Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/D6JeAQDVsDdThewJm-rbAEwUmIQ.roa
File: D6JeAQDVsDdThewJm-rbAEwUmIQ.roa (raw, json)
Hash identifier: fdKb8Qxxxsd6sWe60fGT5G8r2Efn2Az2YAFmEr1Rs2o=
Subject key identifier: 0F:A2:5E:01:00:D5:B0:37:53:85:EC:09:9B:EA:DB:00:4C:14:98:84
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189FBAA48A5A473223D4B5FDCBD16C8E33E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/D6JeAQDVsDdThewJm-rbAEwUmIQ.roa
Signing time: Wed 16 Aug 2023 00:06:28 +0000
ROA not before: Wed 16 Aug 2023 00:06:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
2001:67c:64:ffff:0:189:fba9:7f22/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:fb:aa:48:a5:a4:73:22:3d:4b:5f:dc:bd:16:c8:e3:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 16 00:06:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0fa25e0100d5b0375385ec099beadb004c149884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:be:57:f9:b5:ed:8b:44:51:b0:23:c2:14:48:
88:8f:4c:83:2d:2a:28:a5:58:b2:b3:3a:cd:2b:25:
17:55:91:a0:6e:25:29:e1:3b:02:c9:40:ed:94:ec:
43:9c:b4:96:e0:31:65:a7:b6:4a:d4:14:ea:f7:f5:
0d:08:6b:13:fd:bf:3c:00:02:3e:3b:21:45:5e:2a:
9a:6c:19:a6:d6:8e:c6:57:6b:0f:d7:6f:a6:84:bc:
75:4b:eb:9f:a2:b7:73:fb:9a:07:84:06:95:74:7c:
d8:47:00:f3:e3:27:bd:aa:43:61:ce:e1:b0:86:99:
02:49:f7:e3:cc:74:cc:b3:e7:fd:9a:50:ff:67:4f:
70:d2:3d:41:fd:8b:33:28:7c:5c:4c:d9:6b:ca:3c:
fb:60:b4:4d:94:46:eb:4b:5d:82:ed:82:d0:b8:e8:
14:c5:0c:8d:2d:a9:5c:bb:df:27:3b:7f:a4:de:07:
ac:88:c8:fb:da:d7:1b:ef:65:6a:32:34:03:47:7f:
71:ce:fd:a2:9b:13:96:9d:f7:18:3e:e9:8b:56:3c:
43:9f:38:eb:73:e4:63:9f:7e:d7:67:1e:4a:5a:04:
69:5d:e2:f5:04:27:a3:02:90:f4:76:60:24:9e:12:
31:e4:df:88:d4:6c:9a:bc:3a:ab:50:52:f1:19:b2:
e1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:A2:5E:01:00:D5:B0:37:53:85:EC:09:9B:EA:DB:00:4C:14:98:84
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/D6JeAQDVsDdThewJm-rbAEwUmIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
92:98:98:e0:75:af:4a:74:71:5b:c5:35:92:37:b0:5b:f5:14:
1e:7f:06:4d:22:ae:b0:07:54:97:7b:ec:25:1d:ee:de:15:53:
c6:c2:8e:5f:0b:b5:99:c2:1c:98:d2:ee:ba:6f:38:45:df:d3:
9d:bf:3a:69:bd:07:fd:0a:6d:d7:d5:42:07:27:4a:11:41:9a:
ee:b2:8d:a0:01:57:fd:29:01:c6:d7:44:e4:ac:ac:b5:d7:36:
1b:43:18:9c:83:89:1f:2c:8b:15:9c:d8:b6:3d:26:13:ee:56:
b8:3a:30:2f:0b:0a:d7:74:f2:bd:01:88:3f:1c:04:57:9d:f2:
8b:23:df:ac:cf:b6:0c:8d:d9:2a:b6:4c:f8:f5:bc:32:04:94:
49:44:83:c2:68:5e:4a:7d:a8:f9:ee:0c:d2:db:ca:24:87:05:
13:8f:5f:21:7c:5e:9e:ef:c9:e3:cc:f9:0a:d6:f6:c3:ea:0f:
d8:64:5c:eb:9a:cc:0b:bc:8e:33:64:21:98:14:bc:36:9f:de:
23:80:0e:59:32:0b:a5:c8:4e:d7:7d:80:7f:15:07:5e:3c:19:
10:19:83:cd:97:d3:71:6b:b1:2a:48:a7:eb:fb:f7:f0:eb:a3:
05:09:fc:a9:e5:9c:1a:26:62:6f:a1:ee:84:a3:45:77:9e:9a:
3d:06:89:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 23:30:47 2025 by rpki-client