Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ac9WNpKq5H-7IxpDjPzB3sO6r5w.roa
File: Ac9WNpKq5H-7IxpDjPzB3sO6r5w.roa (raw, json)
Hash identifier: Vh3daxMNB1mZxvbv9lp3l2Vjb8PkwoT+kB8jP8iUQsU=
Subject key identifier: 01:CF:56:36:92:AA:E4:7F:BB:23:1A:43:8C:FC:C1:DE:C3:BA:AF:9C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01878D6320F0BE05943B83F90E07BF7A8E4E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ac9WNpKq5H-7IxpDjPzB3sO6r5w.roa
Signing time: Mon 17 Apr 2023 04:04:56 +0000
ROA not before: Mon 17 Apr 2023 04:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:187:8d63:996/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:8d:63:20:f0:be:05:94:3b:83:f9:0e:07:bf:7a:8e:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 17 04:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=01cf563692aae47fbb231a438cfcc1dec3baaf9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6f:b4:bd:1b:3a:86:b3:6f:39:f8:43:b5:03:
83:e0:a0:cc:83:0f:f5:22:54:ef:6a:6b:e7:e8:90:
57:58:da:ee:60:b5:e5:16:2d:c8:47:e9:ec:f0:1e:
83:4f:38:35:ce:55:fc:16:9b:95:99:ef:f7:34:3a:
6d:e6:29:9b:21:10:49:47:3c:b9:7f:cd:e0:b7:e6:
36:c4:f4:e0:8a:82:2f:ba:57:cc:1b:49:c8:b2:e2:
08:89:47:3c:84:8b:7e:2a:2f:3a:17:f8:4f:78:b2:
f2:d1:24:ea:42:71:98:1f:a6:42:d1:23:a9:28:dc:
94:d0:b1:d0:6c:1e:5f:5d:76:d0:83:3e:0f:b0:fe:
b0:e7:8c:07:66:05:6d:7a:31:9e:85:20:24:b5:d4:
68:21:03:2a:6e:3d:59:d8:68:4c:25:8a:c8:2e:fd:
ce:97:8d:f3:7d:82:dd:3d:36:20:31:58:9f:9e:38:
2d:7d:0f:6c:b9:35:05:d1:28:04:15:b1:36:3f:23:
1c:81:72:c1:0e:44:18:0b:74:d1:fa:76:57:94:71:
fc:97:37:26:67:e2:17:77:36:c8:32:aa:2c:76:5c:
48:dd:18:1c:df:ff:fd:8a:fa:92:c5:b3:cb:d5:b9:
0f:a7:0b:87:dc:8c:99:79:c8:09:3e:b9:eb:a5:16:
30:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:CF:56:36:92:AA:E4:7F:BB:23:1A:43:8C:FC:C1:DE:C3:BA:AF:9C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ac9WNpKq5H-7IxpDjPzB3sO6r5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
78:6c:7d:c8:d8:e9:4a:fd:ca:96:91:d0:c7:8f:17:82:77:41:
bd:25:fb:82:36:06:fb:4e:25:2f:05:98:97:3b:04:d9:5b:0c:
89:5f:30:c8:44:d4:3d:b1:2a:a0:58:b4:a6:46:6f:53:65:c8:
78:95:36:90:91:41:f1:b9:03:61:60:79:49:e7:65:e4:8a:e4:
e4:3d:70:2a:9f:64:18:32:33:b9:f6:3e:62:8f:7e:01:8f:93:
1a:61:ea:87:85:6a:69:b2:12:6e:22:a4:70:fa:a5:d2:9c:68:
17:e7:a6:fe:7f:f5:5e:ef:e0:0f:01:67:b2:ed:fb:7a:ef:95:
16:29:0f:47:d5:c8:5f:cb:1d:01:c7:9b:a8:f6:fd:cd:5b:c8:
39:9b:81:87:de:b7:3b:6f:3f:7d:d5:92:99:c3:d7:67:d1:7f:
98:d6:b2:0d:4e:a2:af:52:b9:f0:ae:12:b4:00:f4:1e:42:8c:
74:d9:45:8c:e7:ff:50:e4:05:50:6d:e6:77:03:22:6c:d1:b4:
75:e9:2d:ab:6d:77:c2:70:d5:79:cd:ab:32:65:3d:95:41:6b:
d3:24:8d:62:71:6a:e6:9e:a9:f4:af:1b:ae:57:a1:ef:35:35:
d6:c1:23:18:7c:a0:cc:5b:5f:08:cf:eb:d3:da:79:ab:ae:d0:
6d:19:bf:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 23:31:21 2025 by rpki-client