Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OD257iPQvZYEYBFRxl1P1yeTxDo.roa
File: OD257iPQvZYEYBFRxl1P1yeTxDo.roa (raw, json)
Hash identifier: N+yhpK6v5al6JuZMn4ZLV4Apk7tabtlikXbxW5ug9Pg=
Subject key identifier: 38:3D:B9:EE:23:D0:BD:96:04:60:11:51:C6:5D:4F:D7:27:93:C4:3A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01897CA57C4CC779FCB81E45D0FAA1983DC7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OD257iPQvZYEYBFRxl1P1yeTxDo.roa
Signing time: Sat 22 Jul 2023 08:09:27 +0000
ROA not before: Sat 22 Jul 2023 08:09:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:7c:a5:7c:4c:c7:79:fc:b8:1e:45:d0:fa:a1:98:3d:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 22 08:09:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=383db9ee23d0bd9604601151c65d4fd72793c43a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fe:91:9c:0a:77:c4:ab:0c:c1:04:82:d1:82:
70:52:59:57:90:84:ab:b2:fe:0c:b9:81:25:ad:15:
6b:63:01:d7:2d:5d:21:9f:73:82:ee:47:e5:57:ce:
95:eb:72:bd:70:02:4b:ce:0d:c0:39:b8:9f:c0:6d:
4c:3f:d1:37:76:bc:5e:a8:15:4c:6e:73:40:e6:ce:
26:df:87:32:12:a3:c6:56:f2:59:9d:fb:58:b9:5c:
e8:16:ad:a7:3c:b0:1f:ff:e1:35:8d:22:53:2f:db:
37:68:ea:fc:f3:a3:a7:99:38:95:b7:e0:cc:02:77:
9a:86:60:db:d8:61:83:67:a1:e5:d9:ef:63:26:fb:
c5:80:af:45:6f:5d:8c:a6:e6:04:d5:40:46:df:e3:
8c:48:97:bf:bd:40:ab:d3:57:c7:55:46:a3:03:49:
50:e3:d0:07:a7:0b:5c:cf:b9:3f:96:1a:70:88:be:
84:d4:e4:98:d9:da:9a:97:10:e7:22:bb:70:4c:23:
8e:4b:bf:f2:b1:26:e7:7a:2e:31:55:58:69:e4:c7:
76:1e:e7:5b:86:fc:e9:67:9e:3a:c7:40:da:02:98:
af:e9:c8:3d:f1:48:03:6e:ef:8c:e5:68:38:53:d0:
ad:fb:20:f8:df:2b:b9:89:01:18:94:3b:90:ae:ca:
c2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:3D:B9:EE:23:D0:BD:96:04:60:11:51:C6:5D:4F:D7:27:93:C4:3A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OD257iPQvZYEYBFRxl1P1yeTxDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
96:3d:76:3d:34:e1:0f:c7:3d:88:85:4e:90:11:17:4d:5c:7d:
d5:f9:0b:1c:bc:6e:96:8e:90:31:58:5c:aa:e9:08:00:e4:e9:
8f:04:8a:49:b6:3b:ac:8c:e6:11:43:de:9a:f7:1f:b5:c0:db:
37:83:38:1a:12:7a:f0:ec:a4:33:ab:70:6e:47:9b:4d:ac:e3:
6c:65:ec:23:57:29:4a:8a:33:c9:f3:52:74:b3:f6:96:44:5d:
9c:c1:cf:22:9d:e0:8d:e3:4b:71:62:e5:a0:48:1d:f0:c8:54:
94:60:b6:58:fa:6a:f6:78:b3:be:d4:f7:b2:97:ea:90:66:2e:
4b:31:42:73:ad:cd:b6:d4:59:ae:ab:fc:6f:5c:f0:3f:ac:e9:
dd:5b:69:97:f5:5e:a9:66:e4:80:d5:8a:34:8f:ec:34:19:07:
9b:e9:80:6f:19:b3:c1:be:9a:8e:4b:cc:89:25:ca:0d:66:6e:
d7:11:c2:3a:0a:8d:52:19:9a:c0:45:5e:a5:81:06:2b:c2:f5:
80:c5:cd:6d:9e:69:b2:82:b8:3e:a1:83:1a:d6:6b:17:ef:60:
0b:71:1e:9f:a6:96:a5:bc:82:2d:5a:84:ce:04:0d:f2:f1:52:
71:df:e2:71:b9:f3:93:f5:cc:c9:13:76:e7:a8:9f:69:a2:2d:
dd:a6:7f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:42:04 2025 by rpki-client