Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RhEns2XLkUzYQxO8D1RbrHIuj0w.roa
File: RhEns2XLkUzYQxO8D1RbrHIuj0w.roa (raw, json)
Hash identifier: y1Lf3rlbrY8bG6YuThjgrv3+ozryFUaV15BQus1z9SU=
Subject key identifier: 46:11:27:B3:65:CB:91:4C:D8:43:13:BC:0F:54:5B:AC:72:2E:8F:4C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01887902E228903FD97B93A65FEAE6FFEB22
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RhEns2XLkUzYQxO8D1RbrHIuj0w.roa
Signing time: Thu 01 Jun 2023 22:10:12 +0000
ROA not before: Thu 01 Jun 2023 22:10:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:79:02:e2:28:90:3f:d9:7b:93:a6:5f:ea:e6:ff:eb:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 1 22:10:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=461127b365cb914cd84313bc0f545bac722e8f4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b1:81:5e:1b:39:f3:ed:22:31:7d:2c:d0:9e:
01:02:31:1e:15:9d:db:fc:6b:8b:3e:3c:db:b2:b4:
be:2d:75:f3:35:51:78:04:c0:e7:df:59:72:dd:dd:
aa:12:70:59:5a:49:7b:34:53:d9:92:e3:75:e1:d1:
00:bb:79:d7:1a:8a:06:55:40:04:56:49:9f:cb:09:
c4:80:1e:ec:dc:91:87:6b:a6:b0:0f:2d:bc:f4:96:
a2:0f:cf:72:2f:3a:fa:6a:e9:b8:20:4f:41:b5:7c:
3a:c2:bb:2e:6e:e1:b7:fe:b6:cd:a9:41:9f:cd:4f:
84:70:29:01:1f:da:ab:6a:f4:67:a5:04:c5:50:d6:
5b:d5:e2:1d:b0:a4:2d:c2:9b:cd:86:20:3b:5a:58:
63:73:4b:03:f3:15:06:9b:1b:af:a7:3b:6c:4c:3d:
58:cf:1d:51:52:19:e2:4b:d6:16:df:1c:fc:31:a5:
f0:c2:b0:20:9c:f2:2b:f0:46:83:25:1d:10:1e:2b:
2b:57:fd:2c:a0:46:b7:d4:d8:7e:13:4e:cc:89:9b:
bc:34:80:65:ea:c1:49:72:67:73:0c:56:e8:f6:ec:
fe:10:1a:73:84:19:e7:de:10:56:07:0b:dc:e9:a3:
0a:7c:37:d4:0d:67:31:50:51:90:11:52:48:0a:24:
dc:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:11:27:B3:65:CB:91:4C:D8:43:13:BC:0F:54:5B:AC:72:2E:8F:4C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RhEns2XLkUzYQxO8D1RbrHIuj0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6b:30:7e:9d:ab:7f:70:bf:88:f7:7d:af:1c:be:02:fb:d3:3c:
21:53:59:ee:7a:cf:4b:26:d9:07:9d:52:39:2e:7e:55:d3:94:
6f:87:27:a4:88:1a:57:f8:5f:a4:7b:1e:07:4d:a9:f5:37:55:
0b:7b:47:b3:71:43:4f:61:69:28:4d:67:87:45:81:eb:b7:a3:
44:d8:34:1c:11:c2:35:8e:89:ec:dd:e9:c8:e9:93:58:0c:df:
71:ca:5c:1d:62:c1:33:7e:b1:d8:ac:f4:ff:74:f5:56:1f:1b:
86:2f:3a:2c:45:e0:ac:b3:69:80:16:8a:2c:9c:20:44:ad:42:
e0:e7:42:e4:b3:d0:35:e9:93:48:4f:a6:1d:c3:8f:c5:51:58:
44:2c:ba:04:f3:13:d8:9c:0b:c4:86:f5:42:36:d2:e5:9b:73:
50:21:7c:60:32:4a:48:a4:d6:74:bc:46:46:d7:0e:b7:c1:00:
03:ad:56:03:5c:09:6e:2a:cd:0e:7c:a8:aa:14:f4:99:88:b6:
d0:8a:16:4b:b8:69:8f:f1:e9:21:e7:b4:77:94:c8:9b:42:50:
48:de:36:6f:4e:f9:fd:e0:7c:e4:06:fc:33:d4:d2:45:a4:92:
f9:25:71:1b:43:79:bf:bd:48:25:99:80:f9:ca:d6:55:dc:e0:
7a:02:04:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 21:48:00 2025 by rpki-client