:ee:d9:02:a8:02:
d8:ab:5c:e8:44:f3:a9:87:08:be:af:f9:37:51:a1:15:94:2c:
3d:2d:f0:7f:e3:56:4a:43:2e:0e:e3:55:37:30:69:e0:4a:aa:
52:26:19:8b:20:2d:c4:4a:c9:06:8f:4b:eb:7d:7e:5d:5c:69:
9e:78:80:9c:39:84:7e:40:06:58:93:e4:5c:e4:7b:42:1d:10:
5a:e4:74:ac:4c:3b:d5:77:55:ce:0a:8d:43:ca:09:d0:0d:f9:
86:a8:61:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:27:00 2025 by rpki-client