Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/O720u7xfDLlf9MZQ_4OULTmbDtI.roa
File: O720u7xfDLlf9MZQ_4OULTmbDtI.roa (raw, json)
Hash identifier: sQAj3HzAg4Te13SrIM2QX0YY8nC8EQVp6OImf7kwOfk=
Subject key identifier: 3B:BD:B4:BB:BC:5F:0C:B9:5F:F4:C6:50:FF:83:94:2D:39:9B:0E:D2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01895C0AFF04B43D4F91948929F990E422F8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/O720u7xfDLlf9MZQ_4OULTmbDtI.roa
Signing time: Sun 16 Jul 2023 00:12:51 +0000
ROA not before: Sun 16 Jul 2023 00:12:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:5c:0a:ff:04:b4:3d:4f:91:94:89:29:f9:90:e4:22:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 16 00:12:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3bbdb4bbbc5f0cb95ff4c650ff83942d399b0ed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f3:6d:cb:5a:9a:ca:01:67:21:b1:56:1c:c5:
16:27:2f:d7:9c:09:04:9d:b2:bf:ff:4d:21:46:e8:
26:a4:ca:a5:9c:e6:d2:e5:83:09:e7:43:ec:3e:b5:
e5:7f:87:56:ce:b8:66:1a:19:24:61:73:b0:07:c1:
54:d5:7c:b7:e1:ae:19:f3:c2:d1:e7:d8:50:dc:9f:
2a:54:eb:43:72:4f:f0:06:ce:d3:be:0e:7a:86:e0:
cb:67:04:ce:07:e0:16:d1:b3:ce:62:1a:fd:a1:9c:
56:71:d3:e8:97:36:05:39:49:ae:0e:c9:f6:62:82:
9f:be:32:5e:7b:cc:fc:a7:dd:09:05:e6:e4:b4:1c:
5c:99:fe:fb:9b:8d:88:90:c7:ae:de:1c:c0:0b:c3:
0a:ec:04:b7:fb:c4:c6:6d:df:f0:fa:e0:79:aa:72:
cd:5a:e0:0b:d1:ee:13:76:0d:33:97:f1:b5:70:de:
60:ab:eb:6e:e1:41:a2:b8:d5:97:31:66:93:6b:3e:
a0:d0:10:49:41:4f:1c:3b:56:82:66:4c:58:88:26:
7c:9d:7e:88:15:2f:9d:31:8c:b0:41:92:92:79:b5:
06:e6:64:b6:ae:bb:53:24:f5:12:57:99:fd:c4:b2:
1b:5b:ca:c8:d6:ee:ed:d2:8e:3c:3b:07:1f:84:01:
00:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:BD:B4:BB:BC:5F:0C:B9:5F:F4:C6:50:FF:83:94:2D:39:9B:0E:D2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/O720u7xfDLlf9MZQ_4OULTmbDtI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5a:81:2b:c1:b8:b3:70:a4:95:bb:e8:aa:87:7e:f8:70:06:34:
41:2d:32:a6:95:91:80:e4:4b:e6:72:5b:ef:0b:27:e5:72:90:
f7:7a:5a:ad:99:04:4c:0f:e3:b1:b2:1d:ad:0b:59:ae:cb:1b:
09:c3:7d:19:2d:ad:49:7d:34:e8:5b:7b:e9:12:58:34:11:bd:
93:91:73:3d:98:8b:84:d5:93:03:89:97:56:5f:47:60:a8:0f:
05:b5:27:28:98:6e:29:f0:06:58:6d:65:3e:59:62:30:26:4c:
0d:6b:00:fa:44:92:32:5a:62:74:b7:d1:89:98:9b:cf:b3:c5:
d6:02:5c:09:4b:93:fb:9f:66:1c:2c:b7:26:46:19:06:48:b1:
ec:ea:f2:fa:b9:a6:ae:68:b5:c4:ef:50:3f:94:1f:2c:90:0b:
a5:0e:a4:cd:03:d7:f0:e6:ad:8d:37:3e:05:0b:aa:b6:4c:7a:
4d:82:84:7a:1a:7b:53:ba:2b:48:17:6d:62:21:9e:c5:11:4d:
35:dd:a9:41:0d:bf:54:f7:60:5f:af:f3:2c:ca:b3:d3:e0:49:
f9:c2:af:46:c3:1e:d3:c6:26:df:eb:70:59:cc:cf:af:40:a7:
97:57:ba:98:0f:eb:dd:9d:22:6b:13:30:7a:2b:97:b6:91:b9:
47:af:80:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 22:24:04 2025 by rpki-client