Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RH9zwrKSWboq-rDRQ-xdJnSdc9U.roa
File: RH9zwrKSWboq-rDRQ-xdJnSdc9U.roa (raw, json)
Hash identifier: VbNkURnpyQqX9ubtKA7KRl1qNOpdly+NtDernV8anWQ=
Subject key identifier: 44:7F:73:C2:B2:92:59:BA:2A:FA:B0:D1:43:EC:5D:26:74:9D:73:D5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018889C07753B2017340462C3ECCA3EAD4F0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RH9zwrKSWboq-rDRQ-xdJnSdc9U.roa
Signing time: Mon 05 Jun 2023 04:11:11 +0000
ROA not before: Mon 05 Jun 2023 04:11:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:89:c0:77:53:b2:01:73:40:46:2c:3e:cc:a3:ea:d4:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 5 04:11:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=447f73c2b29259ba2afab0d143ec5d26749d73d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:18:03:f5:a8:dc:13:65:5d:32:7e:18:a1:49:
2b:47:64:e4:54:c1:dd:c0:5e:89:4a:31:f6:c5:08:
79:05:c7:fb:95:38:bf:83:00:f5:37:fd:dd:8d:2d:
12:b5:7a:77:c0:1d:67:b0:f5:00:56:a1:91:ef:bd:
0b:51:d8:cd:29:ab:3a:aa:b0:91:db:7f:5f:2b:96:
97:e5:85:32:16:e4:ba:be:03:8c:7b:f0:a1:4e:5c:
64:0e:a8:a2:4f:ea:82:ba:5f:2a:70:3b:9f:2a:2c:
3f:01:65:35:34:0a:d2:cb:72:6f:0e:ff:67:db:6a:
51:fc:02:e1:6c:69:39:ba:42:60:a6:6a:8c:7e:31:
e9:77:48:59:53:aa:1a:e9:b7:14:0f:90:ba:06:a4:
0e:05:a6:ea:8d:1f:f8:00:57:5c:6e:37:aa:5a:51:
7a:f0:08:e6:d4:13:62:df:50:0e:9a:22:e8:3b:6f:
40:09:8a:c9:a1:e1:f2:30:5e:5e:db:e5:56:66:cf:
15:29:75:23:b0:04:c7:7a:7c:0a:1a:a0:b7:c9:01:
08:97:37:c6:1a:d5:fd:c1:f6:a3:e9:ef:35:b2:2e:
15:1d:46:4e:93:ae:fe:29:06:25:17:61:9f:86:2b:
a4:6a:c4:ef:9e:9e:b0:cc:a2:54:ee:0c:06:be:75:
7c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:7F:73:C2:B2:92:59:BA:2A:FA:B0:D1:43:EC:5D:26:74:9D:73:D5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RH9zwrKSWboq-rDRQ-xdJnSdc9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
af:18:5c:1b:b1:fb:29:52:50:a3:6c:94:f7:8c:00:fc:6f:3e:
ea:c7:c4:aa:be:78:1d:12:fd:26:63:05:b9:7e:31:c6:dd:2d:
f4:05:77:e7:05:bb:9f:8b:fd:0e:0a:86:b4:1d:24:07:50:60:
91:23:6e:7f:0a:3a:4b:4a:1d:a7:08:c3:1b:3f:15:ca:7e:09:
a4:a7:77:25:d4:a7:79:b8:0d:be:6a:5c:c2:fa:a2:d8:f8:b2:
c8:7b:3f:09:c9:10:da:29:32:85:07:8c:12:89:77:b8:f8:03:
d9:aa:d8:ed:ca:c2:20:17:98:76:92:d8:88:c0:ef:4b:08:a9:
1b:d6:9a:7d:c8:98:e1:64:4d:1c:5f:36:9a:ea:c6:25:02:46:
ac:9b:0b:f9:b3:34:3b:49:61:4d:31:e7:10:4a:7e:be:4f:3b:
7c:15:d2:30:a9:e0:0f:71:24:fa:b3:72:be:20:63:27:81:57:
b5:df:c8:46:f9:52:e0:a8:1f:e4:6e:09:40:49:e2:3e:a6:06:
ff:73:0f:74:8d:35:b3:ff:a3:77:84:38:46:8a:81:b3:71:fd:
2b:a7:0b:c1:47:79:e4:de:54:3c:4d:5c:bb:62:00:33:ab:b5:
8b:8b:1b:32:d6:e2:df:b9:38:92:88:f9:13:dc:cf:27:ca:8f:
f0:17:08:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:30:26 2025 by rpki-client