Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Azqa3uWVxm4hmaqLE1CFmgq5f2I.roa
File: Azqa3uWVxm4hmaqLE1CFmgq5f2I.roa (raw, json)
Hash identifier: aL+qhiaREXnQWtwk6cWWyY3VnggBlIbRwzLlcp9zQJ8=
Subject key identifier: 03:3A:9A:DE:E5:95:C6:6E:21:99:AA:8B:13:50:85:9A:0A:B9:7F:62
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186993273EC736F3E1B43913EB64FF57181
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Azqa3uWVxm4hmaqLE1CFmgq5f2I.roa
Signing time: Tue 28 Feb 2023 18:04:25 +0000
ROA not before: Tue 28 Feb 2023 18:04:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:9932:3294/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:99:32:73:ec:73:6f:3e:1b:43:91:3e:b6:4f:f5:71:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 28 18:04:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=033a9adee595c66e2199aa8b1350859a0ab97f62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:db:54:3c:75:1e:46:8e:a9:42:2f:b0:6a:65:
8b:79:ba:57:fc:ed:df:35:1a:92:10:93:9f:4b:a4:
cd:9a:6e:41:71:4f:17:0e:0a:14:00:8a:d5:52:11:
a7:a1:1b:9b:aa:65:51:2d:0a:3f:c0:60:e2:b2:6b:
d3:71:bc:88:d4:d2:db:01:33:ec:6d:a1:ed:20:1e:
96:de:04:a6:b3:14:2d:e1:b7:5e:2d:31:fd:74:b9:
8e:b0:c5:31:85:7a:e0:24:7b:20:da:16:26:95:2c:
be:0b:da:76:58:eb:6b:32:de:ee:78:e1:04:37:4c:
03:b3:e0:9c:e7:24:97:a6:31:e2:0d:96:ee:e6:ab:
4a:45:72:06:e3:57:f9:fc:05:9b:3c:57:90:4c:f8:
08:ba:46:68:43:6c:63:e6:ff:9b:20:ec:c0:96:23:
fa:9b:c9:22:9d:db:a8:34:c4:89:85:47:ae:10:8a:
6f:0e:0e:a3:94:b6:dc:aa:7e:1d:5e:72:50:1a:01:
a0:74:87:93:7d:63:d3:ed:a4:04:43:b0:44:b1:d9:
df:12:c5:53:35:d0:ef:ae:c4:79:c2:e1:fb:08:6e:
35:1c:41:e9:6e:0e:0f:0e:54:e0:c2:3f:d4:03:d1:
fb:62:f4:7b:81:d3:f4:a3:dd:91:fa:e0:fb:d2:2b:
1e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:3A:9A:DE:E5:95:C6:6E:21:99:AA:8B:13:50:85:9A:0A:B9:7F:62
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Azqa3uWVxm4hmaqLE1CFmgq5f2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
78:ce:f2:e0:c3:36:8f:cc:16:37:b9:97:6c:e1:82:7a:ab:a2:
f2:a6:04:60:54:ae:1b:a8:a2:14:7c:b0:13:e7:47:ce:f9:6c:
6d:3a:f7:da:43:95:fb:08:28:36:2e:83:84:c6:55:9e:4b:83:
45:8a:9c:32:e3:77:21:a8:c0:db:64:86:e0:d0:0f:0b:e1:d4:
4b:0a:ee:75:82:c2:48:40:eb:dd:eb:aa:ba:04:6d:19:78:95:
3a:d2:fd:e7:d7:9c:d9:b7:9c:b2:5b:f4:6b:d8:ad:45:74:41:
f3:a8:2e:da:61:be:1b:8e:f1:e2:0f:83:de:59:37:7b:7c:44:
94:50:5e:4d:42:8f:6f:9b:2e:1e:98:12:33:f9:aa:90:5b:d6:
6a:6a:9f:79:52:e9:13:77:14:f4:1b:03:fb:07:d2:52:8b:21:
9f:af:b1:6e:fe:89:01:b9:13:80:da:0a:14:a2:c9:1c:e3:b4:
45:1f:11:53:d5:ac:e3:b5:77:56:7b:12:04:ae:40:1a:6d:0f:
19:42:09:8c:ce:f8:be:4d:1b:be:c9:3a:4d:94:45:c1:42:6b:
2b:df:4b:d7:32:ff:6f:43:db:d0:02:6e:7f:d7:c4:29:e5:0c:
7d:29:4b:b0:dc:06:42:ce:ff:0c:3c:5c:df:d0:ee:28:81:97:
e2:9f:78:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:10:25 2025 by rpki-client