Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/InP8OWlWMmX9Ckb84_lqbq2eOL0.roa
File: InP8OWlWMmX9Ckb84_lqbq2eOL0.roa (raw, json)
Hash identifier: hioDIDy0mt+sSPIME5gd63PBDXDjj8UxdjFWIGBzEM8=
Subject key identifier: 22:73:FC:39:69:56:32:65:FD:0A:46:FC:E3:F9:6A:6E:AD:9E:38:BD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186BB5B31F72A16497E02A2DC9833EFD5B4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/InP8OWlWMmX9Ckb84_lqbq2eOL0.roa
Signing time: Tue 07 Mar 2023 09:16:00 +0000
ROA not before: Tue 07 Mar 2023 09:16:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:bb:5b:31:f7:2a:16:49:7e:02:a2:dc:98:33:ef:d5:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 7 09:16:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2273fc3969563265fd0a46fce3f96a6ead9e38bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:19:87:2c:67:59:aa:67:c5:a4:59:bb:b6:fe:
8a:4e:72:33:33:7d:35:22:18:72:eb:53:82:9c:15:
8d:2e:d1:29:c8:55:bc:85:fc:af:0a:c6:65:13:5f:
18:3a:ed:96:a3:03:55:03:13:dc:b0:1f:35:5a:06:
67:6a:49:44:7c:e1:ec:db:a8:a7:b0:27:7b:d3:b3:
77:24:85:81:51:78:0d:c5:18:d7:a3:6c:aa:d0:a3:
4c:12:22:be:7f:9c:e4:eb:03:d4:3c:2c:41:f5:6d:
cf:26:39:e1:01:fe:d5:f0:e7:19:61:55:12:e3:88:
3b:1f:fa:ac:6e:a0:07:40:46:96:53:66:76:d1:56:
ea:53:d7:07:3a:43:81:40:18:c6:fd:f9:cd:4f:8f:
01:16:28:8a:e1:3c:bd:11:e1:49:fe:37:01:b4:0f:
f6:b6:0c:c5:f9:28:80:a0:c1:21:f7:8e:2e:da:07:
16:1b:36:51:c7:f3:17:15:4e:5f:75:82:57:d1:11:
20:10:83:23:e8:ab:1f:45:f2:2d:35:7f:e6:1e:3e:
a5:8d:1a:a5:78:fc:34:e0:19:f8:43:82:8a:13:85:
48:16:81:1b:73:f7:20:a2:22:bb:b2:5a:cc:e4:74:
43:e9:74:4a:63:aa:6a:bc:f7:03:43:f8:66:eb:fa:
e9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:73:FC:39:69:56:32:65:FD:0A:46:FC:E3:F9:6A:6E:AD:9E:38:BD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/InP8OWlWMmX9Ckb84_lqbq2eOL0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0f:a2:48:09:4d:78:38:62:53:b5:df:c2:a5:f3:76:05:97:27:
41:b8:08:d3:d1:2b:69:6f:d3:c4:ba:5b:d9:a8:ef:f8:8c:cd:
77:b1:e9:de:94:83:68:2e:0f:3e:b3:db:16:80:f7:08:0f:42:
1d:e6:16:1e:ec:54:68:cd:03:39:36:6d:e1:e2:c2:73:86:33:
63:e3:ab:e6:71:cd:96:87:49:43:13:b2:e7:0d:25:17:67:d8:
d1:53:4d:8c:2e:7e:53:57:a8:72:ac:a4:38:75:e1:8c:23:07:
d0:5d:b2:9a:6a:70:68:3b:ce:a7:81:86:ea:49:46:e9:c0:79:
3b:13:c4:26:7d:8f:c7:23:f8:72:e9:98:8b:b3:c0:c8:30:17:
f8:11:7f:ed:4f:7d:ad:49:22:1b:ed:66:00:a4:8b:84:a7:dd:
8d:4c:02:7b:64:99:83:80:89:70:60:03:ee:db:c9:a9:af:58:
e2:87:6a:f1:c5:b2:c4:4d:5c:f0:0a:f2:0f:b3:f7:ca:fb:0d:
01:89:fc:05:df:05:0e:40:3a:99:4d:52:f3:16:52:c2:cb:24:
ab:15:6a:50:0b:c0:10:ca:db:8e:9d:95:19:6e:e6:9c:eb:e1:
eb:0d:b1:0b:d4:74:6d:12:30:2d:54:32:15:b9:58:33:c2:86:
b9:49:7a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:40:42 2025 by rpki-client