Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/R0u3GMNfJsEz4MLm4322ZCUfhYQ.roa
File: R0u3GMNfJsEz4MLm4322ZCUfhYQ.roa (raw, json)
Hash identifier: MbsDQfwGfkMxwOMgt1znFPPtAHah4QVZ9ZlVwJWI5mw=
Subject key identifier: 47:4B:B7:18:C3:5F:26:C1:33:E0:C2:E6:E3:7D:B6:64:25:1F:85:84
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189910BA4FE9E80E0AA77978DE6FA6D1D0B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/R0u3GMNfJsEz4MLm4322ZCUfhYQ.roa
Signing time: Wed 26 Jul 2023 07:13:26 +0000
ROA not before: Wed 26 Jul 2023 07:13:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:91:0b:a4:fe:9e:80:e0:aa:77:97:8d:e6:fa:6d:1d:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 26 07:13:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=474bb718c35f26c133e0c2e6e37db664251f8584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:52:ef:4e:5c:f2:6b:21:d7:10:c0:0d:ae:19:
68:ca:a3:a9:67:03:8a:d0:c4:4b:19:87:08:9b:78:
09:40:bf:6d:ac:1e:c7:aa:af:c3:93:a0:9d:6d:ef:
d5:db:e8:a6:29:38:5d:f7:e4:76:05:28:67:f7:1f:
f0:6a:b1:ff:db:1a:ec:b1:a8:03:76:53:8a:aa:70:
83:26:48:c9:9d:68:a0:b0:f9:a7:bb:c4:1d:fc:74:
3a:e9:59:f6:0f:1c:9b:bc:df:f8:20:6f:c1:53:ee:
cd:38:1a:78:8b:84:85:46:30:5a:e0:d5:f1:42:36:
14:a1:13:6c:9a:31:b9:e2:90:2a:84:66:b4:e6:2e:
6c:b2:09:3e:ee:47:9c:64:6f:2b:6e:04:a0:b1:e6:
58:58:b3:74:2f:bf:62:1c:99:0d:27:0a:90:ba:47:
33:02:cd:51:c8:6d:e5:cf:94:a0:46:1c:7d:44:50:
5f:d2:d3:26:7b:73:ba:91:8e:2e:e7:87:44:24:5c:
c4:e8:71:b9:ee:13:fb:dc:6d:e5:f2:60:c4:d7:4d:
fb:a9:d7:c0:74:70:72:63:16:2f:de:ed:6e:fc:cd:
2e:4a:a4:7f:8d:5b:d3:4f:f0:65:62:ce:e3:36:c5:
4d:5b:2c:df:e1:d6:c8:c4:3c:15:fb:5d:8b:cb:34:
a3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:4B:B7:18:C3:5F:26:C1:33:E0:C2:E6:E3:7D:B6:64:25:1F:85:84
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/R0u3GMNfJsEz4MLm4322ZCUfhYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3a:d3:9d:b5:63:77:bd:16:95:63:dc:b7:a8:a6:87:32:da:9c:
7f:09:03:f4:8d:ec:75:db:a2:86:ca:03:95:5c:40:dd:43:25:
3c:60:8f:c6:7a:56:ca:9d:e7:b9:c2:00:1f:61:ed:a0:e9:58:
fb:70:60:09:9c:9f:d3:cf:a3:2a:2e:97:1f:ec:54:d5:8c:e0:
1d:88:ec:40:fb:04:46:a8:45:a5:22:ac:a0:0f:e3:53:64:20:
84:4e:d3:59:c7:26:4d:74:c1:80:ff:51:6c:0b:d1:7c:2e:b6:
d5:9f:c3:9a:62:c9:e1:42:5d:03:13:bd:96:6e:d1:42:2a:0e:
32:c3:fb:c4:3c:b7:ac:67:84:5e:c1:34:92:c0:8c:f2:4e:05:
9f:2e:b9:f4:71:16:9a:0a:95:03:e4:a7:70:94:77:e5:43:2e:
40:47:b9:b4:0d:b1:fd:63:7d:c8:a6:04:f8:62:41:87:84:38:
a9:00:b7:fa:e5:6a:ce:2d:00:2a:63:80:d3:2b:8e:f9:36:47:
14:1e:4e:35:8b:c4:1a:d2:46:f8:e5:c3:f4:69:75:e8:24:d5:
30:6a:be:cf:1c:ea:b6:2a:b8:4d:52:9f:05:ed:5f:17:c2:68:
f3:e7:5b:37:f3:a2:38:74:70:fb:bd:6a:75:ef:a2:bc:e5:e4:
03:75:16:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:09:21 2025 by rpki-client