Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/L0vfsVsIuJKIPvTQSarOjo70apM.roa
File: L0vfsVsIuJKIPvTQSarOjo70apM.roa (raw, json)
Hash identifier: dW4hX607y0PbAH4ANJrhXZC00oqBk3ZK1cowChX+XAg=
Subject key identifier: 2F:4B:DF:B1:5B:08:B8:92:88:3E:F4:D0:49:AA:CE:8E:8E:F4:6A:93
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188DBEF2B43D35790BAB70729CD0E05FAA0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/L0vfsVsIuJKIPvTQSarOjo70apM.roa
Signing time: Wed 21 Jun 2023 03:11:04 +0000
ROA not before: Wed 21 Jun 2023 03:11:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:db:ef:2b:43:d3:57:90:ba:b7:07:29:cd:0e:05:fa:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 21 03:11:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f4bdfb15b08b892883ef4d049aace8e8ef46a93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2d:da:cc:b8:fa:5c:4f:47:e4:89:6a:52:67:
3a:6f:8c:e1:e7:f5:e9:b6:1f:c1:92:b4:9a:4c:35:
73:ac:9d:1b:18:1c:21:95:3f:68:ad:67:db:97:58:
8a:b5:f8:17:9f:93:70:f9:ce:3b:d4:2c:17:7e:0b:
cf:4f:ee:97:5c:0d:3f:98:da:ed:e7:ee:f1:b2:4b:
d8:e2:b9:9e:bc:c9:a5:d2:18:0b:3f:7b:6d:c3:02:
8a:7c:a7:29:4e:e4:7c:4f:cd:b9:a5:41:32:f0:c5:
b3:69:e3:96:1f:17:ad:00:66:d0:55:9a:32:62:44:
35:58:28:33:1c:32:45:6d:e0:f6:43:fb:e0:cf:51:
c4:bf:34:e6:7b:5b:1f:4d:73:1c:4e:ba:65:59:8a:
1d:7e:c9:94:fa:4e:3d:cf:53:71:93:f5:40:62:90:
48:7b:5c:de:70:19:9c:ae:f3:ea:58:6c:3a:e5:d0:
0d:5e:a9:08:f2:2e:6c:92:33:a3:b5:57:ec:d5:c2:
bc:65:9b:30:0b:3e:ae:33:96:b1:85:f5:83:9d:0c:
57:60:7c:74:e3:f0:fb:b4:d8:59:c1:38:c3:77:87:
6f:31:48:79:b1:29:2c:47:a5:a1:fb:b7:36:ad:e4:
24:9a:a5:5c:cd:57:4b:81:ef:04:0b:9e:3c:a9:01:
de:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:4B:DF:B1:5B:08:B8:92:88:3E:F4:D0:49:AA:CE:8E:8E:F4:6A:93
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/L0vfsVsIuJKIPvTQSarOjo70apM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
46:6e:e7:54:79:11:b6:a9:24:23:30:b2:3f:a3:61:c4:1c:da:
0b:cd:d5:35:5a:fd:e0:4c:ef:0c:0d:ac:b4:b4:0f:73:33:f6:
f8:f8:19:95:47:67:91:89:ee:8a:86:42:af:05:16:9c:39:bd:
e0:65:54:c7:e0:ef:fd:ee:35:af:40:74:29:4c:73:29:81:cf:
61:ea:4a:72:71:22:9a:f4:c3:60:72:20:66:79:47:1f:fe:cb:
32:bb:52:c6:a5:59:86:61:ba:d0:1e:21:7b:bb:a6:86:9a:74:
0b:a7:a4:40:07:87:4c:4e:cf:f1:ff:8b:f2:7c:7b:f4:7b:3a:
9f:c7:1a:31:52:18:4a:4c:5b:f1:ba:48:b8:3c:56:6a:7d:08:
34:49:dc:6e:17:3e:ac:bb:59:27:f2:fe:eb:b2:a2:3c:04:0c:
57:a3:0c:35:11:56:86:29:7c:8d:2a:7e:e3:8f:d1:24:3c:a1:
db:13:48:52:32:ba:44:d5:65:05:57:b1:d6:4d:b7:13:54:b8:
03:79:dc:8f:3a:93:3e:04:9d:b8:6c:6a:d3:26:6b:72:61:5f:
5f:78:aa:27:97:28:ee:e1:be:08:ae:f8:c7:66:eb:2c:a2:17:
b2:a2:31:e4:21:90:57:9e:37:d5:60:6b:f6:af:db:51:7e:d2:
19:8b:11:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:00:04 2025 by rpki-client