Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RhdoF7_OVvk6su7ufBTxwp1YfhU.roa
File: RhdoF7_OVvk6su7ufBTxwp1YfhU.roa (raw, json)
Hash identifier: 0Inf16BsHehLujErf+Av5D+9hEX0DZvA7Pg/04+oDzM=
Subject key identifier: 46:17:68:17:BF:CE:56:F9:3A:B2:EE:EE:7C:14:F1:C2:9D:58:7E:15
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189B398B40E71C85351EF7D176664060D7C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RhdoF7_OVvk6su7ufBTxwp1YfhU.roa
Signing time: Wed 02 Aug 2023 00:14:36 +0000
ROA not before: Wed 02 Aug 2023 00:14:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b3:98:b4:0e:71:c8:53:51:ef:7d:17:66:64:06:0d:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 2 00:14:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=46176817bfce56f93ab2eeee7c14f1c29d587e15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f1:b7:94:c1:68:fe:0f:73:40:95:84:64:c5:
b3:91:75:4d:27:64:01:a9:fe:27:13:e8:15:7c:af:
dc:31:a9:74:b5:ee:9f:ef:e2:e1:26:71:9f:20:50:
c1:ad:29:1f:4b:89:f2:b7:50:f7:41:94:3a:c6:10:
04:d0:43:b9:a4:67:10:f8:89:bc:ed:03:08:28:20:
a6:12:2d:87:23:c8:e7:94:42:80:06:55:f2:cf:d4:
01:0a:e0:74:2f:a8:3d:20:34:47:77:1b:36:06:71:
f9:96:0f:f0:12:a9:21:a6:ee:df:2f:86:7b:99:af:
44:4c:60:7b:84:ce:8e:8d:54:30:a7:21:8f:bb:3f:
ea:c6:7a:b1:2b:e3:e4:b5:7e:cc:12:ea:4a:9a:e8:
92:b5:fc:67:dd:78:51:8d:ce:4c:21:e6:c6:c4:2c:
a8:47:49:0d:ed:1e:59:98:c8:a5:9d:fb:b1:13:ae:
40:97:56:71:9e:ed:87:3e:c0:0e:ae:21:42:55:30:
bf:e0:49:ed:01:13:0d:da:8e:da:6f:5c:d4:ad:89:
c6:b4:2f:96:da:bb:1c:20:a8:cb:ae:c8:f2:22:bb:
c0:a8:14:52:bb:ab:0e:ec:4d:b9:55:b1:9d:51:21:
4b:5a:36:e9:3b:14:73:c4:9a:b6:fe:f8:f3:2e:31:
c5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:17:68:17:BF:CE:56:F9:3A:B2:EE:EE:7C:14:F1:C2:9D:58:7E:15
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RhdoF7_OVvk6su7ufBTxwp1YfhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
85:f4:64:41:3d:d6:2a:d3:e7:44:b4:71:05:e4:b8:68:7d:bf:
5b:7c:85:96:47:d5:f7:60:46:52:b2:c1:d5:14:0d:15:26:64:
1f:35:7a:ec:8c:69:2b:48:3f:65:65:93:89:a6:b4:03:bb:e9:
79:d8:97:ac:5a:71:5a:86:35:b7:5a:c9:f4:77:76:30:67:3d:
d3:69:97:0b:02:78:be:7d:42:6f:23:75:d2:0d:3d:b0:d6:f7:
dc:3e:8d:58:de:41:61:ff:77:ed:ce:98:f9:f7:9c:fe:27:5d:
cd:bf:a5:e1:14:d1:3e:fb:81:64:cd:dc:55:20:12:a1:5e:68:
02:1e:11:a3:35:18:52:0b:75:dd:73:41:26:f6:51:01:f1:e5:
71:aa:16:9b:19:0b:ca:3a:27:a1:bf:03:66:1a:14:b8:ac:fd:
47:f8:a1:fc:6c:59:e5:de:14:ad:b8:6c:b4:e4:72:af:e7:6a:
48:0e:c9:54:d2:be:d7:b4:76:a2:3b:e5:93:b2:ca:7b:0e:5f:
a3:26:be:39:1f:61:36:ba:17:5c:58:bc:d9:23:2b:cf:92:bd:
73:6f:d8:ca:39:ed:f9:c8:42:22:3e:ee:ae:18:8c:9b:a0:2b:
fd:eb:1d:ee:bb:d1:a9:c4:79:73:54:e0:91:02:15:d1:dd:6c:
39:09:af:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 23:00:26 2025 by rpki-client