Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/R1ixMFPoD2ViBow2W-lscFbW9rc.roa
File: R1ixMFPoD2ViBow2W-lscFbW9rc.roa (raw, json)
Hash identifier: u/tBYnU35GXz04eXGv8Kepp+3/RRz/KshLVQJsqC7qw=
Subject key identifier: 47:58:B1:30:53:E8:0F:65:62:06:8C:36:5B:E9:6C:70:56:D6:F6:B7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A06D1C3A70FCF9466F80EBA76DCE03AE2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/R1ixMFPoD2ViBow2W-lscFbW9rc.roa
Signing time: Fri 18 Aug 2023 04:05:24 +0000
ROA not before: Fri 18 Aug 2023 04:05:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
2001:67c:64:ffff:0:18a:6d1:dff/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:06:d1:c3:a7:0f:cf:94:66:f8:0e:ba:76:dc:e0:3a:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 18 04:05:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4758b13053e80f6562068c365be96c7056d6f6b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:35:67:ef:ab:29:7d:f1:9f:8d:40:a5:e3:3c:
eb:ba:22:03:fd:10:6c:16:0e:b3:80:26:65:38:91:
af:96:f0:a8:73:51:11:1a:80:cf:07:73:2f:84:f1:
2c:f7:5a:df:b0:4e:c3:2d:32:5b:86:ba:ee:b2:3b:
2e:39:05:9e:44:b0:51:af:9c:0d:9a:76:35:01:72:
55:bd:2f:83:2d:5b:c3:74:6c:eb:ab:54:ff:de:f0:
ba:a9:d2:b2:9c:c9:56:19:2e:8c:36:37:0d:55:d9:
fa:52:90:b3:a5:9a:8e:fe:09:bd:5d:0b:53:4b:0d:
12:f4:b0:4c:b0:de:79:a5:12:c4:a0:21:db:f3:4b:
76:72:b9:93:89:0a:70:d3:65:fc:a1:31:57:39:49:
58:16:57:db:55:92:65:54:44:e6:32:ed:03:eb:90:
57:16:4d:fc:48:cd:e9:0b:4b:31:5e:0c:ee:9f:6a:
ba:1a:6c:0c:f6:8d:1f:c0:88:8c:9c:7e:81:1a:73:
0a:ac:ed:95:5a:71:49:0e:3d:06:cc:56:c7:62:ce:
3d:01:d7:e1:7a:87:6a:1b:31:1c:2a:58:1e:8d:94:
b7:b2:0a:d9:69:c8:60:b3:69:d8:75:ba:8c:e3:85:
9f:58:5b:96:79:97:68:15:49:a6:83:ef:fc:cc:11:
32:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:58:B1:30:53:E8:0F:65:62:06:8C:36:5B:E9:6C:70:56:D6:F6:B7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/R1ixMFPoD2ViBow2W-lscFbW9rc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7b:c9:2a:ba:e4:dc:35:a2:9b:1e:af:3d:71:99:c4:60:6b:a8:
13:3c:2a:8a:be:ea:5b:c5:93:f8:e3:05:22:33:bc:e0:63:97:
8f:dd:b9:ed:5b:cd:92:d4:63:46:7d:7b:da:07:aa:dc:87:37:
5b:8d:30:74:c1:ca:0d:11:f3:1e:77:99:49:9e:07:9f:2b:fa:
af:c7:f9:11:23:d4:31:b2:1e:65:12:95:dd:e0:aa:37:b1:18:
2d:c4:ed:86:87:63:c3:5a:44:44:b8:fd:6a:9e:94:21:8d:71:
91:63:b6:71:91:70:d1:af:4f:d3:72:c7:5f:77:6a:8c:a9:18:
39:b4:9c:62:02:19:aa:8a:95:45:74:8f:d0:24:37:6a:32:69:
72:fe:1a:78:b5:b0:8b:ea:09:1f:81:a7:8e:2d:2e:38:24:80:
72:49:03:8b:15:1d:82:df:1a:99:9e:a0:ef:c1:e2:4d:e8:2d:
aa:9b:29:9b:ce:9c:50:66:85:c6:3e:36:77:26:5b:10:56:c0:
82:2d:98:59:75:5c:d8:39:0c:68:96:c8:70:21:c6:73:5c:92:
ea:e4:b1:81:15:db:ba:ce:04:1d:4d:39:7a:5d:a3:d3:a3:be:
99:1c:85:e1:09:6d:f2:95:3a:53:72:3e:ca:33:58:de:b7:1c:
2b:69:97:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:30 2025 by rpki-client