Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EVrnv3wtsZFjH2tJsTC6v3TzoRc.roa
File: EVrnv3wtsZFjH2tJsTC6v3TzoRc.roa (raw, json)
Hash identifier: DN6mR5az7t6MzWh/U9dEZKHz1YV3HikM6lMOg/lv8co=
Subject key identifier: 11:5A:E7:BF:7C:2D:B1:91:63:1F:6B:49:B1:30:BA:BF:74:F3:A1:17
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01867F7288379C88B158E2F935948A47F177
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EVrnv3wtsZFjH2tJsTC6v3TzoRc.roa
Signing time: Thu 23 Feb 2023 18:04:17 +0000
ROA not before: Thu 23 Feb 2023 18:04:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:7f72:71df/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7f:72:88:37:9c:88:b1:58:e2:f9:35:94:8a:47:f1:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 23 18:04:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=115ae7bf7c2db191631f6b49b130babf74f3a117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d2:20:f7:59:6d:1e:4d:d4:91:51:5c:ae:d0:
c8:31:1c:bf:b6:80:e9:14:eb:b5:14:96:21:65:a3:
0c:81:40:10:f9:a0:23:54:31:67:93:c7:13:54:40:
5e:83:72:ca:14:97:50:4c:da:5a:19:bd:8e:77:0f:
dd:70:5d:18:55:ca:da:c7:2f:0b:01:f1:38:f2:59:
19:4f:38:c0:44:62:f5:bd:ab:8e:5f:1f:ba:fe:9a:
5e:5b:bd:93:63:3b:78:f4:7f:ea:5b:0f:00:e8:2c:
85:1d:ff:57:09:0e:ca:7d:e4:03:a9:6c:27:d4:f8:
f9:4b:d2:cf:da:6c:bb:71:4d:af:b4:18:a8:c7:74:
5e:04:c4:e8:5b:8a:52:e2:8c:1e:c0:92:4c:1a:1a:
92:2c:7c:e7:f7:df:cc:2f:f0:72:a5:01:a0:a6:a7:
6c:96:4c:0a:08:96:36:41:1a:49:20:63:ce:2f:4c:
2d:8f:fe:e3:34:34:0c:26:d0:dd:5a:a1:e8:39:0e:
5e:81:d0:47:67:1e:26:1c:c0:13:e3:eb:8e:f9:25:
7b:8d:10:e0:40:16:a5:fe:bf:81:36:df:27:50:09:
5a:8a:a1:68:e6:7d:f6:ae:ff:24:7f:58:57:b3:62:
29:c0:96:ad:c7:42:e8:f4:25:ed:51:33:ae:c7:d1:
98:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:5A:E7:BF:7C:2D:B1:91:63:1F:6B:49:B1:30:BA:BF:74:F3:A1:17
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EVrnv3wtsZFjH2tJsTC6v3TzoRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
65:c6:6e:90:8d:23:e9:6e:35:68:ea:8d:48:5e:69:ca:6d:b1:
39:89:91:58:7c:36:52:b5:f1:81:96:77:b1:20:9f:e7:d4:e2:
de:9a:81:63:8f:6b:0f:23:e0:9d:40:02:b1:d0:ae:23:7f:ed:
59:ee:0e:72:e3:4c:c8:db:16:a1:78:74:28:51:53:04:fa:e7:
70:6a:2b:bd:d5:2e:bd:9f:d3:11:33:dd:3a:33:72:f5:19:8c:
56:6c:50:9c:15:fb:c1:f8:43:af:4d:0f:f6:65:78:91:b6:75:
05:47:37:6d:e4:11:1c:1c:70:7e:40:06:8f:73:31:d7:d5:dd:
d9:f3:bc:c0:90:2c:e6:af:10:57:a3:90:12:68:b8:d9:f5:c8:
f1:5d:66:81:d7:1f:2b:af:59:e3:29:36:ac:95:d6:63:16:ef:
b3:42:ea:67:8a:9f:2c:91:99:6b:2e:19:70:e2:14:0e:b9:79:
a7:ac:3c:aa:87:98:e9:06:89:ae:d1:c3:15:dc:b4:49:4a:f4:
36:85:31:97:55:a5:ec:a1:f9:6c:42:41:10:ae:24:01:6d:1e:
1d:47:16:2f:b8:d4:59:a2:8c:e5:46:a4:4a:75:9a:db:c1:95:
f5:b4:2d:ec:7d:b6:6d:4e:8b:8b:0c:bd:41:2b:3a:e0:3b:95:
9a:28:99:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:45:19 2025 by rpki-client