Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AzwSpUj8s0nGKukSrsF2ZuqKVZw.roa
File: AzwSpUj8s0nGKukSrsF2ZuqKVZw.roa (raw, json)
Hash identifier: j3UkAsJPpGbAhK+8pihJWtZ4MsroAUxr1ddccBGRPdQ=
Subject key identifier: 03:3C:12:A5:48:FC:B3:49:C6:2A:E9:12:AE:C1:76:66:EA:8A:55:9C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01878E758DFF48348B8C860FF1B73F4E806A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AzwSpUj8s0nGKukSrsF2ZuqKVZw.roa
Signing time: Mon 17 Apr 2023 09:04:41 +0000
ROA not before: Mon 17 Apr 2023 09:04:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:187:8e75:1c28/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:8e:75:8d:ff:48:34:8b:8c:86:0f:f1:b7:3f:4e:80:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 17 09:04:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=033c12a548fcb349c62ae912aec17666ea8a559c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:13:36:9a:9a:1c:9c:93:4a:f6:48:6f:e9:9f:
2e:ee:4f:99:1c:64:ef:fd:43:7d:96:f5:eb:fa:e9:
31:65:eb:d7:fb:4c:11:e0:24:e1:54:3a:49:0e:bb:
58:4b:56:2c:57:ae:d0:4d:9b:55:3e:25:28:62:ae:
d8:67:53:d2:85:c4:c9:fc:36:c9:38:f7:08:8d:79:
b4:9e:3a:35:02:d3:bc:f4:ff:f8:46:56:fa:15:b0:
13:fc:36:b7:fb:a6:e1:58:23:af:b2:22:39:95:eb:
e7:e3:a1:a0:15:3f:01:bf:60:b4:8e:76:3e:84:0b:
02:f6:05:26:00:27:ea:7f:54:1f:b4:c5:0b:e3:96:
54:9c:31:c2:9e:d0:33:9b:ea:9d:a5:40:fd:5e:4c:
23:9a:c6:96:05:af:c3:66:c9:e7:10:7e:da:46:cd:
bd:42:c5:ac:4c:cd:9c:ce:4d:0a:f8:35:50:79:23:
98:20:8d:5e:a6:ce:3f:71:d1:35:a7:f4:5e:28:b0:
3f:77:d5:86:f2:9e:b1:ed:3a:96:12:93:e9:ca:6e:
1c:e6:fb:8c:67:b7:cf:72:11:f1:bf:80:ac:62:7d:
ed:f8:f1:86:37:b2:e8:d5:53:b9:2c:de:24:07:ee:
05:12:2d:cf:b2:ab:ef:00:64:0b:71:57:fd:2e:34:
83:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:3C:12:A5:48:FC:B3:49:C6:2A:E9:12:AE:C1:76:66:EA:8A:55:9C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AzwSpUj8s0nGKukSrsF2ZuqKVZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7e:6c:27:01:66:79:a5:70:e3:1d:18:d1:8a:9e:49:23:8d:d1:
47:f0:2c:2e:6d:50:a7:be:7e:b5:bf:99:22:65:cb:14:ef:89:
23:68:10:17:ba:1b:08:55:86:a6:48:e4:0a:cf:f9:dd:a5:e7:
be:3d:d6:8f:09:28:90:c6:b5:4c:f4:77:50:2d:78:87:f9:da:
06:ef:b9:bf:f1:d6:ef:24:43:86:75:ab:fa:cb:89:c3:0f:f4:
db:21:b8:be:77:cd:69:50:17:74:8c:86:14:c0:b5:2e:09:3a:
ad:1d:20:d7:bc:5d:61:dc:88:a6:99:45:00:9e:d6:df:8d:48:
7f:56:23:f8:19:3a:ea:f6:83:5d:e1:d2:64:a8:8e:86:6b:e3:
26:97:df:c5:87:bc:e8:f4:fe:02:cd:a8:63:ca:67:3e:88:4e:
f8:52:11:b6:e7:2d:ed:1f:72:3d:9e:dd:51:6a:83:08:a5:4c:
38:c8:42:78:27:81:81:94:a3:3c:d3:2e:a6:49:13:09:17:a7:
10:0f:75:0d:32:d5:1a:b2:7d:0c:c4:72:2f:82:39:ea:17:a8:
02:33:e9:9b:28:36:f0:90:6a:c2:40:5a:d3:d4:72:e8:a5:66:
77:4b:36:6b:c2:0f:58:9b:92:9f:7b:41:11:06:0b:d3:5f:80:
0e:30:41:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 04:31:20 2025 by rpki-client