Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/D_EYdN_TFckYrxo7mRpfUDxWi6o.roa
File: D_EYdN_TFckYrxo7mRpfUDxWi6o.roa (raw, json)
Hash identifier: RlXSlNmR4H+FIjZmciznNXH/3NhfDs7lmUfzFcXtk6c=
Subject key identifier: 0F:F1:18:74:DF:D3:15:C9:18:AF:1A:3B:99:1A:5F:50:3C:56:8B:AA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186737B2C70A878AAF244FF5C8232E3BA63
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/D_EYdN_TFckYrxo7mRpfUDxWi6o.roa
Signing time: Tue 21 Feb 2023 10:18:17 +0000
ROA not before: Tue 21 Feb 2023 10:18:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:73:7b:2c:70:a8:78:aa:f2:44:ff:5c:82:32:e3:ba:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 21 10:18:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0ff11874dfd315c918af1a3b991a5f503c568baa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1a:3f:dc:86:6a:bc:f7:3d:3a:69:58:6a:e5:
37:f4:a1:f1:74:a9:86:e1:f7:99:82:e5:54:a3:5d:
a1:23:2b:11:84:51:15:fa:2f:b1:7d:60:bd:4a:c0:
5c:a5:2c:28:ce:96:17:68:5e:40:02:fc:c5:eb:f1:
62:91:9a:3c:d6:32:79:74:9d:02:1e:f4:0e:2e:97:
4f:4b:2a:99:f4:19:cf:5d:59:df:34:ce:63:30:8c:
a8:46:0b:3a:4a:2e:7f:c6:f9:b3:d4:7c:0d:79:5b:
bb:e0:e0:7f:b2:fc:02:e2:47:63:57:52:8d:c7:78:
fc:85:20:36:f3:04:f0:05:76:6b:3c:d4:0e:96:98:
c5:e9:70:c0:36:57:92:09:2b:52:dc:49:ca:1a:04:
de:1c:1e:92:f7:39:2a:bd:cd:94:3d:58:26:ff:11:
b6:5c:45:a6:e3:65:4e:30:ce:ec:60:51:8d:2c:a3:
b6:1b:79:8f:bc:b4:c0:ca:77:aa:9c:d0:6e:eb:63:
e4:d9:42:f0:10:11:fb:29:9f:8b:8d:c7:31:a2:a1:
ea:97:cf:19:7f:c9:65:1f:fc:ce:c3:3b:04:03:cb:
d6:b8:49:7e:9e:be:d2:b3:b3:c5:96:59:26:ec:c2:
e3:2d:91:34:28:9b:2f:f4:df:c0:23:dd:20:33:e7:
1e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:F1:18:74:DF:D3:15:C9:18:AF:1A:3B:99:1A:5F:50:3C:56:8B:AA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/D_EYdN_TFckYrxo7mRpfUDxWi6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
37:31:92:b0:a9:40:f3:7c:88:44:ca:fb:5c:f2:f1:6c:c4:32:
d7:bd:37:d6:7f:7e:fd:20:ea:4f:5d:46:57:64:29:90:53:f9:
a2:a0:7c:16:d8:c0:57:72:51:b6:2a:06:d9:47:04:e4:31:78:
e1:c9:9b:bd:2f:87:c5:e6:12:8e:6f:8c:59:5f:7a:4d:3a:44:
7c:c7:82:8d:85:99:75:c6:18:c6:ac:58:e6:ce:a5:8e:48:43:
53:60:e4:03:a9:57:39:b7:89:db:94:5e:47:72:1f:57:f1:a5:
25:c8:d1:0c:a1:55:0c:c8:da:61:9e:a3:d7:0b:32:ae:00:a8:
79:33:70:71:29:f8:b1:6d:97:ac:89:7c:17:67:94:51:e1:52:
5f:fc:aa:61:51:0c:c3:02:5d:55:92:af:d9:47:89:35:9a:94:
5d:71:2f:fd:66:2c:b3:82:28:00:3f:9d:c6:05:86:6d:6e:1b:
8d:60:87:12:ac:e4:05:44:45:03:76:a0:d5:7b:d5:35:10:8f:
80:6e:e7:8b:61:0b:93:3c:49:61:4a:93:09:31:2d:3e:b1:f4:
7e:23:75:0a:87:df:97:1b:57:28:96:00:60:26:90:69:7e:5d:
bd:2f:f7:40:c3:71:bd:df:d5:08:2b:c9:6d:35:c4:61:56:6d:
cb:92:c7:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:41:42 2025 by rpki-client